Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
File: XG19h_rsSNykNp1oOM7sUa4r2Go.mft (raw, json)
Hash identifier: QCFcvsB0YHgtSVtzUKlQ0JPRD5YTSqnqgfh28l8tYrQ=
Subject key identifier: 07:14:8F:93:9E:8D:17:98:EB:8A:67:F9:30:95:B8:28:DC:02:B6:74
Authority key identifier: 5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
Certificate issuer: /CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Certificate serial: 01A1A9027157FC24D64EAB77523830CCB547
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
Manifest number: 1A07
Signing time: Thu 05 Nov 2026 00:01:11 +0000
Manifest this update: Thu 05 Nov 2026 00:01:11 +0000
Manifest next update: Fri 06 Nov 2026 00:01:11 +0000
Files and hashes: 1: 4DzAOv88kFIOqHCs_9bsjlv3GTE.roa (hash: caV7/tYU8DPcz0xZ4ImkoJhJu5r2VSnvWFC2mJf3l9g=)
2: XG19h_rsSNykNp1oOM7sUa4r2Go.crl (hash: Bimsgua40cSvMGncdV4cAfqbohBg8XPsjp8/FtexxZU=)
3: Xr8HVCskQg6xun5prnCIzcZjkDo.asa (hash: cbQLfUVcOltrT3hKriMzYIhs+4k54zFLAF9idDihC80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 00:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a9:02:71:57:fc:24:d6:4e:ab:77:52:38:30:cc:b5:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6d7d87faec48dca4369d6838ceec51ae2bd86a
Validity
Not Before: Nov 5 00:01:11 2026 GMT
Not After : Nov 6 00:01:11 2026 GMT
Subject: CN=07148f939e8d1798eb8a67f93095b828dc02b674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:21:38:fb:cd:8e:a1:17:aa:ee:d7:f9:0b:10:
52:f1:96:c5:e1:df:95:8d:c9:d2:e5:ff:64:93:0b:
69:32:f8:67:1d:09:be:5e:4c:ba:0d:dc:60:bb:ab:
86:0c:cf:52:51:cf:ac:3b:2c:70:bb:02:1d:6a:f6:
32:da:e5:3f:c8:f4:cb:fa:7d:7f:cb:27:51:82:3e:
5d:84:44:f1:c1:96:dd:33:ab:21:30:74:4e:c8:21:
d0:df:28:03:62:e3:5e:26:0c:0d:4a:81:06:24:f4:
ff:98:3c:53:3b:f2:04:38:2d:29:90:af:63:13:17:
31:27:80:1c:7b:3a:45:66:92:03:a5:80:b3:3e:90:
23:8c:e1:cd:93:cb:76:c4:1c:e8:f8:95:17:6c:5a:
2c:d2:db:ba:e3:e6:4c:67:da:dd:79:b4:0e:bf:46:
fd:e2:e9:fa:cf:6d:ef:9d:31:47:76:d5:69:ba:1b:
d3:9e:7e:44:8a:a4:10:23:8d:7f:17:c9:3d:cb:d4:
19:a8:74:2d:0c:09:13:42:1a:db:d6:00:bc:bf:4d:
01:46:63:97:ee:e6:2f:20:6a:37:e3:df:8b:71:c6:
e0:71:62:7e:5b:34:45:2b:8a:c9:5e:25:3f:9a:59:
59:6c:54:91:b5:f1:26:97:12:0a:72:2e:2b:c0:ba:
fb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:14:8F:93:9E:8D:17:98:EB:8A:67:F9:30:95:B8:28:DC:02:B6:74
X509v3 Authority Key Identifier:
keyid:5C:6D:7D:87:FA:EC:48:DC:A4:36:9D:68:38:CE:EC:51:AE:2B:D8:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XG19h_rsSNykNp1oOM7sUa4r2Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c439d3-8f81-4022-987e-e697c52dfc1e/1/XG19h_rsSNykNp1oOM7sUa4r2Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:9b:a8:d5:e3:af:f9:b8:fd:b9:a7:4c:6d:fa:28:d2:61:76:
66:db:0a:5d:d4:4c:73:d3:c0:47:57:de:49:5c:34:32:d6:c6:
a4:2c:50:5d:85:25:dc:bb:94:f4:bf:aa:e5:6d:32:ac:28:7e:
5b:f9:36:71:29:4d:0e:1f:6e:36:1a:63:19:84:e7:4c:90:74:
8c:f4:85:61:09:59:36:70:d8:0d:64:8f:1e:31:d2:a2:55:9e:
86:6d:7b:59:c8:2d:60:05:65:19:25:e7:dc:0f:87:8e:ec:11:
a6:2a:87:3a:62:4d:6d:2f:90:c2:89:32:a4:75:bd:00:9f:f5:
6f:bb:6b:41:f5:b4:ba:a5:95:3f:62:4f:fb:2a:80:84:6d:f3:
61:8e:94:0b:61:fd:92:e4:92:78:e2:6c:a7:b1:7a:0e:bf:58:
d2:5a:b2:d3:d0:da:54:0e:80:c4:07:d4:3e:9a:c5:5c:c9:51:
7f:4c:91:82:f3:7a:2a:1f:01:48:60:76:36:8a:56:d2:6f:87:
19:e3:56:ed:db:2b:a8:35:83:77:88:39:aa:f4:21:fb:38:97:
73:eb:78:fd:2a:2c:ff:61:2f:d0:0b:e3:af:ba:9a:9a:1e:17:
3b:85:b1:d0:1f:8f:cc:89:66:c5:04:aa:1e:61:dc:df:5a:81:
89:60:27:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 11:22:37 2026 by rpki-client