Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: my0F4y36OGwXR7KrGiswDMiNgdzdpn1DtE9X/oJZJBg=
Subject key identifier: 6D:17:67:E4:46:94:63:93:51:76:41:5F:D6:E5:EE:67:35:34:38:37
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 01A12F8EC82FD2C28E916D17554E0BB5D5B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 1A9D
Signing time: Mon 12 Oct 2026 10:00:48 +0000
Manifest this update: Mon 12 Oct 2026 10:00:48 +0000
Manifest next update: Tue 13 Oct 2026 10:00:48 +0000
Files and hashes: 1: NKg93JWQUnBu80RX13MwmqJxvVc.roa (hash: nG4jnHVVr/B/zg5snhsHaHEVH2wq5BQYMoc/wJLZKCM=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: bBN7TGQdGm27RW+AbS02EtRTSdUfHD+mKbJLNvqEtjA=)
3: wGoncIYhxzrOvpFggApuVrKV4Vk.asa (hash: S/6luEA1foPNyWEYWaj/UsXwLkgTP/ejkSFX9YYjOE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 10:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:8e:c8:2f:d2:c2:8e:91:6d:17:55:4e:0b:b5:d5:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Oct 12 10:00:48 2026 GMT
Not After : Oct 13 10:00:48 2026 GMT
Subject: CN=6d1767e4469463935176415fd6e5ee6735343837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5a:07:70:fb:28:a7:73:16:a9:59:ba:5f:76:
41:30:45:5c:32:90:d7:81:bd:f8:5b:e9:0b:df:74:
12:eb:2a:eb:68:7d:c9:5f:e8:b8:12:bc:2f:59:f7:
dd:9d:62:4b:7d:76:15:8f:b1:d6:22:bc:ea:1a:55:
d1:58:84:7c:3a:7d:a5:87:ef:f0:a3:6f:e6:24:1a:
b4:bd:5c:2e:0e:d7:2b:45:29:ae:12:2b:35:da:b5:
8b:d2:4e:15:42:a7:ba:7f:74:58:1b:9b:97:26:cd:
60:cf:8f:32:fb:de:b9:14:bd:26:1f:7e:5c:7b:50:
64:c7:06:d8:ed:90:a2:4e:b5:d2:b6:ca:ac:87:c3:
e3:0b:20:70:50:85:2a:d1:f0:fd:e8:15:c6:c9:62:
e2:b5:55:d1:8e:30:6e:64:f3:db:09:bb:43:fc:51:
13:0f:90:ab:3a:8f:78:41:cd:b1:51:e1:83:9a:1f:
9d:6b:ce:cb:32:58:04:d3:6b:d5:c7:16:b5:80:fb:
6a:2d:a9:c1:35:d1:31:cf:6c:46:fe:4c:f0:a9:39:
da:b0:2c:1f:b0:99:01:38:6f:e4:7f:a8:5a:2b:6a:
d9:9e:56:69:c8:4f:5d:b1:66:ec:35:32:b4:9f:cf:
56:d6:4e:4e:10:3d:98:6b:79:5d:22:fc:53:30:72:
fa:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:17:67:E4:46:94:63:93:51:76:41:5F:D6:E5:EE:67:35:34:38:37
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:7c:ca:03:35:f4:70:fa:46:c1:b0:b3:4c:d1:75:41:74:99:
0f:c3:d5:01:90:36:2c:27:fc:db:6f:6a:9d:8a:48:b8:5b:95:
6d:06:c1:d7:1c:79:1b:96:d8:0d:3a:e9:ca:9c:c6:33:e2:dd:
8b:51:11:5d:d9:ff:06:95:57:a0:02:ee:5d:73:44:fa:17:27:
11:1c:44:98:56:4b:e6:aa:fd:da:76:ad:c2:1f:a4:ad:eb:50:
38:70:d9:28:0c:0f:71:aa:8a:f5:7d:67:4f:b4:f3:ce:9b:63:
1d:89:dd:4f:47:a0:79:7a:c8:c1:3e:c0:e6:88:89:a4:ab:3d:
a9:73:f5:c3:ed:32:ee:24:db:3f:d3:71:2b:a6:48:b8:fe:32:
93:df:a0:bf:cf:0c:bd:b0:02:1a:fb:ac:ee:41:66:06:ef:fd:
60:ac:8b:61:da:f9:98:de:fb:2c:cd:63:c6:0c:4b:33:2b:32:
35:f1:9c:91:3f:e3:61:8e:62:2b:80:b2:5e:a4:64:7a:5c:20:
ef:f4:26:7d:7d:ea:2c:b1:79:0e:61:47:a6:bd:6d:08:d5:c8:
8a:ca:1e:e3:10:ed:cd:18:7d:42:ca:0b:25:0f:39:aa:7c:98:
c8:4c:6e:ab:9c:30:47:14:d3:67:56:6d:39:f1:2e:9b:c2:bd:
5d:af:08:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 20:24:46 2026 by rpki-client