Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json)
Hash identifier: gaY74LNdZDAhngx+aRLX4w80OdXkrLuWHc2NBSWJrkQ=
Subject key identifier: FD:4D:CD:25:C4:71:7C:DD:D1:ED:74:EF:C4:57:22:20:97:D4:FF:6E
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial: 01A12B44823EEF465BB58F57BECEB2E2362E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
Manifest number: 1607
Signing time: Sun 11 Oct 2026 14:01:12 +0000
Manifest this update: Sun 11 Oct 2026 14:01:12 +0000
Manifest next update: Mon 12 Oct 2026 14:01:12 +0000
Files and hashes: 1: NrZRCuerFzj4EhFGKoh_NKbZNxM.roa (hash: 5QAUpIfqv2CVCHxJDOL189fybpsclOVK/PxPIJsB8Xs=)
2: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: A6SFWSY8n9kzyMfWdHOfT6oi4KnCvqfAx0cQUrUjQtM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:82:3e:ef:46:5b:b5:8f:57:be:ce:b2:e2:36:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Validity
Not Before: Oct 11 14:01:12 2026 GMT
Not After : Oct 12 14:01:12 2026 GMT
Subject: CN=fd4dcd25c4717cddd1ed74efc457222097d4ff6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9e:b9:0a:f7:60:6b:c2:e5:7b:21:68:4e:8e:
bd:f3:cf:ee:56:0a:78:4a:86:fa:4b:5e:fc:dc:15:
cd:f4:a3:7d:7e:31:0e:9c:be:37:06:5c:20:85:5c:
ad:17:ff:a1:23:f7:29:bb:a0:00:ea:78:61:71:ed:
57:5e:47:c5:7f:e4:96:23:45:1f:8b:46:49:aa:01:
b6:4e:3f:f6:e0:a0:52:2a:b0:40:43:de:34:f7:b9:
5f:6a:57:35:27:aa:8b:0c:33:1c:78:c4:88:77:9f:
e5:51:80:03:aa:84:fe:8b:32:2c:63:3d:fd:af:6a:
ec:a3:11:99:c5:b6:9e:c6:35:2b:f0:7b:b3:aa:99:
88:64:5a:52:0c:6f:a5:de:40:a7:09:11:05:0f:1a:
36:73:26:d5:e8:63:da:af:fa:c6:e3:c6:ba:51:11:
2a:14:17:9d:ca:5b:6e:63:c5:98:73:0b:43:91:4f:
f2:a2:89:25:77:8d:04:be:72:4b:98:d5:f2:93:dc:
cd:51:26:a9:c7:7d:89:83:ac:4f:29:a8:32:9b:17:
44:60:8a:62:00:5d:f3:f3:cd:f3:e4:1f:d9:2e:58:
da:15:42:3c:50:f4:94:f0:05:1f:b4:6f:03:cd:01:
26:88:66:5d:89:3d:92:b9:32:0e:81:a0:f1:60:19:
35:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4D:CD:25:C4:71:7C:DD:D1:ED:74:EF:C4:57:22:20:97:D4:FF:6E
X509v3 Authority Key Identifier:
keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:ff:55:14:10:c2:02:5b:1d:59:d0:36:9c:25:38:01:82:53:
09:a9:41:1c:a8:25:b5:95:34:0a:37:a5:9b:22:b0:2e:25:2e:
d3:f6:7c:c2:be:7e:5a:b5:38:bb:61:45:13:ba:32:4b:db:ee:
af:37:c2:80:70:c9:99:70:91:b4:0a:af:6d:b8:6e:46:7d:1b:
6b:6c:a4:87:36:27:db:93:2c:07:8e:a1:6d:a3:9e:f7:3d:b6:
5b:e2:e4:88:aa:64:ad:20:38:00:c2:c4:08:e9:ae:02:14:90:
a2:80:8f:83:8a:9a:55:62:50:44:fb:33:c9:be:3b:ed:5e:5e:
ee:f9:3a:fa:cd:33:5f:ef:45:5f:4f:37:b4:68:c0:40:fa:2d:
04:99:c9:c0:f1:0e:37:79:67:81:d5:d7:07:cf:2a:ed:13:f5:
df:55:55:f0:04:8e:1d:d3:37:26:26:43:1a:84:52:60:e4:00:
58:d1:77:d1:e8:6f:5c:ad:09:a3:d8:a3:c7:e3:be:35:30:63:
dd:b7:6e:8a:2e:cf:83:85:dd:4e:25:b1:19:70:5d:2d:9d:9e:
e4:ae:53:43:2b:d8:09:f2:d6:94:9b:47:a4:f5:fc:fc:83:f7:
b9:eb:c6:ab:29:95:1c:bb:ff:03:31:37:45:9b:a3:7c:29:66:
a6:4e:30:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:51:25 2026 by rpki-client