Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier: Oc9c09YUBxQPKfU0UmrGr1pwGh98EGzpG3JbEZPwAvM=
Subject key identifier: 31:9E:A4:CE:9C:DB:CC:88:1E:DB:BA:BB:53:12:66:41:57:7C:31:7E
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial: 01A138243DB48A558D4AD9A22A5AA20DA78F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number: 19A0
Signing time: Wed 14 Oct 2026 02:01:01 +0000
Manifest this update: Wed 14 Oct 2026 02:01:01 +0000
Manifest next update: Thu 15 Oct 2026 02:01:01 +0000
Files and hashes: 1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: mW0t+LqlGN7B9aLsKpAQih4p2f2hudysPWUTT3ufV6k=)
2: kk41E9wK0dMNp3UzVD82jZ-Xu_A.roa (hash: uelRjQS+f/j8WooWIB3/Gzm3JA/8BAj3iz0X2FN7kXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 23:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:24:3d:b4:8a:55:8d:4a:d9:a2:2a:5a:a2:0d:a7:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Validity
Not Before: Oct 14 02:01:01 2026 GMT
Not After : Oct 15 02:01:01 2026 GMT
Subject: CN=319ea4ce9cdbcc881edbbabb53126641577c317e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:03:d6:50:18:a5:18:23:76:e8:99:23:06:a1:
6f:86:bb:19:27:fd:01:58:78:e6:fe:81:3a:48:88:
53:93:59:81:1c:6b:9d:5e:ff:c6:9a:69:75:87:74:
25:9e:a6:f0:89:3b:24:1b:e9:33:d5:9f:f9:ba:3c:
e0:72:a7:47:9a:c2:ef:1f:f9:2a:ce:f6:9c:22:af:
0d:3d:03:76:e7:ba:28:5a:f8:ae:51:9a:86:9c:89:
32:b1:5b:48:c8:f6:70:e2:b4:08:91:00:43:de:3f:
a4:e7:95:f3:93:5a:19:18:05:d1:95:44:e9:c5:fd:
da:8d:4e:27:22:df:7a:d0:d7:23:87:48:fc:8a:fd:
c8:4d:95:54:90:54:19:27:50:82:50:bb:e1:1a:21:
d5:aa:af:77:b8:b1:5d:9b:1b:36:c8:18:64:0a:fe:
67:7d:c4:b8:54:94:96:2c:e9:4c:2a:ea:78:36:eb:
45:16:03:11:b5:1f:a2:3d:97:f1:f1:d9:b3:f9:d1:
f7:0c:c6:15:17:ab:b2:28:c1:64:0e:fd:f4:9a:da:
19:40:65:30:50:8c:35:8c:f5:6f:fa:b3:af:51:62:
32:fe:9d:2d:56:f4:e7:75:d8:d1:74:f4:eb:23:76:
17:11:f1:49:f8:a0:d5:0e:93:ac:6e:73:e3:61:b4:
14:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:9E:A4:CE:9C:DB:CC:88:1E:DB:BA:BB:53:12:66:41:57:7C:31:7E
X509v3 Authority Key Identifier:
keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:d8:c9:e0:69:a6:c3:e1:d1:e7:a5:9b:90:84:5b:5d:40:0b:
cf:07:0f:3d:f3:7c:95:d1:91:3d:cc:01:a7:e5:ba:9a:3d:46:
8e:c3:0d:67:b5:78:8a:f3:2d:c9:49:27:66:3b:e3:de:19:40:
84:74:4f:09:61:bb:e1:ae:dc:24:c8:97:fa:0a:45:a1:8d:7e:
be:21:c7:04:5b:96:5b:82:26:cb:bc:94:ac:37:a7:f9:f4:94:
bb:5c:49:6c:41:36:a5:76:a9:7e:82:62:0a:97:f7:18:9b:d6:
45:cc:86:dc:a2:08:84:02:0e:d4:e3:ee:bc:e4:37:6c:fe:9a:
60:b5:e6:b2:fb:5b:62:71:d1:f7:22:2a:5a:a3:23:b5:0d:fb:
53:97:33:9a:ce:71:68:82:22:b2:b4:cb:9c:8e:e0:12:d9:02:
11:32:19:dc:d7:86:c0:5e:0e:eb:b1:da:83:93:43:4d:59:d8:
bc:c4:9e:3e:fd:e8:70:4e:8e:f7:e3:b2:61:bd:ba:22:00:69:
08:5e:40:12:c5:84:37:37:91:b1:d2:dd:5d:4c:3d:9f:41:38:
b3:ae:d6:68:57:e4:ee:6d:fd:11:59:9f:fb:cd:2e:94:11:cf:
3b:4f:b6:0b:0a:23:c9:7b:93:15:1b:b8:22:26:80:94:b4:cf:
35:2f:66:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 08:42:31 2026 by rpki-client