Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier: qcdy8De//XKZ5Q251Jd+afQyD2fREGltgoxxFp6HNO4=
Subject key identifier: 11:3E:E4:02:77:FE:B2:F6:CC:B1:0B:18:57:7D:F1:7B:5C:71:4F:88
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 01A134111477ED02994E960733F1745DF652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number: 15D7
Signing time: Tue 13 Oct 2026 07:01:36 +0000
Manifest this update: Tue 13 Oct 2026 07:01:36 +0000
Manifest next update: Wed 14 Oct 2026 07:01:36 +0000
Files and hashes: 1: 1-rh3SVK_l4oC_Y7ih51PfkV69KE.roa (hash: NJ7OHlFB+x8OrDZE2G7eqZGbDxSKcSz5o8ZkkHAui3k=)
2: DmAsoEh_ftaKPOhVRscVORbXGKo.roa (hash: K5t41X9Sj7F3OsASCaPLgv9lGQLlL9EDWZMrPiqu4D4=)
3: Jj9JAsNkaCzVh3y4XWm1P_rXYU0.roa (hash: //DJwmMWuAhUHyp7ncUG1CBCwhEdbc8wN+6fYn+HdDk=)
4: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: 6vRewNbcCcpDkZTLHYTmJ8KBKx0kK9at9/7UCq+07Tg=)
5: qIrPTvkJoKHOpyB7wnhzahJKcVM.roa (hash: P67wuJBItbnZh+zC9ZR4+mPtRz9kxlpY/Ao75oEVWZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:11:14:77:ed:02:99:4e:96:07:33:f1:74:5d:f6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Oct 13 07:01:36 2026 GMT
Not After : Oct 14 07:01:36 2026 GMT
Subject: CN=113ee40277feb2f6ccb10b18577df17b5c714f88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:33:4e:8b:12:70:d9:71:78:16:71:dc:3b:89:
ee:c8:1b:35:e2:8e:25:3a:ae:35:3a:fb:dc:06:03:
38:85:06:df:20:0e:19:e0:a0:a9:e2:6f:e0:99:b2:
b7:17:bc:a2:d8:15:02:2b:79:bf:69:de:66:86:82:
e3:60:11:53:01:5e:5c:3e:d6:91:bd:85:46:2b:16:
69:bb:3b:82:cb:c6:86:91:6f:66:c2:5d:bd:02:3d:
6c:aa:c3:fd:1e:a5:f6:4e:0d:ec:63:c2:3a:22:85:
3b:d9:c1:a4:f9:c3:06:a3:79:64:cf:7b:a8:ea:02:
b6:55:10:1b:89:a2:89:ff:f6:73:cc:6b:f7:78:e5:
5e:19:e2:a3:b7:47:e9:c8:6e:11:05:24:15:c2:b4:
91:f9:27:e2:8c:f1:48:8b:55:39:b1:a9:3b:5e:28:
2b:29:ce:2d:6a:48:a2:e9:85:e0:ae:0a:dd:d4:c3:
91:2e:38:02:1b:e3:c2:34:3d:66:7c:de:94:e0:5d:
36:3b:0c:2c:46:15:b6:df:0f:a3:4d:e3:32:91:31:
f2:fa:a1:d8:50:d4:82:0f:f5:7f:44:ef:f0:99:56:
8a:db:44:4f:2d:76:e5:aa:11:8c:eb:34:79:1c:56:
3e:bc:85:76:b9:23:62:bf:08:9d:8f:c3:36:76:ca:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:3E:E4:02:77:FE:B2:F6:CC:B1:0B:18:57:7D:F1:7B:5C:71:4F:88
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:85:3d:5d:da:37:55:a7:d7:ab:4e:5c:6b:6b:a6:b0:70:23:
24:ef:e7:e4:40:8a:cb:0f:02:8b:26:40:72:ef:f8:be:80:2d:
1f:5a:6c:ee:ad:e9:7f:80:16:be:67:74:12:f4:11:79:0f:68:
f9:8b:60:2e:11:a0:1e:f8:f8:bb:74:d0:82:78:3c:c7:44:be:
0c:6b:b6:53:bb:35:dd:0f:2a:e4:7e:74:56:49:1b:0f:18:69:
48:d9:4b:67:12:ca:89:45:bf:e8:08:f2:1f:97:3c:e5:db:a9:
ac:74:d3:83:17:87:a2:0d:f6:11:1b:bb:2d:6a:51:39:16:78:
0b:88:b6:1e:4d:4f:59:41:c2:b6:01:f2:7f:d4:a2:7e:57:06:
de:79:0b:b7:4d:62:94:2d:5f:94:cf:f8:94:bd:e9:f3:06:8e:
11:fd:97:ae:fd:61:bf:8b:ef:9f:dc:6c:09:ae:55:a8:6c:5f:
12:ca:a9:c9:4b:dc:55:0f:81:a1:c8:24:12:07:81:4a:92:3b:
fe:82:c4:bf:a1:a7:c6:13:3c:b9:18:43:54:22:a7:e9:ba:72:
22:64:a6:73:fe:c6:f6:1e:08:7f:19:c4:f2:b1:aa:17:63:3c:
f7:cd:f0:66:a1:0d:90:48:a7:e0:dd:82:1b:29:79:3e:6a:7e:
3c:2c:e3:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:10:56 2026 by rpki-client