Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
File: XNhYOyEXQQSea7GalG2DGqvxGtM.mft (raw, json)
Hash identifier: ZbnPXr+i7uh6R7ydNdgyA5EvWGmYUEtJSOcW2LWqSfA=
Subject key identifier: A1:7B:19:83:EC:EE:8D:50:04:AB:7B:C2:BA:92:94:AA:A7:35:93:83
Authority key identifier: 5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3
Certificate issuer: /CN=5cd8583b211741049e6bb19a946d831aabf11ad3
Certificate serial: 01A1329068168C1DAF6A82F01B267A9D78A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
Manifest number: 19E0
Signing time: Tue 13 Oct 2026 00:01:26 +0000
Manifest this update: Tue 13 Oct 2026 00:01:26 +0000
Manifest next update: Wed 14 Oct 2026 00:01:26 +0000
Files and hashes: 1: S2GzX7bjyNfk8zuc_J7yDO8r8_A.roa (hash: 9cgwTQAZVGZH9VKGn5dJT7UJ2jaArnzhzVtmHDdrHjU=)
2: XNhYOyEXQQSea7GalG2DGqvxGtM.crl (hash: GuM8z/K6Dx2D3vhNwrj2iPeBoZbOrit1u/4EUyiUN6I=)
3: rSchH_WpkAQtklBw4R5ArVw7Etg.roa (hash: FQrYCtK1inx5vQ38kiI4C/z5+zK3xo4th9Fjypdt9nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 21:54:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:90:68:16:8c:1d:af:6a:82:f0:1b:26:7a:9d:78:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd8583b211741049e6bb19a946d831aabf11ad3
Validity
Not Before: Oct 13 00:01:26 2026 GMT
Not After : Oct 14 00:01:26 2026 GMT
Subject: CN=a17b1983ecee8d5004ab7bc2ba9294aaa7359383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3a:9c:6f:c4:8a:9d:c5:1f:2c:0c:6d:03:63:
eb:b6:ef:a5:62:7d:87:2f:dc:75:83:1c:42:c2:ad:
1d:58:ba:4a:cb:bf:5a:4d:f3:0f:40:3f:97:b4:d5:
e9:25:e7:68:5b:df:1f:34:98:81:9b:17:47:63:6b:
80:d3:34:f6:be:7b:d6:73:ff:8a:03:1c:25:61:dd:
c0:42:17:1a:3a:c6:80:5d:ac:8d:72:a7:49:9f:f9:
05:c7:1c:03:43:ae:73:05:d5:37:65:aa:d4:2d:0d:
92:a4:24:f4:99:5e:e0:23:85:85:5b:fe:81:65:13:
c6:09:f0:4b:31:eb:1b:08:81:3e:03:d2:0e:fe:d5:
b6:31:a4:c4:af:ad:c3:6a:9c:8d:4d:6d:c5:75:16:
54:b5:59:01:e4:f4:d4:4a:92:38:37:31:cc:f0:d9:
17:2f:d0:84:74:a8:70:ec:a9:c4:9e:f5:3e:ac:38:
99:5f:8f:55:50:f5:24:7c:33:3f:54:1a:ff:b1:a2:
a6:e0:2a:e5:01:58:68:0d:64:25:30:05:15:76:91:
3c:07:6b:2b:d2:57:79:d7:d4:5f:31:ed:11:be:e4:
bf:02:72:5d:53:e9:4d:6d:18:b1:a1:e5:f9:31:f2:
dc:83:33:21:f1:fe:86:b6:52:b8:0b:c0:88:92:30:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:7B:19:83:EC:EE:8D:50:04:AB:7B:C2:BA:92:94:AA:A7:35:93:83
X509v3 Authority Key Identifier:
keyid:5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:a5:36:95:cd:19:7c:4f:ac:9b:c6:ad:d6:a9:c5:81:da:72:
12:a3:c8:55:2f:f9:6d:b2:99:b6:ea:17:c1:cc:55:3d:16:d1:
78:63:2f:04:fa:20:97:31:44:19:6f:8f:6d:ca:a5:68:de:28:
a1:8b:92:c7:ab:c2:02:32:96:8f:7b:1a:45:eb:8e:c2:1f:4e:
51:e2:06:28:b3:8b:26:fe:92:53:33:10:2b:0a:f0:89:b8:16:
6b:4f:6b:65:86:65:e9:42:f0:06:e1:0f:fc:87:70:86:03:68:
48:9d:76:74:19:f9:13:32:f3:c6:de:21:b9:3e:28:df:c4:57:
31:17:00:b2:aa:f0:cf:60:01:f2:45:5f:8b:a4:0f:96:02:7a:
9f:2d:ab:10:28:7f:16:b0:80:ae:f4:fb:b4:8a:ca:71:04:28:
ed:47:63:85:a9:c9:64:7e:3b:3c:21:0e:e4:13:3a:07:09:ea:
83:97:3b:c1:83:21:99:4c:74:33:50:be:4f:bf:3e:79:0f:88:
94:9e:85:ee:a3:c8:b1:2c:da:a1:b6:ef:ca:36:2d:9c:ed:1a:
94:ad:c2:75:3f:62:f1:fb:aa:89:47:d3:99:ac:5c:99:62:e7:
78:34:cc:6e:4b:68:22:fa:78:30:c1:25:d9:ab:8e:5b:81:ad:
c9:33:7c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 05:43:30 2026 by rpki-client