Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
File: XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json)
Hash identifier: gCxmhTJ/XXplX/lVEelQHdwRVYeEh99wDCdCWqF0zWQ=
Subject key identifier: 8D:6B:A5:E3:D4:55:14:13:28:50:86:3C:EE:FC:FA:44:27:BD:0F:13
Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
Certificate issuer: /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Certificate serial: 01A12F8F263EBB2FB70FDAE4FA976EA334E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
Manifest number: 03C8
Signing time: Mon 12 Oct 2026 10:01:12 +0000
Manifest this update: Mon 12 Oct 2026 10:01:12 +0000
Manifest next update: Tue 13 Oct 2026 10:01:12 +0000
Files and hashes: 1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: THh7qk3qCmoOZOFAq+LlbjI2X/YkDTygWIuVt//qffo=)
2: _a7gNZLlQxgHn1SWkyljxM4Vp8E.roa (hash: riqb9ZgtO6K145lOcaQYpYRovN3sqPG5Tn86hViYkIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 10:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:8f:26:3e:bb:2f:b7:0f:da:e4:fa:97:6e:a3:34:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Validity
Not Before: Oct 12 10:01:12 2026 GMT
Not After : Oct 13 10:01:12 2026 GMT
Subject: CN=8d6ba5e3d45514132850863ceefcfa4427bd0f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:e3:4e:20:36:e7:88:e6:3e:30:36:fb:9c:c0:
8e:31:9e:5d:72:5a:59:1d:06:03:61:74:96:d8:85:
9d:6d:b0:50:09:a6:af:6d:44:5c:9e:d6:b1:21:dc:
11:54:31:28:01:c2:cc:d2:78:40:34:5c:bf:27:b2:
40:34:dc:0a:33:47:ee:65:4a:a3:dc:c6:12:50:86:
1e:66:d3:da:8e:90:f8:bd:96:e7:48:c0:4d:1c:70:
91:b4:cb:7d:a4:26:31:61:9c:1f:45:1d:de:0b:1e:
4d:a5:f6:86:e8:d3:6b:a2:5f:5e:d1:36:39:be:94:
54:3a:04:19:37:01:bb:7d:67:a5:23:48:20:0d:d5:
41:39:25:c3:15:8b:67:cb:ec:9c:ff:dc:db:76:2c:
5a:16:cb:4f:3d:7c:8e:86:f9:3a:9c:21:11:5d:83:
fd:e5:55:3b:34:2a:b5:b1:fe:17:8c:48:ae:94:9f:
7b:2e:9b:71:42:c3:24:72:59:31:8c:9d:75:3a:cc:
cc:4c:b1:bc:11:6d:c2:ae:b6:06:f3:75:84:20:46:
e4:03:f7:3b:bc:bf:cc:14:f4:a8:cd:00:25:71:16:
b5:3b:14:ec:3c:9e:3d:2d:07:70:12:d8:b9:c3:8c:
ab:38:54:24:4e:94:45:dd:66:9e:d2:eb:11:b5:5d:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6B:A5:E3:D4:55:14:13:28:50:86:3C:EE:FC:FA:44:27:BD:0F:13
X509v3 Authority Key Identifier:
keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:08:35:ac:01:b1:26:92:5d:7c:75:dc:17:04:ec:7b:d9:45:
4b:07:c5:6d:db:8d:40:1b:dd:dd:e6:c0:00:2e:9d:1e:58:bb:
5c:89:0c:12:a6:c8:33:6d:18:32:62:c0:4b:ef:a7:5a:2a:ac:
c1:8a:0f:83:14:aa:4e:02:ad:d5:72:b3:49:03:5c:ca:cf:1b:
31:2d:9c:09:6d:0d:76:21:aa:85:e1:e1:41:2c:a1:a0:a7:95:
ce:23:aa:30:12:a3:47:f1:2d:38:f9:00:4b:76:92:82:a5:ef:
ab:a9:22:1b:2d:ff:4e:91:b4:86:cd:67:c4:93:be:43:a9:f2:
3c:ca:02:91:f6:f0:06:cd:4c:d2:03:5a:a9:11:3c:b6:6b:d2:
1e:1b:01:67:3a:92:3b:01:dc:91:73:b0:e6:90:36:e1:70:a7:
f4:c8:d5:e7:e6:5c:6f:6d:8d:e9:a0:3b:be:d7:1d:1e:7d:e2:
22:39:62:69:eb:4b:35:d6:a5:60:cb:90:67:64:c4:16:51:c6:
6c:ac:28:8f:7d:8c:ee:37:7d:89:58:cd:9b:87:88:02:0f:4b:
3f:b4:a3:22:4b:86:87:6d:80:b9:ee:ae:68:5f:a3:ac:65:32:
ea:5e:db:0f:af:16:98:3e:45:6d:5f:77:48:12:38:61:51:09:
09:9f:9a:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:23:07 2026 by rpki-client