Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier: VoyZh+2heKN3gdjqZhl8JUXEIbM+kJymFi/ZxVWTKfw=
Subject key identifier: 9E:C8:3E:83:49:83:94:ED:65:D3:8C:D3:52:89:C3:16:EB:75:A6:01
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 01A12AD766C865DFD9E3F5C116AF88197BB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number: 16D2
Signing time: Sun 11 Oct 2026 12:02:01 +0000
Manifest this update: Sun 11 Oct 2026 12:02:01 +0000
Manifest next update: Mon 12 Oct 2026 12:02:01 +0000
Files and hashes: 1: Sg_4XUAI-4zoY2AzgRoGFITRYgE.roa (hash: J1EWDPsgpuehOfFX0CglsLJx+tt5cw97sY3WgurbJXo=)
2: TeQy6kFDHKNYmWvI94KK1SajumM.roa (hash: 9uvICF7tqz4KyCQG2zRzp+9JspsGn3aZOu1Zg1a40nY=)
3: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: TBfiq1N97DpEFE926ny9J5rFHhTYs3SQiJijH7ayu6Y=)
4: dhOZf_4fAgQZi4_moQSI8o9EFj0.roa (hash: 5T/3rUQwrhAAxuFwErHVP6jvrc57b61OVidSPKCnMBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 12:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2a:d7:66:c8:65:df:d9:e3:f5:c1:16:af:88:19:7b:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Oct 11 12:02:01 2026 GMT
Not After : Oct 12 12:02:01 2026 GMT
Subject: CN=9ec83e83498394ed65d38cd35289c316eb75a601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:3b:a4:71:ef:59:5d:77:cc:1d:88:e6:af:6b:
6a:db:c0:c4:57:2b:13:a8:75:8f:e4:a7:b2:12:02:
9d:05:b5:10:21:d6:01:e9:fc:db:69:3e:ff:72:71:
da:b9:9a:5e:ab:52:a7:2f:4d:e0:84:72:53:41:1b:
46:27:a5:09:c9:59:d5:46:74:2a:ce:5d:40:80:5f:
bd:8d:a2:6b:ec:b2:02:be:d9:2f:1a:f4:7f:c3:0b:
12:e3:c1:c7:3e:05:6e:73:35:f2:74:5b:14:30:31:
0a:50:7f:e8:73:34:1e:dd:84:4c:cb:c5:b5:20:b0:
1c:e2:ac:5a:ac:9f:4e:9e:3e:65:0d:52:54:37:3d:
58:79:37:7d:29:f7:a0:9f:61:d9:c6:25:bb:89:b9:
90:ba:10:0a:2f:23:63:83:9b:0b:90:33:e7:18:ef:
9e:b3:5b:4c:07:5b:a0:0c:6d:16:bf:b9:eb:57:3d:
6f:d2:bc:6a:e6:de:a2:56:e8:09:32:93:97:48:42:
c8:78:b3:88:dd:e5:f8:ad:3e:79:c9:07:be:ec:e8:
b5:be:63:71:c4:38:17:dc:7d:d6:ce:e5:81:d9:1c:
92:b0:ac:e7:83:65:86:87:b6:5f:92:72:2d:4e:c9:
a6:74:d0:6b:a8:69:30:f8:8c:34:cc:18:2e:8f:c8:
c8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C8:3E:83:49:83:94:ED:65:D3:8C:D3:52:89:C3:16:EB:75:A6:01
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:39:59:a5:49:34:6b:3a:36:e0:61:78:56:ec:a0:bf:76:d4:
12:d4:e6:f1:ca:42:5c:19:87:bc:dd:2c:71:4b:42:7f:10:d9:
a5:87:96:e9:33:55:8c:7a:2a:60:60:31:66:c7:51:15:05:6b:
cb:7e:02:e4:59:7d:4e:d7:15:be:84:9e:1b:8f:a1:25:bb:7a:
a6:de:c5:8d:c4:71:40:34:ca:a8:19:6f:24:d2:73:bb:28:fd:
2b:ee:60:aa:07:93:af:c4:23:12:10:17:3e:40:c4:a8:41:60:
08:4c:ea:46:44:1a:31:2c:84:90:95:fc:e7:24:eb:89:25:64:
a0:e8:2b:a4:a6:3b:f0:31:53:7c:12:8d:e8:32:49:c9:0a:5f:
e1:53:ef:45:02:0a:10:2b:3c:46:4f:69:0f:d7:8c:78:31:c0:
ce:e7:26:c3:b9:ea:e9:72:5b:5d:c3:a8:26:06:da:68:a3:5a:
de:c2:c5:0a:c6:3e:dc:8a:02:d3:e9:23:02:57:ba:4d:77:d0:
e1:a7:d1:c5:3c:78:50:7e:62:ff:ab:f4:78:18:48:af:52:5a:
b0:fc:e3:01:a8:22:43:8d:6b:f2:e6:a7:5a:eb:42:99:6f:33:
ac:00:f8:24:e7:8f:54:51:5c:be:57:2c:0c:db:70:11:e9:e0:
1e:c7:e4:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 20:18:46 2026 by rpki-client