Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
File: XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft (raw, json)
Hash identifier: tDnVmLZ9SMUuCJyoWxdZyrdchLQL/X3OXKxOzUCGRiI=
Subject key identifier: 95:8D:96:16:2E:BA:EB:E7:68:D7:23:A2:D0:3A:FA:5C:1E:7A:9A:FC
Authority key identifier: 5E:E5:DF:38:60:B2:4D:DB:BA:57:3E:D0:48:D4:A7:23:0B:F5:B1:A2
Certificate issuer: /CN=5ee5df3860b24ddbba573ed048d4a7230bf5b1a2
Certificate serial: 01A1A9DF00F54ECD7C198A1FC550C9D46A3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
Manifest number: 01BF
Signing time: Thu 05 Nov 2026 04:02:06 +0000
Manifest this update: Thu 05 Nov 2026 04:02:06 +0000
Manifest next update: Fri 06 Nov 2026 04:02:06 +0000
Files and hashes: 1: 5AArOA0LkskA5tw5SWJx3j9Dv6g.asa (hash: g3ncVbCPorzKexZkECV8nZNdPxcAqa14QO98wuTocr8=)
2: XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl (hash: JkHZM5d5gd84awE9g6bu6DxvZkDU90WhNbe+A6Hnnxg=)
3: sZcKQ6cgnSFOArUoubXO-7UtF2w.roa (hash: i70yL5ZQtlkXeA37PkWypyq+6GqmS0P1o3XFiLGyrFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 04:02:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:df:00:f5:4e:cd:7c:19:8a:1f:c5:50:c9:d4:6a:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee5df3860b24ddbba573ed048d4a7230bf5b1a2
Validity
Not Before: Nov 5 04:02:06 2026 GMT
Not After : Nov 6 04:02:06 2026 GMT
Subject: CN=958d96162ebaebe768d723a2d03afa5c1e7a9afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:08:09:9d:ec:56:d2:06:d3:62:95:30:3a:e0:
47:c3:b3:90:65:88:76:ad:ed:44:95:26:2f:57:43:
30:9d:70:a4:ce:f7:5a:21:30:9f:31:83:8f:1b:f5:
21:c4:69:b9:74:47:13:66:ae:cd:53:b7:63:c2:f9:
c0:5d:de:55:f5:a3:26:eb:03:a9:b2:87:ea:25:5e:
a9:84:77:e8:62:d1:25:65:89:65:f2:1b:00:1a:d6:
c6:5b:c7:9f:5e:f1:0e:1e:f7:a2:d5:84:e6:eb:03:
34:61:24:be:f2:c5:33:85:b4:c3:98:e7:93:83:d4:
d7:e2:5c:9e:e9:0d:5d:e8:3e:d0:7c:21:55:14:28:
2b:51:25:69:89:ef:26:bb:8a:fa:c1:5d:ff:ce:d4:
52:6d:f3:0a:51:55:0d:da:fe:e6:f7:c0:54:d7:66:
02:2e:65:bf:3d:46:2f:96:e0:fd:75:6e:00:a6:b6:
eb:a5:82:22:2f:57:be:d2:cd:f6:c7:5d:ad:fb:eb:
87:e6:5e:2d:06:66:a2:6e:7d:89:50:6c:9e:93:e9:
44:ad:39:ed:c8:18:3a:35:c5:2a:81:62:07:22:ad:
2b:6d:14:88:c2:9c:b0:9e:09:df:1e:b9:d1:8d:e1:
bc:89:41:ba:73:e5:35:0a:9f:b5:97:08:6f:aa:eb:
f5:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:8D:96:16:2E:BA:EB:E7:68:D7:23:A2:D0:3A:FA:5C:1E:7A:9A:FC
X509v3 Authority Key Identifier:
keyid:5E:E5:DF:38:60:B2:4D:DB:BA:57:3E:D0:48:D4:A7:23:0B:F5:B1:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:e5:6f:37:c0:6d:b4:24:88:1d:8d:2f:51:2e:a0:71:89:c9:
5c:cc:a9:93:f7:f0:69:93:b9:34:28:97:16:a5:86:6d:3a:7d:
93:08:1c:52:fa:8d:3a:99:ee:81:b6:a4:e4:72:25:e3:32:d4:
49:35:b4:1f:b0:f8:4b:ab:3e:c0:4d:88:7a:e3:9d:e3:94:04:
a0:bc:2a:0c:00:a8:5a:82:73:86:1c:48:28:e6:e1:c5:d7:13:
fb:72:2b:99:15:bf:27:60:a8:46:4b:60:cd:d5:b4:67:f6:52:
5b:49:1c:bc:7f:eb:a9:94:2f:9c:8d:1d:79:54:71:9b:9a:f2:
7a:64:fc:4b:f1:bf:32:0c:b1:57:bf:37:4c:e3:47:35:c5:b0:
8e:85:d7:18:ef:7a:47:8b:de:53:ab:b2:b0:64:d2:e1:e3:e2:
0d:b1:a6:9a:82:d0:9f:c9:f0:a3:4a:75:2f:22:01:95:40:c1:
14:d8:e8:0c:d7:b1:bd:d4:9e:82:dd:ef:83:d9:33:6b:b0:06:
92:c1:95:f1:00:96:48:44:d0:7b:81:20:bb:00:7a:ae:f2:3a:
87:66:cd:56:26:0e:e6:21:30:f5:e7:a5:19:a2:74:25:cb:cd:
1c:66:64:fd:d1:38:30:39:c5:d6:ba:48:71:82:96:40:d6:86:
01:f2:a5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 16:15:33 2026 by rpki-client