Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
File: XiZI8SkNRHG821C4K-TtkyADCU0.mft (raw, json)
Hash identifier: COld0YFO/CIeQYTZsZG1VpxD8tVbuozHgtjB4hu/D74=
Subject key identifier: EF:D1:F1:E2:09:5A:EF:C7:21:04:C9:B8:4D:72:52:32:FA:E9:62:AB
Authority key identifier: 5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
Certificate issuer: /CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Certificate serial: 01A128437C4E8597DADD0793B87057330AF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
Manifest number: 1A2B
Signing time: Sun 11 Oct 2026 00:01:13 +0000
Manifest this update: Sun 11 Oct 2026 00:01:13 +0000
Manifest next update: Mon 12 Oct 2026 00:01:13 +0000
Files and hashes: 1: XiZI8SkNRHG821C4K-TtkyADCU0.crl (hash: ZxP9ekkmmdP/UspFOtF1jkrZ7OcVTjm/fJyjbYjFo/A=)
2: sq8rzyi0UVog1iS5Ju1CZc-6dl0.roa (hash: hTNSZci/jvQbgI5g6zcbraZud5VHWLa8WEC2pVISMYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 00:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:43:7c:4e:85:97:da:dd:07:93:b8:70:57:33:0a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Validity
Not Before: Oct 11 00:01:13 2026 GMT
Not After : Oct 12 00:01:13 2026 GMT
Subject: CN=efd1f1e2095aefc72104c9b84d725232fae962ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6e:b1:8e:60:f2:be:e6:e7:6e:b9:09:d4:4c:
3f:b1:ef:ee:4b:1e:a6:58:c3:83:b5:13:da:d9:4d:
f9:28:24:9d:3b:ca:05:3e:75:0b:69:38:31:d3:6b:
e6:15:f2:53:ca:b5:7b:19:b5:95:af:d3:bd:fe:56:
d7:ea:8b:42:bf:f7:45:59:03:b0:8d:34:4d:fb:74:
f5:96:9b:80:99:19:1e:ec:6c:9e:24:4f:da:b5:16:
8c:52:5d:bb:7e:d8:51:c1:0b:63:b7:a0:ad:f8:02:
dd:ff:42:03:e2:cf:20:14:0c:de:2e:24:a4:a3:33:
61:e8:40:f2:42:76:20:eb:c9:83:f4:63:dd:72:2c:
ea:cf:1d:62:82:f4:c7:77:94:c5:d2:58:81:46:86:
be:e4:07:76:46:b7:68:28:44:d6:b4:4f:99:3f:46:
28:6c:38:71:a3:f9:36:c7:ec:d6:0f:c4:65:98:3a:
4b:24:8e:ed:9c:a2:c5:d3:12:67:60:33:a8:71:01:
cf:af:65:58:88:8c:b1:7d:59:b0:f4:da:0f:49:8a:
19:6f:f8:a9:f7:42:46:d3:a8:d4:bb:5c:75:d5:49:
06:38:09:35:bd:89:8a:21:a6:d9:68:58:00:9d:56:
20:6e:fd:3a:21:24:dc:1c:ba:63:38:90:fd:2f:a6:
b2:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D1:F1:E2:09:5A:EF:C7:21:04:C9:B8:4D:72:52:32:FA:E9:62:AB
X509v3 Authority Key Identifier:
keyid:5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:8e:d6:7c:2d:85:f8:05:b1:e2:0c:b7:90:89:a3:87:f7:19:
1c:28:5d:34:c0:90:d5:da:7a:f4:f9:e2:4e:9d:d5:6c:76:d9:
f0:ae:84:b5:f7:0e:c7:4a:33:88:b8:f9:7e:17:6e:b0:44:33:
c3:90:00:52:d2:c1:75:e8:48:d1:e8:89:1c:70:e1:bc:45:9d:
da:d7:7d:38:a5:ad:59:3b:3f:68:60:10:b3:0c:f9:55:cf:75:
27:09:cf:fe:ab:4a:59:fd:04:23:c2:7c:ba:c7:e3:e4:24:f5:
1d:be:ca:aa:71:ff:e9:1a:64:4a:9e:3a:8c:f7:94:0a:fc:24:
1a:92:39:a8:b8:2e:d4:64:31:44:38:f3:48:31:5d:87:67:cc:
6c:bb:03:08:d5:2e:d9:07:4b:29:67:cb:ba:85:45:d9:81:2c:
ab:8c:db:be:b2:68:40:65:58:de:14:36:1d:d0:3d:e5:32:eb:
62:7d:e8:b8:5f:e7:40:42:93:d7:11:dd:a5:e8:33:b3:67:b1:
16:48:a9:57:6e:f5:43:21:11:06:28:4c:24:e3:67:8c:ac:8c:
1c:53:fd:f3:c3:f1:d7:97:49:c7:3a:c8:d6:50:7a:d1:3d:63:
40:8b:8d:ae:12:a4:9c:99:88:de:6f:53:16:0c:c2:15:e9:49:
58:70:5f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:54:34 2026 by rpki-client