Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: qGxdOMsYrKW5icJ8SRmQHApj79yg67X5E0/Y81EQFMo=
Subject key identifier: BF:27:53:07:5F:1E:7A:6E:C5:12:4E:B8:A5:F4:C0:3B:3C:11:55:32
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 01A133D9AD9745BED89D6DECDCDBC106D803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 1AA3
Signing time: Tue 13 Oct 2026 06:01:06 +0000
Manifest this update: Tue 13 Oct 2026 06:01:06 +0000
Manifest next update: Wed 14 Oct 2026 06:01:06 +0000
Files and hashes: 1: 1kAOPGpT_yO1V9aiYjzOs8fosJ4.roa (hash: uKDlJs0NDCjfdYnB+MfIB/jlA65konDisvJIGcTDJUU=)
2: 9j1B5LLZDXYRtu0JrlF53YNgDew.roa (hash: enCaw1pzt1wj9vxuJHJ4PKIp1awPrJly1Aljj7nxS5c=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: D/kK6PuUeKRIf2QCxdcLVOKfUi56pBrUWVAMF9jvzxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:33:d9:ad:97:45:be:d8:9d:6d:ec:dc:db:c1:06:d8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Oct 13 06:01:06 2026 GMT
Not After : Oct 14 06:01:06 2026 GMT
Subject: CN=bf2753075f1e7a6ec5124eb8a5f4c03b3c115532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5a:d7:8d:37:1c:62:f8:b3:e9:f2:66:08:eb:
42:bc:f7:2e:82:8d:bc:30:55:ad:f1:6b:90:f6:fc:
15:be:3b:e5:37:ca:af:53:c6:d1:1d:ed:48:ce:f5:
51:94:70:4d:d9:3e:18:32:2f:86:30:84:05:20:2f:
be:af:2c:a4:c1:c3:5d:68:2e:94:7e:e3:87:8e:cf:
d9:51:28:a3:fd:8a:be:dc:c0:d0:50:75:e0:35:ac:
b4:d1:47:ca:1b:4e:22:ef:04:a6:7f:8f:99:ee:33:
01:a6:5b:29:7c:20:d8:76:9a:e8:fb:2b:84:6a:fb:
c5:2f:1c:9b:ec:b5:d1:8c:0e:cf:be:9b:42:d1:57:
70:7f:39:4c:9e:37:93:46:12:a7:fa:cb:a9:d3:86:
e0:23:7b:26:0f:aa:e3:d2:5c:8f:cd:59:24:39:2e:
54:4e:42:8d:86:94:42:e5:64:9a:39:db:aa:c4:6a:
84:c2:5d:9d:3f:66:40:17:87:8a:fe:04:c0:95:ff:
af:bd:a3:14:4e:34:f2:c5:8a:93:28:09:54:32:99:
0c:cc:3c:73:ab:98:72:08:f2:fa:a0:0a:5a:a2:0d:
9e:a1:e7:e5:f3:5c:11:da:19:d7:eb:3c:bb:2c:90:
05:e5:68:a0:d6:d7:a4:43:1a:c2:d0:24:77:a6:0a:
ba:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:27:53:07:5F:1E:7A:6E:C5:12:4E:B8:A5:F4:C0:3B:3C:11:55:32
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:68:30:f7:c1:69:fa:19:18:c0:f7:bd:b3:c6:af:34:a5:fe:
91:59:33:e1:a2:36:03:7a:ad:20:e7:87:c8:e8:ff:b0:d8:28:
3a:6e:0e:ed:03:65:b3:f3:46:de:e6:bb:c8:d9:61:60:66:7c:
e1:bd:b0:f9:08:49:79:21:2a:14:1f:24:3c:2d:e8:1a:3c:05:
0c:ec:59:66:9c:db:11:0b:99:aa:1a:51:0a:b3:38:9c:d3:ac:
ae:88:ee:9c:12:1a:40:24:ca:ae:6e:77:02:d5:f7:85:0d:54:
40:17:9a:44:5d:f7:04:0f:96:e1:dd:a4:a1:bc:d8:d8:ee:73:
ff:28:f1:fd:6c:7d:f1:80:d7:44:b7:4d:85:03:67:9b:e1:0f:
ab:da:49:8a:81:55:38:3d:fc:40:9d:00:a9:5f:40:82:d3:3e:
72:93:a3:c8:6f:f4:8e:72:c0:c6:a9:ff:4d:3f:fc:24:89:1d:
aa:8f:10:4b:a7:16:a4:13:51:35:06:08:9b:df:c2:c0:40:13:
7a:ab:e9:84:2e:ff:31:2f:1b:80:4f:fc:25:39:c9:be:d7:c0:
da:f6:f4:33:55:eb:52:6f:48:09:d7:02:31:7c:f0:ad:4c:4d:
01:de:35:6c:db:a8:8e:b7:d4:1a:b5:46:2f:7b:8b:44:a5:f3:
e8:06:02:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:06:30 2026 by rpki-client