Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: 71qHryv/ndVQg27HW32CvWnHeMFvqYvoBsWF9hjxiL4=
Subject key identifier: D5:A3:FD:DA:9D:53:0B:5A:90:F6:0A:FD:CA:DE:85:85:3D:51:FD:5A
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 01A0DF4EF7BE2A8998B61F5BCC3697297119
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 1A79
Signing time: Sat 26 Sep 2026 20:01:29 +0000
Manifest this update: Sat 26 Sep 2026 20:01:29 +0000
Manifest next update: Sun 27 Sep 2026 20:01:29 +0000
Files and hashes: 1: BVjAALpJvxuQy2GyePspuTkr6KE.roa (hash: n2Oqqyn+P3DE0EdI3BsAkGnYPcIXpRm9D9/3qqS3Klw=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: adPSxwReOJUZGOmwZPpYi94E5iMu9U2/CoaUeAd2ZeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:4e:f7:be:2a:89:98:b6:1f:5b:cc:36:97:29:71:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Sep 26 20:01:29 2026 GMT
Not After : Sep 27 20:01:29 2026 GMT
Subject: CN=d5a3fdda9d530b5a90f60afdcade85853d51fd5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:aa:a7:02:4e:b0:c5:f1:21:67:3d:9d:d6:0b:
2e:d0:3e:c6:c9:07:3e:2d:df:db:e7:7b:b8:db:99:
ff:0a:76:de:21:54:ff:fb:c4:c7:22:7d:3f:7f:9e:
18:fa:b0:6d:3e:92:86:89:ea:cf:f6:53:74:d8:49:
3e:0a:6d:e9:c7:c5:e6:61:5d:82:f6:5e:8e:0d:54:
3c:f0:e8:69:f4:56:58:56:94:10:e9:32:52:46:60:
b8:ef:0c:49:51:38:c8:d8:8c:33:97:95:e3:db:c6:
fb:ce:5e:52:2f:c9:53:89:b8:26:50:33:35:02:27:
3d:40:1d:85:99:59:16:7a:af:90:57:0b:a0:aa:61:
d4:1d:28:12:db:4b:95:1f:67:d1:4e:ee:ea:37:0d:
6b:ed:d4:fd:0a:6f:2d:2f:0b:9e:33:90:2b:d8:55:
48:08:cb:26:31:ef:ed:7a:6c:d4:3a:d9:6d:82:c9:
96:2e:df:60:4a:a6:28:76:63:da:f0:5e:9c:d9:7e:
36:dc:c4:67:85:22:a6:fe:17:d0:51:ad:6a:18:76:
fb:a9:3c:5e:72:ae:3e:68:80:76:3f:43:93:1c:f7:
c0:13:ae:54:a4:32:9d:3a:86:0e:fc:e7:01:5f:3e:
7a:87:da:2a:af:d2:02:04:37:ac:fa:dc:72:c4:e2:
94:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A3:FD:DA:9D:53:0B:5A:90:F6:0A:FD:CA:DE:85:85:3D:51:FD:5A
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:c8:53:c9:aa:02:31:00:6a:56:c8:ed:f7:f6:04:ba:8e:db:
2e:e8:96:45:86:84:e6:b8:7b:48:41:3f:5d:8a:d7:83:af:61:
bd:67:d5:d2:db:1a:4d:2c:1b:1d:1c:23:3d:5f:9b:78:d5:6f:
2b:f9:bf:4b:77:7d:26:e7:59:d3:3c:a9:20:21:50:3c:f8:bd:
bb:b1:07:40:ee:1c:27:14:9f:ef:df:a9:dc:fd:ce:83:b2:71:
62:23:69:29:71:ba:a3:93:53:3a:40:d4:b6:c4:14:e0:c7:8d:
e2:6d:4c:0b:c9:e2:02:48:8a:ee:ff:20:1e:d3:ec:0f:3a:f0:
ea:33:e2:99:6a:b6:cd:36:35:38:f5:2d:96:31:d8:71:c9:27:
95:09:9f:88:42:a7:92:19:ca:ee:02:d0:42:b9:28:dc:1e:37:
14:ee:8e:d4:26:d5:2a:be:3b:fd:17:f0:8a:49:23:22:f1:3b:
34:f7:8f:5b:89:2c:a3:44:45:a7:0f:43:3c:dc:04:94:bf:47:
7a:be:3f:18:52:da:b0:ef:69:bc:06:ab:c0:fc:f5:c8:df:4b:
63:c7:12:8c:6d:0a:e0:75:5a:e4:dc:54:84:78:57:1b:a0:29:
46:65:2c:7b:f7:6c:34:24:4b:62:8a:f1:8c:b0:27:e2:f6:21:
12:46:2a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:14:23 2026 by rpki-client