Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: Uz/EerPjsFXzesO1XK7eFN/fIXz1oq98+yuFGEJ/HWE=
Subject key identifier: 26:11:D6:27:47:33:4E:75:FF:88:E1:00:C7:A2:B3:98:B6:BA:CB:F1
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 01A0C9A20B0B658248B3FEB13652F107F850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 0863
Signing time: Tue 22 Sep 2026 15:00:35 +0000
Manifest this update: Tue 22 Sep 2026 15:00:35 +0000
Manifest next update: Wed 23 Sep 2026 15:00:35 +0000
Files and hashes: 1: gW00o8n4Rs81BAgnMAtJNPDGHdU.roa (hash: SSNtGXPA/36/YiPMJlKvxQTbaar7XDaEXBXVj0gHR90=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: /ZZZVJPlSrVeDumX1rxjG6BzATmh2WeMPrrgpGdmEuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:0b:0b:65:82:48:b3:fe:b1:36:52:f1:07:f8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Sep 22 15:00:35 2026 GMT
Not After : Sep 23 15:00:35 2026 GMT
Subject: CN=2611d62747334e75ff88e100c7a2b398b6bacbf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:f5:52:b2:ef:1c:64:ab:1e:cf:7e:83:ca:
d8:63:a1:52:1f:f5:fc:4d:14:4c:65:5a:13:bd:cc:
eb:20:56:94:e8:43:2a:4a:54:af:8d:9e:f3:1b:ba:
b0:83:9a:c4:da:10:60:6f:32:b7:b6:ce:77:3d:db:
09:59:c9:ec:3e:d2:6a:04:01:2d:11:aa:8c:f3:46:
26:90:17:d8:f1:f9:da:2a:16:9a:60:26:0e:43:a9:
d5:e0:45:51:7b:66:8a:3d:e1:1e:d8:dd:dd:bd:19:
0b:0f:97:af:c2:47:b1:8b:e4:2b:9e:6a:bd:6d:31:
1a:fa:4d:f4:fd:df:81:08:45:00:0a:60:3d:9b:af:
77:5e:d0:89:7f:ef:df:c7:53:9a:88:3c:c0:4a:2f:
10:21:88:0b:1b:e1:c7:13:1e:47:c3:b3:bb:a1:a4:
2b:66:20:e5:dc:e4:e4:fb:69:95:4a:2d:6f:63:74:
63:41:bd:2f:6d:df:53:4c:75:d8:3c:2e:27:a4:0b:
3a:f6:ee:e9:c4:c1:8a:3d:b7:9a:3e:72:ee:3f:c8:
c3:4a:44:e2:b1:13:a4:85:d3:e6:e8:d9:f3:62:9e:
58:7e:fa:79:12:2b:06:d6:67:38:0e:c4:7d:d0:b2:
18:bd:9c:91:8a:da:25:e8:2d:5c:0b:ff:cf:43:35:
47:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:11:D6:27:47:33:4E:75:FF:88:E1:00:C7:A2:B3:98:B6:BA:CB:F1
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:af:bd:30:2c:6a:ea:fe:00:6a:27:19:24:1e:e6:10:c5:d2:
7c:26:bc:0e:91:19:a0:9e:80:c5:e6:69:04:20:2b:c8:cc:c5:
42:c7:3f:e4:d6:d4:92:a5:18:b7:25:f8:89:9e:49:79:e4:7d:
b3:a1:16:92:5a:aa:11:84:a1:58:3a:41:a1:04:3c:9e:fa:80:
84:a3:f6:fa:fc:d6:0d:aa:e6:96:7c:5f:a8:9c:07:eb:b4:30:
0e:19:b4:6e:4d:d8:af:a0:a9:32:21:30:83:32:f7:a0:f8:36:
07:a5:6c:48:1b:0b:bb:57:37:31:e0:f2:ef:8e:74:72:cb:1e:
12:7d:c7:f5:81:9c:13:42:4d:b2:13:ec:6a:ec:b2:9b:25:d2:
84:17:54:b3:56:2b:27:35:74:08:80:58:56:8a:75:b7:86:88:
48:1b:47:89:20:95:87:f7:a5:b4:61:c3:8f:c7:27:6a:2a:c2:
77:09:aa:af:4f:cc:3c:88:e3:73:25:9d:fb:ab:24:12:25:d8:
f2:2c:c1:34:d9:81:0a:67:45:01:91:3c:4e:cf:5c:2d:ff:a6:
d9:fa:c3:3e:1c:b4:39:ba:19:7b:28:ff:5e:90:67:a9:49:e7:
30:a5:3f:8d:c2:2b:7b:d4:08:d3:49:b4:1c:88:37:f5:37:57:
3f:0b:83:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:17:16 2026 by rpki-client