Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: TEl95zjkeXjHJ6VGNi5+g5PN9tpQD4GoLkcateLMYyU=
Subject key identifier: 3F:B0:90:BC:57:11:03:41:23:E3:B3:A5:05:BE:4D:95:1C:EB:15:70
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 01A12F8EE7B9C87040C95B3382CE9A2AC808
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 08BD
Signing time: Mon 12 Oct 2026 10:00:56 +0000
Manifest this update: Mon 12 Oct 2026 10:00:56 +0000
Manifest next update: Tue 13 Oct 2026 10:00:56 +0000
Files and hashes: 1: 1yTxuvJTgzp3vueVNPtMM4HSlnE.roa (hash: C3mQ9ASRyTlSwgnHvOngoGQirohvWMvEni68YFNubqo=)
2: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: jEeR+3J/7c8iSDM0eXiuVBREgjeuF8d4EYEcgYJ+ltY=)
3: xweu5qCO47VIbmMKNVD40EQTVOU.roa (hash: 2Ggr+oJ9NSlt1DGrtrpkA0zHBUc5XOHY+zg99GvfTiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:8e:e7:b9:c8:70:40:c9:5b:33:82:ce:9a:2a:c8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Oct 12 10:00:56 2026 GMT
Not After : Oct 13 10:00:56 2026 GMT
Subject: CN=3fb090bc5711034123e3b3a505be4d951ceb1570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2f:cb:c7:ff:8a:c0:f8:94:24:b8:fb:62:46:
84:f1:c7:9d:ab:37:2f:8b:62:b1:6f:1f:4d:76:fa:
79:27:fa:42:12:c6:f3:80:1a:00:e7:8a:38:89:55:
5a:ef:94:d5:3f:39:5a:2a:d8:3b:46:72:13:9a:8a:
a3:43:51:da:81:af:fb:f0:b6:35:bd:29:f2:b2:82:
b2:b7:ab:e1:52:07:36:4c:ff:f3:ef:06:6a:7c:22:
02:78:7a:66:c5:5e:47:d9:ed:3f:39:67:9a:10:32:
f4:54:b9:0e:e7:fb:d8:1a:b3:c4:d1:66:0f:ee:df:
66:94:99:0a:f6:c5:4d:48:b5:3d:13:e9:16:0d:49:
27:59:b2:6f:7b:22:99:f2:73:5a:8d:fc:8e:3d:37:
c4:ce:5f:64:12:97:fc:47:97:0e:ff:a6:16:eb:dc:
ae:e6:af:af:91:2f:3b:8e:da:fc:46:58:05:24:86:
fd:e1:c9:b9:c1:1c:44:ed:e0:9c:fb:0d:28:f4:00:
7e:84:eb:61:41:d8:2b:8e:59:5c:a3:16:28:3b:9f:
39:dd:f2:94:00:92:58:bf:66:43:d3:04:a3:78:77:
a9:13:5e:21:de:17:71:4d:78:90:4f:fa:0a:cc:1c:
22:f1:b8:49:1b:d8:7e:d9:04:db:40:ef:9b:e0:8b:
5d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B0:90:BC:57:11:03:41:23:E3:B3:A5:05:BE:4D:95:1C:EB:15:70
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9d:5e:9c:45:68:a4:bb:c0:87:c5:97:d5:25:51:3a:db:50:
f0:8e:49:8c:28:7f:09:0b:96:82:50:90:47:cf:32:19:6d:27:
ba:3d:48:ea:ed:bb:8e:c8:3d:d1:25:a6:58:5b:cd:f7:96:5c:
60:c1:8b:80:ec:ca:85:2e:66:ea:78:25:65:19:57:7d:80:dd:
64:81:ae:c9:f6:26:be:e9:c6:53:8a:84:00:5c:fc:df:0d:6d:
01:73:c7:ee:ec:cf:f0:7c:00:a5:6d:0a:22:6d:1a:1e:08:39:
98:6b:be:f3:8b:e0:87:a3:ef:a6:58:ae:d9:7f:11:6d:a0:41:
a2:c1:b0:8c:66:89:98:14:b4:45:98:01:81:30:c1:1f:e8:e0:
c1:48:5e:b8:7f:61:a3:a7:ef:43:c5:56:13:30:c8:9a:67:ac:
eb:f0:0f:4d:7d:8c:07:d7:35:64:40:73:2f:6c:3e:52:76:09:
d5:55:75:ac:35:7d:96:ae:2c:c9:6d:44:21:56:0b:64:32:dd:
2b:12:30:f5:46:2c:b1:3d:69:b7:dc:46:0f:cc:1c:cf:21:5c:
a7:c4:53:a6:2f:d0:52:31:36:64:76:51:f1:82:c8:8b:00:9e:
9b:3e:2f:a8:ef:cb:ba:bd:39:d0:12:7c:8f:78:47:63:88:ff:
a1:65:ae:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:37:52 2026 by rpki-client