Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
File: XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft (raw, json)
Hash identifier: gTNm1qGXc8zmkRJulRntl/RUd0v4+WfFv5h93iEvQCw=
Subject key identifier: F9:2B:D9:68:2D:F6:E3:38:CA:8B:5E:FC:23:42:E5:5D:A1:FD:91:9C
Authority key identifier: 5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
Certificate issuer: /CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Certificate serial: 01A12C57A1D03DCA21ED7FF4AE8E414B2EB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
Manifest number: 0116
Signing time: Sun 11 Oct 2026 19:01:42 +0000
Manifest this update: Sun 11 Oct 2026 19:01:42 +0000
Manifest next update: Mon 12 Oct 2026 19:01:42 +0000
Files and hashes: 1: XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl (hash: szm0taKm8fwonBSH/JmVXQaOrID0pNutY7sG/AMfuOE=)
2: dVeZzKDi_fO4mE5HHo16sVmtMMU.roa (hash: 1r2T0D/7NQ/zB+ziH9iXBQGlu0LN0IlUyw0vofrt4CI=)
3: lldCsQ1hgTCDcrFWBWU0S5eC1nE.roa (hash: PQn0MUfrufkEibOpWiDwl2hJpMI+Yw+jzN0Z4rlm5DI=)
4: whybmoJ3UH-tZcQj28IxhxnuNWU.roa (hash: XoXTuKuWN/G+ZqFwydqG+jUtoRxuSHXL1j3ltwwohOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 19:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:57:a1:d0:3d:ca:21:ed:7f:f4:ae:8e:41:4b:2e:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Validity
Not Before: Oct 11 19:01:42 2026 GMT
Not After : Oct 12 19:01:42 2026 GMT
Subject: CN=f92bd9682df6e338ca8b5efc2342e55da1fd919c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:4b:7e:de:de:0d:25:84:84:22:dc:33:e9:
5f:fb:7a:fc:ca:49:6e:f4:fa:ef:99:8f:4c:ac:4a:
1c:ef:f1:fe:0c:39:d5:be:c4:ff:04:e2:fb:72:b5:
c1:26:1e:69:70:a3:25:40:c6:74:21:3d:c4:d7:1d:
b2:95:4f:e9:11:03:b3:fa:07:a4:d8:11:83:b6:ae:
03:97:5e:57:97:31:3e:85:f1:36:b1:a9:08:46:e5:
16:8e:92:0d:e6:18:97:c6:e3:f1:15:f2:b5:32:b0:
df:22:fc:16:a4:97:0e:47:73:96:e1:16:9c:e6:92:
bd:b9:9a:a4:7f:b0:c1:81:a2:27:17:d7:2d:fa:4b:
df:c3:b2:9b:50:d8:ac:f0:70:aa:e6:82:8b:06:a3:
fa:08:1c:79:2f:69:01:04:28:ca:12:c6:45:4b:66:
16:5c:9c:36:c0:08:14:09:fb:96:c7:a7:cd:85:8e:
e4:87:51:8c:c5:32:a6:f1:2d:da:e7:d0:1b:b8:b1:
eb:52:ca:60:9b:49:42:05:ae:e6:bc:df:7c:a2:2c:
e8:d0:3f:f0:f7:b4:cd:2e:35:c1:30:98:55:2c:98:
6a:ab:4f:c0:ea:ee:3e:a1:0c:f5:d7:42:84:16:76:
37:3e:26:50:79:18:f0:48:47:12:26:df:13:76:73:
bd:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:2B:D9:68:2D:F6:E3:38:CA:8B:5E:FC:23:42:E5:5D:A1:FD:91:9C
X509v3 Authority Key Identifier:
keyid:5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:91:6d:f2:35:d3:34:4a:d1:dd:41:94:ae:ac:a5:f4:3b:f6:
5d:05:71:e7:46:55:97:1d:95:e3:ba:db:f4:1a:f8:5f:e1:57:
64:7d:64:39:85:6e:c4:7b:c5:f9:37:db:06:5b:88:ed:c3:4e:
f5:cd:6e:35:fd:dc:0c:cb:1e:e5:cd:f8:c7:e8:cf:85:c5:e9:
67:14:30:13:e6:6c:6f:ee:0e:36:43:03:24:ed:82:fe:08:b9:
8e:79:cb:ff:12:95:0f:e1:40:e7:51:eb:06:95:83:85:ed:5b:
55:6a:c5:03:93:b1:78:15:65:c7:fa:ce:72:4d:53:50:15:b3:
e5:3e:cb:df:fe:bb:4c:17:72:10:7d:43:53:03:ad:1f:61:52:
45:4f:7a:9a:19:2b:a6:48:6f:b7:cd:57:9e:78:92:59:6f:b9:
6a:85:e7:72:1b:00:c0:bb:dd:ee:3d:9e:ec:88:21:51:f6:ca:
93:4f:37:55:12:5f:42:84:51:a9:47:c6:16:8f:36:c4:db:b3:
c0:b0:d7:26:94:28:eb:15:5c:a6:47:1c:4a:98:d5:7d:ba:bf:
91:9f:ff:78:f7:51:9d:c5:64:69:c7:f6:a4:1b:a5:f3:52:e8:
41:f8:bf:e6:dc:bb:26:82:bf:dc:39:76:46:ce:2b:d7:e4:08:
d0:31:5f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:37:35 2026 by rpki-client