Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
File: XEwop1rJaVHcOEAKgPnvOqryqss.mft (raw, json)
Hash identifier: OBf/oF/b2M+AHmLa0QFmjv2Ky+Ph19d3684b2FPPpVU=
Subject key identifier: 7A:14:09:6C:AB:A2:95:C8:3D:75:5E:35:DA:03:8B:E1:0E:CA:01:B2
Authority key identifier: 5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
Certificate issuer: /CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Certificate serial: 01A12B4408C71E592D0A89E4105027101BFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
Manifest number: 1A9B
Signing time: Sun 11 Oct 2026 14:00:41 +0000
Manifest this update: Sun 11 Oct 2026 14:00:41 +0000
Manifest next update: Mon 12 Oct 2026 14:00:41 +0000
Files and hashes: 1: 9hnY7Mi-DWWNXT8zxPWlDMpFkVY.roa (hash: KmgeWMyp8Cb4dRrZsFfQDYyQitlhpxsyGtinqL7w4YI=)
2: XEwop1rJaVHcOEAKgPnvOqryqss.crl (hash: fkc4V1nwhyS29aB0aI1BGh8+QbO363jJPb68NEeSBgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:08:c7:1e:59:2d:0a:89:e4:10:50:27:10:1b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4c28a75ac96951dc38400a80f9ef3aaaf2aacb
Validity
Not Before: Oct 11 14:00:41 2026 GMT
Not After : Oct 12 14:00:41 2026 GMT
Subject: CN=7a14096caba295c83d755e35da038be10eca01b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:e2:fb:f5:6c:8f:bb:d6:19:4b:57:eb:27:
4a:c1:3a:45:a2:57:e4:23:93:9a:88:56:f3:10:b4:
7b:c0:b6:13:cc:3e:04:22:45:ff:05:4d:1a:51:47:
2c:cd:7c:63:06:df:f5:de:3e:fe:84:20:df:ee:b0:
46:19:7a:20:0b:c1:3f:11:24:f8:a9:a6:43:65:7e:
94:cb:19:e3:e5:7b:72:b2:71:ad:71:fe:2a:83:7a:
db:23:9a:80:59:02:88:9d:a5:22:90:2e:1d:b5:6e:
7f:24:08:d8:a5:70:05:09:d9:fb:c3:4c:b7:53:92:
2e:f8:2d:ce:77:76:39:db:77:5a:15:ab:aa:72:be:
0f:1b:47:f0:0f:8c:97:16:ce:d1:f4:5d:11:2d:d2:
35:49:aa:45:1b:1c:47:47:e1:f2:92:6e:70:46:8c:
39:8c:ba:90:f0:fc:dd:ca:01:dd:be:7a:8e:4c:24:
7c:ed:02:ff:87:ba:df:9d:67:fe:77:bb:71:46:85:
af:7a:b4:8d:23:6d:f8:b2:c0:1c:71:3f:f9:81:3b:
24:81:e7:4e:39:ba:57:48:e1:8b:79:23:df:98:6e:
fe:f8:f1:51:13:74:b7:66:d0:64:9a:a6:5f:96:d6:
85:bc:5a:20:14:80:d9:03:2f:56:4e:aa:da:67:bc:
0c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:14:09:6C:AB:A2:95:C8:3D:75:5E:35:DA:03:8B:E1:0E:CA:01:B2
X509v3 Authority Key Identifier:
keyid:5C:4C:28:A7:5A:C9:69:51:DC:38:40:0A:80:F9:EF:3A:AA:F2:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEwop1rJaVHcOEAKgPnvOqryqss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0977ee-b98d-4a3e-b3af-67c76320186a/1/XEwop1rJaVHcOEAKgPnvOqryqss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b5:91:d0:b7:05:54:3f:6b:41:09:25:5d:fa:fa:30:93:73:
ee:27:0d:1f:03:ef:2c:bc:8f:e3:4f:70:7e:fe:a1:be:dd:2f:
3c:89:af:fe:45:a7:23:ff:cf:1a:51:4b:3b:0a:eb:7f:ab:5d:
39:b7:5c:27:b8:a1:58:ef:63:24:88:ca:17:9e:5e:35:06:c9:
f2:0d:4f:17:88:ea:62:32:2a:e1:c9:1b:97:fc:35:13:61:38:
5a:19:ee:1a:d2:43:18:8c:a9:61:56:f4:93:8c:00:35:be:7a:
2c:cb:92:6b:ee:8e:6e:01:f4:77:9d:06:cc:5a:7c:40:3c:ee:
76:16:55:28:2f:ae:96:7a:fd:17:43:db:27:93:80:3d:9c:01:
d0:03:81:80:6f:7a:23:c7:0c:66:19:0e:0f:e8:49:17:57:bd:
4e:31:6c:1c:e5:a8:31:50:53:7e:ce:60:75:58:78:15:1d:3c:
e5:35:e7:68:7b:70:7d:d8:40:8b:2b:02:1a:b1:b9:9f:e6:b0:
ca:58:0b:3c:d3:42:6d:83:1c:d5:95:b9:4a:2f:60:31:d1:10:
de:19:02:66:a0:fc:8b:e3:be:fa:6c:36:44:40:86:75:cb:87:
a7:ce:9c:90:80:09:1f:2e:46:f2:5f:1c:da:e6:66:ac:de:73:
8c:01:e5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:37:54 2026 by rpki-client