Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: 2uIMhfZTmDWUzUOt/0kOMCT2XVoPJBe8UsLzdHOcGc0=
Subject key identifier: E6:56:05:51:75:59:E2:5A:E9:0E:4F:3C:64:CB:14:11:5F:D4:1C:33
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 01A131EB33D04B031AA4BAB9C44A80EFD356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 1878
Signing time: Mon 12 Oct 2026 21:00:59 +0000
Manifest this update: Mon 12 Oct 2026 21:00:59 +0000
Manifest next update: Tue 13 Oct 2026 21:00:59 +0000
Files and hashes: 1: PzMpMCVPdUDUUH8GTuka9keIPNQ.roa (hash: IKEP0LVD3JdV2nQIZoc3FzX3XZlJgMd0mFQnJDaVjxI=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: 4GxiIlKG2wxl4fYBlBWJmODt6Se1IFWsgi5F5Oo4k4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:eb:33:d0:4b:03:1a:a4:ba:b9:c4:4a:80:ef:d3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Oct 12 21:00:59 2026 GMT
Not After : Oct 13 21:00:59 2026 GMT
Subject: CN=e65605517559e25ae90e4f3c64cb14115fd41c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5d:45:75:bd:e7:4d:ea:9b:e0:42:5a:5c:21:
66:5d:d1:da:79:a8:59:a1:8f:a7:e9:2a:9e:00:04:
79:ab:7a:cd:81:91:60:97:2b:d6:75:50:84:3b:f9:
cc:72:aa:1b:4b:0e:50:64:d8:20:6d:5c:8f:45:95:
d0:44:3d:c4:12:9a:f8:cc:2b:75:f7:f8:f4:63:4e:
d9:f2:2d:06:9c:86:2a:85:5d:45:44:05:94:3c:e8:
28:9a:7f:6b:b5:cd:50:50:2c:f7:4a:14:3d:86:3a:
d7:b1:5c:88:c5:2b:af:1e:89:3a:e5:0a:3b:4b:e0:
f0:c1:b2:5b:ff:35:00:6a:b9:e2:e4:3a:50:a4:00:
29:3f:78:80:71:d8:a0:f7:f1:25:95:a0:69:5f:6b:
c3:c6:4f:04:43:66:5a:f7:98:c9:f2:5f:26:98:a2:
95:17:01:45:29:74:44:67:85:56:6c:d8:9c:f9:d3:
61:be:57:48:7b:50:b9:13:3d:ba:0c:2b:19:d2:d8:
10:3b:c7:5f:80:a0:dc:4c:c5:bc:09:5d:0e:33:c8:
d1:76:f7:f3:6a:c6:5f:6b:15:25:e7:a6:d5:59:a5:
fa:1f:b6:7c:5d:fc:e2:99:2c:a8:11:fd:c6:87:24:
d2:20:e5:4d:82:f1:51:fe:80:e9:34:47:e6:cf:57:
a8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:56:05:51:75:59:E2:5A:E9:0E:4F:3C:64:CB:14:11:5F:D4:1C:33
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:15:e5:6f:db:96:32:de:fb:72:0a:d3:eb:28:b4:d8:d2:4a:
9f:39:d3:42:33:89:c6:4f:87:db:9f:5a:b9:86:da:0d:01:86:
49:7a:13:9c:38:bd:bc:31:c3:88:1e:51:df:af:0b:1f:f3:ca:
e2:da:ce:f4:6c:63:d7:75:de:ad:18:0f:72:2d:75:22:15:60:
79:25:99:4d:62:f1:a1:28:4e:0f:a8:e7:11:ad:6d:25:6f:08:
24:20:fa:dc:87:78:1b:eb:ec:0d:ee:d1:15:21:9b:5d:93:96:
21:f1:e5:56:30:07:df:cc:39:23:80:4e:04:8d:a9:6e:00:94:
fa:fb:f2:43:86:49:f2:0c:54:4b:21:3a:db:92:26:5c:5b:a0:
dc:49:88:c3:1d:dc:b2:8d:51:e9:a3:fa:37:03:e9:dd:41:9c:
e4:5b:d0:4a:ae:e2:61:cf:6c:0b:9a:ca:1f:77:aa:b6:71:85:
af:2f:9e:9a:1d:51:b9:8e:7b:2d:e5:b0:da:73:c5:fc:b4:02:
df:37:14:ba:9f:05:e3:6d:a8:26:6e:5a:ae:84:56:4b:3d:15:
75:3a:87:2d:bd:1d:63:c1:6f:fd:3f:7d:58:dc:07:77:68:da:
1c:9a:04:88:d1:5d:ae:c5:04:5c:8b:ac:34:e0:bc:bd:3d:73:
5c:a6:33:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 23:38:35 2026 by rpki-client