Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
File: XiZI8SkNRHG821C4K-TtkyADCU0.mft (raw, json)
Hash identifier: /OCNCIiq6AB6oxPt3eeWzZuyzBKwvzssOAn2wvyUggQ=
Subject key identifier: 17:B5:FE:61:28:D9:5D:48:A0:2E:C9:43:05:AF:4A:AE:AE:F5:E8:88
Authority key identifier: 5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
Certificate issuer: /CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Certificate serial: 01A126553BE6CE57512EA98DED4209CB9C3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
Manifest number: 1A2A
Signing time: Sat 10 Oct 2026 15:01:22 +0000
Manifest this update: Sat 10 Oct 2026 15:01:22 +0000
Manifest next update: Sun 11 Oct 2026 15:01:22 +0000
Files and hashes: 1: XiZI8SkNRHG821C4K-TtkyADCU0.crl (hash: IPYHmFgp8O9oACLBhrEYCISMps5YVMuAEUUQBtQG+vE=)
2: sq8rzyi0UVog1iS5Ju1CZc-6dl0.roa (hash: hTNSZci/jvQbgI5g6zcbraZud5VHWLa8WEC2pVISMYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:55:3b:e6:ce:57:51:2e:a9:8d:ed:42:09:cb:9c:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Validity
Not Before: Oct 10 15:01:22 2026 GMT
Not After : Oct 11 15:01:22 2026 GMT
Subject: CN=17b5fe6128d95d48a02ec94305af4aaeaef5e888
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:08:91:0b:3f:93:cf:64:71:8c:8d:f2:6a:0d:
cc:dd:68:42:a6:f7:13:16:5c:b4:2a:05:73:c7:5d:
e8:d0:bb:f0:cb:d5:52:d6:60:1a:fe:ad:59:f2:b1:
aa:38:11:32:0a:cf:e3:5c:6b:29:d9:3d:76:bb:b2:
4b:57:f1:41:23:ac:8f:20:4b:1b:70:12:a6:80:b6:
8e:49:9d:32:29:89:72:57:8a:a7:67:8f:eb:9d:f3:
de:cf:b9:c0:e2:d8:79:1c:b9:fb:15:4d:db:b9:c0:
66:16:f3:ad:69:ec:5e:09:81:28:51:35:81:d0:c8:
1b:9c:73:f7:c8:1b:ec:92:78:e5:2d:bd:95:0d:7f:
32:ce:a3:02:1d:0a:7d:19:76:87:7b:ce:f0:7f:66:
0d:56:0f:96:a7:f5:d5:3a:87:c3:82:4b:ab:16:d0:
4d:c7:f4:c3:b3:84:89:45:24:32:35:72:b6:3b:00:
0d:c8:e9:6e:fe:d7:6f:20:7e:88:9b:ff:f5:26:31:
81:9d:79:a2:85:4d:88:48:a2:df:aa:de:f4:1e:a7:
f5:42:1b:03:77:39:a8:68:82:55:e2:25:01:d7:99:
be:20:25:12:1a:10:41:11:55:9d:bc:5a:73:7d:a3:
1a:1a:ff:34:69:44:96:f2:1f:f2:8a:ff:48:5a:82:
ac:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B5:FE:61:28:D9:5D:48:A0:2E:C9:43:05:AF:4A:AE:AE:F5:E8:88
X509v3 Authority Key Identifier:
keyid:5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:da:fe:77:74:3e:7c:1f:5a:c3:e6:30:16:c1:36:21:0c:89:
4d:b4:27:32:58:0b:e3:5b:bc:15:76:6b:7f:3f:f1:0a:59:7f:
98:47:a8:95:b0:ba:26:01:a8:ab:6b:da:f3:03:5f:7f:22:fa:
ef:d7:5b:6c:a4:fa:ab:cb:e8:b1:d2:1d:72:94:74:c8:2a:6a:
dd:b2:af:bb:8e:98:3e:1f:a7:b3:33:3c:11:1c:2f:11:ee:96:
d9:2a:c8:71:c8:7c:6a:8c:48:15:d4:9a:65:5b:63:bd:a7:27:
4c:dc:1d:ce:85:43:41:71:ad:fa:7d:5a:1b:aa:3a:04:8b:ad:
25:7c:6c:58:06:4c:21:03:95:df:c0:67:02:ad:27:03:0f:0b:
6f:e2:91:c5:18:41:29:f0:6d:17:3e:6e:f2:e7:b6:b0:74:eb:
61:72:8c:78:e5:95:dd:17:d2:25:65:5d:2c:d7:09:94:7f:1b:
42:ab:38:6a:be:86:0a:94:c1:ca:27:f7:ea:c4:b1:22:38:6b:
6d:ff:fd:8e:67:d0:81:85:fd:62:40:cb:c8:59:96:78:3c:73:
22:96:9f:8a:f9:e7:81:3a:07:8b:42:3f:84:8f:2d:29:17:7c:
a7:83:46:3d:63:67:91:63:86:63:52:69:2c:3a:ce:01:c4:94:
ba:1b:d9:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 19:56:34 2026 by rpki-client