Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
File: XDDZUEYzG9zjAYt__g8T2_n8cY0.mft (raw, json)
Hash identifier: Y/irWyE4jxDdWBjfZYckv7lyHk2g4FoNXZoBEAV/DPw=
Subject key identifier: DE:A6:B3:82:E9:23:7A:51:3F:93:1B:8A:0C:EC:32:8F:F1:EC:D7:C0
Authority key identifier: 5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
Certificate issuer: /CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Certificate serial: 01A12C57359ADEC4AC9E086182EAA8C50121
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
Manifest number: 1A9A
Signing time: Sun 11 Oct 2026 19:01:15 +0000
Manifest this update: Sun 11 Oct 2026 19:01:15 +0000
Manifest next update: Mon 12 Oct 2026 19:01:15 +0000
Files and hashes: 1: XDDZUEYzG9zjAYt__g8T2_n8cY0.crl (hash: Q1tu+ujJl9eYB4BOemuJc+gkXZmjRSUeVh3pEgFmEAM=)
2: i7ahmmzCoN5G9N5UQomOHHe69RA.roa (hash: GGCZiPMQLo6nn63tOlWXS7/n5qwIMxP1oeej8rFYFvI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:57:35:9a:de:c4:ac:9e:08:61:82:ea:a8:c5:01:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c30d95046331bdce3018b7ffe0f13dbf9fc718d
Validity
Not Before: Oct 11 19:01:15 2026 GMT
Not After : Oct 12 19:01:15 2026 GMT
Subject: CN=dea6b382e9237a513f931b8a0cec328ff1ecd7c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e6:0a:48:af:b3:dd:fb:93:53:07:26:cb:39:
95:2b:01:d7:90:a8:be:cf:ec:01:b7:5f:f2:7a:e1:
1f:34:0e:8f:5e:9d:73:23:94:11:a6:d1:7f:9d:33:
66:62:ed:c8:1e:04:69:68:f0:cc:2f:50:4c:cb:c5:
df:88:0c:0e:25:bf:62:2e:63:12:8c:bd:6b:4a:66:
26:6d:e3:2b:89:2f:71:cb:da:3a:fb:33:5a:88:53:
0a:76:c0:b0:8a:96:60:63:f7:48:3e:5c:84:a6:de:
9d:6d:3e:70:3d:a1:3e:5e:ab:e4:2d:a0:43:72:5b:
36:7d:c6:49:3d:f3:4c:63:80:6f:a4:6b:36:d5:e8:
07:3f:10:ee:f7:3b:be:81:7f:94:b5:e6:a6:b6:a5:
51:51:10:58:47:98:56:d6:e8:15:1a:5e:ad:f6:4a:
eb:7a:7b:62:8b:41:2c:05:a0:a7:dd:17:14:f9:55:
9a:eb:0f:fc:23:57:96:a3:1b:15:dc:0e:c5:97:11:
5d:1d:01:7a:24:f0:6c:b2:cb:df:7b:a0:04:98:c9:
47:8e:66:ea:dc:5b:45:ee:82:74:71:a6:1b:41:bd:
bf:5a:61:eb:e3:87:6e:21:28:a7:02:cb:06:43:c8:
7d:c6:62:9d:63:28:7d:40:cc:7c:7d:aa:06:c4:f7:
4a:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:A6:B3:82:E9:23:7A:51:3F:93:1B:8A:0C:EC:32:8F:F1:EC:D7:C0
X509v3 Authority Key Identifier:
keyid:5C:30:D9:50:46:33:1B:DC:E3:01:8B:7F:FE:0F:13:DB:F9:FC:71:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDDZUEYzG9zjAYt__g8T2_n8cY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/8983af-5c18-4bc8-a3f5-07509191f953/1/XDDZUEYzG9zjAYt__g8T2_n8cY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:71:dc:b7:1e:ef:38:bb:f7:6b:03:8d:d6:92:38:42:02:19:
7a:65:90:25:bb:9f:92:ac:fd:2d:d9:f0:33:03:02:ed:c3:af:
93:df:9d:56:76:f4:28:90:21:7b:d7:43:6b:3f:c1:10:d0:a6:
02:67:3a:4f:56:d4:40:1d:70:58:46:fa:ae:df:3f:03:4e:3c:
77:8a:3e:5d:94:18:e9:ec:6d:ef:e3:2b:61:26:24:d5:2c:21:
f7:6f:f8:94:e1:5c:b3:09:ca:e4:6d:ad:3d:d6:24:83:28:78:
a3:d1:d3:32:a8:a4:8b:8c:74:ab:55:77:de:26:02:62:c3:c4:
fa:07:d6:35:ee:f9:d7:27:e4:da:1e:65:a2:1a:61:e7:c5:63:
25:cc:41:99:fe:92:07:1b:c0:85:95:ef:f4:d6:ba:53:7a:e9:
15:6d:9a:91:da:5f:1e:fc:c4:e4:67:2b:0b:d8:1a:27:9c:62:
01:ae:ce:a2:ed:04:69:ca:39:f4:3d:a7:53:d6:c7:84:c4:7e:
3a:35:84:6d:27:e4:31:a5:cf:fd:0d:8d:82:6b:fa:9c:3f:56:
12:76:6e:a9:94:e4:67:f2:f2:94:c1:eb:d6:dd:df:8c:81:92:
0a:83:a2:e4:1d:d1:b1:7a:ea:b1:84:50:5b:53:8d:95:68:c8:
2a:62:50:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 02:15:46 2026 by rpki-client