Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: dVgwKGX63cJzonYmmR8pfEyoErdBci8UiCXHOaGRU40=
Subject key identifier: 15:FA:2F:1D:C4:75:F0:6F:F9:CB:9F:2F:70:87:F5:49:DB:7E:09:80
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 01A1C743FF2A89DE82F92E86E19AADCE10D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 1AEA
Signing time: Tue 10 Nov 2026 21:01:24 +0000
Manifest this update: Tue 10 Nov 2026 21:01:24 +0000
Manifest next update: Wed 11 Nov 2026 21:01:24 +0000
Files and hashes: 1: Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa (hash: Ykk34DqNXHApsE9nxxAgQ38pONoyVUESYWMP39kBFzk=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: shCkKOEL9m5fuACZdaK1BcRu5ZQmrXMJm/pN//qiGFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c7:43:ff:2a:89:de:82:f9:2e:86:e1:9a:ad:ce:10:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Nov 10 21:01:24 2026 GMT
Not After : Nov 11 21:01:24 2026 GMT
Subject: CN=15fa2f1dc475f06ff9cb9f2f7087f549db7e0980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:e0:67:50:21:72:49:da:82:5a:77:e6:5c:
c0:36:66:b1:10:71:07:d5:2f:37:06:88:b4:d6:86:
67:00:d1:77:88:68:60:2c:fc:df:0f:64:5d:dd:ba:
0f:b4:70:73:1d:4e:b0:d8:97:ec:69:ff:9c:43:d8:
c9:78:b5:ea:77:89:c4:19:ca:35:04:8c:b8:67:86:
fb:61:41:6c:5d:a7:a4:5a:8f:36:9d:ea:77:08:c0:
6a:c7:c5:85:a1:fb:33:9d:28:fc:dd:90:70:2b:2b:
ec:67:75:5b:a9:bb:d4:68:28:16:90:19:f2:75:0d:
16:55:d5:74:1d:45:1e:bf:c8:5e:7e:b9:e2:96:40:
dd:7b:92:d0:ab:65:25:f5:d1:21:e0:5f:4b:21:64:
b8:64:ef:52:37:0b:1a:0f:7b:d0:b8:18:5a:b3:32:
87:53:8d:24:08:78:55:3b:83:cb:f8:53:64:44:5b:
ec:32:07:4c:16:09:c6:09:73:11:4f:44:dd:d1:53:
d4:8e:d9:3d:fd:46:f1:a8:ff:04:25:db:56:1d:c7:
1a:46:6b:9d:6e:6e:5c:b9:d6:6e:15:67:e0:8d:03:
01:c3:cc:02:57:e5:0d:87:bd:ed:c1:8c:67:5f:e0:
c8:21:65:a2:8d:58:cf:41:e9:6a:41:d3:ba:24:28:
7d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FA:2F:1D:C4:75:F0:6F:F9:CB:9F:2F:70:87:F5:49:DB:7E:09:80
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:19:10:76:a9:6f:6b:d0:a2:1f:df:12:0f:9b:46:65:2a:8a:
d0:fe:8e:5e:c8:93:5c:4e:fb:f3:e4:2c:06:17:8a:15:89:28:
60:7d:b3:f1:42:a2:a1:e2:83:7f:6c:e0:3f:89:fa:85:31:f0:
2c:27:43:4a:b5:e7:ae:91:af:ab:63:c0:3d:53:35:df:d5:d7:
28:06:8f:2d:22:9e:bf:d6:7d:ab:50:64:82:3a:19:7e:12:c7:
39:dd:b1:42:36:86:26:24:48:35:93:97:b6:d0:e2:d6:10:d6:
c8:73:c3:fc:5e:39:50:c6:d0:cd:a0:7a:b0:12:f5:61:1d:b9:
a5:02:f1:ab:bf:61:14:f1:ff:98:92:b1:33:81:f7:f4:0b:bd:
a7:48:11:d9:a5:55:f5:48:82:51:bc:3e:87:8e:aa:45:40:50:
69:0d:63:19:93:4a:4c:16:d4:97:66:3c:de:19:e1:19:fa:1b:
6b:43:d2:51:76:82:ee:2b:df:d6:d4:68:d2:45:c1:b2:6e:bc:
06:39:c5:46:88:ff:2a:e5:e1:e9:89:2c:18:55:54:43:de:a8:
1b:d2:d8:b7:1b:e5:0c:0c:5b:f4:9d:ba:60:f1:b7:c7:51:88:
50:9d:18:63:ec:74:8c:87:56:07:36:a2:9b:ea:c5:80:1e:26:
a0:12:63:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 23:28:11 2026 by rpki-client