Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: leZB0lFPbdHRdijhXfm/AsCKYMVa00kJ6/sf8fQwzGg=
Subject key identifier: 2E:98:7F:AE:3A:E7:82:9F:42:02:BA:29:0B:A2:4E:2C:C8:4E:9F:9F
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 01A1314626BF95823CE17A9027165A1973A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 1A9C
Signing time: Mon 12 Oct 2026 18:00:43 +0000
Manifest this update: Mon 12 Oct 2026 18:00:43 +0000
Manifest next update: Tue 13 Oct 2026 18:00:43 +0000
Files and hashes: 1: 0ZEt5hO5jk8I5B1ric3lV5QOPjY.roa (hash: 2SzUB4ARPZ7+BuiAiToaYolTUFVyZHL4/odctgbUciE=)
2: PX4jRvV2Is0w59EuWq6-Cko1_qM.roa (hash: o5zSrmvOazS6EGtXXnfbpDTf59xV6PS54zdbjnXbBvw=)
3: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: 4Al5PEACyOstzUb6COrr+0pCvTvIVPU8i45jA56JweU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:46:26:bf:95:82:3c:e1:7a:90:27:16:5a:19:73:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Oct 12 18:00:43 2026 GMT
Not After : Oct 13 18:00:43 2026 GMT
Subject: CN=2e987fae3ae7829f4202ba290ba24e2cc84e9f9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0f:c7:5a:db:83:73:33:a7:0e:36:96:d8:7c:
7b:a0:c0:0b:02:04:4e:95:db:51:7d:c9:82:48:f6:
4d:ef:f4:33:ca:e1:d7:4b:81:b5:d5:b0:d8:d1:0b:
d6:7b:c6:6a:4c:72:8c:85:a6:fe:8f:c5:cd:47:81:
e1:2a:30:e5:e7:43:ae:67:2d:37:0c:d7:dc:bb:a9:
00:3b:40:fe:94:ca:f3:10:95:8a:0d:27:2d:76:ba:
5e:ef:fd:33:75:41:d5:c6:65:5e:6b:6b:13:e8:e9:
5c:24:bb:fb:e8:69:50:31:31:28:32:8d:d3:a3:a6:
14:ff:89:b2:e9:49:82:14:d0:b9:e8:a9:90:73:60:
4e:71:9e:89:46:19:2f:c1:b3:25:de:bd:4b:d0:46:
c6:bd:89:6e:0a:cf:af:b3:63:74:52:0b:4e:da:e0:
00:3a:f4:44:84:44:b1:dc:2f:15:9b:02:9b:2c:6d:
ee:0c:d7:81:77:ed:5d:ea:2a:31:f7:b6:61:18:e0:
46:e5:85:98:d3:88:9d:7c:e9:ef:9c:ff:ec:f2:fb:
ba:5f:7e:5d:7b:6e:ff:ea:e9:66:ad:34:1b:af:80:
84:8c:4f:8f:d3:3f:37:db:53:f6:f7:94:99:79:c1:
89:0c:61:32:1f:da:14:3a:2d:e1:62:9d:0d:fe:49:
7d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:98:7F:AE:3A:E7:82:9F:42:02:BA:29:0B:A2:4E:2C:C8:4E:9F:9F
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:81:96:74:a0:0e:69:20:67:c1:51:ce:92:98:b0:65:2c:70:
e0:7a:b2:8c:2a:68:27:38:23:74:c4:59:9b:e0:85:5a:11:1a:
f8:aa:23:5c:3c:1b:ec:9a:e7:77:1a:21:c0:8a:0c:8d:cc:de:
d5:f8:2f:c7:82:96:1f:80:9f:7a:d0:3a:45:da:eb:ac:dc:e4:
dc:19:5c:b6:22:0f:f0:ed:76:46:3c:d3:b9:0e:b2:50:b4:ab:
b4:1d:70:88:72:c8:7e:8d:2b:1e:99:4c:4f:52:ed:82:1b:15:
19:11:31:ec:40:7d:b9:04:5c:92:29:76:38:35:04:27:b6:bf:
d1:83:b5:df:de:a8:e0:d7:70:60:a9:93:9a:41:38:9a:5b:5d:
fc:15:2c:3f:d8:02:dc:0b:75:ae:83:67:4b:94:6a:2a:cd:90:
25:d5:cf:7b:78:99:ef:fc:50:df:d5:50:2b:b8:b2:4d:eb:48:
e0:f2:fd:04:03:e2:52:ec:65:9e:b7:fc:fc:d2:38:9d:60:b6:
25:45:46:b4:e3:9c:97:bf:4d:de:11:4d:e4:ed:ac:48:52:04:
88:bb:11:d0:1b:75:da:56:ee:96:5f:e7:86:7f:38:18:c0:a8:
f3:01:d3:f1:41:bc:6f:40:28:95:d9:c6:85:fa:d0:29:6f:fb:
d9:ff:2f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 02:57:27 2026 by rpki-client