Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
File: Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json)
Hash identifier: J3GfJzPLKedct1CEuG6BHBlgmfDrrr4r66IWxeh10rw=
Subject key identifier: 41:BF:22:9A:6F:9D:80:86:F2:E2:56:C0:C0:C2:2F:44:CA:7E:11:8A
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial: 01A12F219035E65EA873186BF854D25732D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
Manifest number: 11FD
Signing time: Mon 12 Oct 2026 08:01:31 +0000
Manifest this update: Mon 12 Oct 2026 08:01:31 +0000
Manifest next update: Tue 13 Oct 2026 08:01:31 +0000
Files and hashes: 1: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: DipE2FQY9YYHQ+Ny+I1KDFf4bxWCS8RnOvq7yoZSsIc=)
2: yeEabSTnkLeywBVAwxOdpvb42Eo.roa (hash: PvqV+kMqmAte8XfLn6bjSK6JChkDgm/iDFgeeMv/yOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:21:90:35:e6:5e:a8:73:18:6b:f8:54:d2:57:32:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Validity
Not Before: Oct 12 08:01:31 2026 GMT
Not After : Oct 13 08:01:31 2026 GMT
Subject: CN=41bf229a6f9d8086f2e256c0c0c22f44ca7e118a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:11:7d:08:96:ea:c4:33:43:ee:6d:ed:15:b3:
2d:70:6b:15:cd:0d:07:b2:26:64:bf:20:f6:da:3a:
7a:75:16:99:fe:df:81:84:99:9e:aa:06:29:2b:40:
c9:35:9b:5a:a8:42:23:8c:df:3e:38:3a:06:f2:b5:
59:f1:6c:14:29:79:a6:63:9d:84:c7:bb:72:d6:9a:
cb:7a:1a:8d:58:d2:64:42:64:d1:ab:41:10:28:61:
4f:88:bd:4b:fc:7e:07:35:1f:fe:de:11:bd:ea:83:
fe:9e:16:be:e1:c3:d4:7b:0a:73:27:2b:41:54:ee:
ea:52:af:57:90:46:96:29:d7:2b:57:63:06:60:7d:
db:49:86:a3:99:77:33:cb:b3:6d:85:63:2c:c5:f4:
55:73:3e:de:71:2c:e6:30:91:27:c3:36:b4:93:c8:
fa:62:25:70:11:66:8f:93:f0:a6:4b:cb:16:03:a7:
ca:cf:77:25:ee:eb:77:68:be:1a:8a:ff:2a:cd:77:
b2:61:b4:26:ac:a7:dd:bb:83:63:0a:55:3d:fc:79:
ae:99:25:ca:53:a9:27:62:d6:ff:99:a8:2f:6d:a7:
b7:e7:a5:d7:5d:58:d5:1c:b0:aa:71:87:08:a8:80:
e6:3c:dc:54:05:4b:25:e4:66:33:0a:a9:1b:59:9e:
d5:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BF:22:9A:6F:9D:80:86:F2:E2:56:C0:C0:C2:2F:44:CA:7E:11:8A
X509v3 Authority Key Identifier:
keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8e:67:2e:69:d8:35:d7:97:0b:15:05:c0:99:2a:7e:c8:6e:
9b:36:79:e0:7e:6c:2d:9e:4d:30:85:52:5b:e2:d2:61:67:e2:
f4:af:48:2e:cb:3a:d1:6c:11:d3:a9:96:c4:2d:8a:6d:c8:6b:
7d:bf:b1:5b:8d:1a:1f:3d:e0:34:73:f8:d3:2b:9a:4a:81:98:
d8:5e:99:b6:07:8a:e1:00:08:59:b8:91:4e:17:4d:fb:29:0a:
ee:9d:6a:0c:1a:49:59:9b:5e:d7:dc:59:08:fa:30:61:55:f1:
aa:0a:74:de:a4:e0:8c:f2:a2:06:2e:f1:a1:d7:56:44:8c:ce:
4c:f5:25:47:77:3c:40:8b:2f:9d:52:72:9d:1e:72:82:a5:c3:
75:d1:75:77:d2:0d:6c:82:f5:3f:63:f2:41:e3:0c:42:29:b4:
b3:bf:70:57:ed:35:dc:67:6f:ab:33:40:78:bf:de:75:65:6f:
7d:2b:96:95:45:64:dd:28:95:d6:bc:40:a1:46:f6:80:fd:ef:
79:1d:79:ac:d7:90:94:15:72:da:e6:c4:43:ef:d2:26:46:ca:
aa:db:60:80:8e:b3:4b:64:0a:84:ad:e4:ae:19:4a:47:be:f3:
a6:31:91:2a:99:8a:77:12:cd:81:cc:9f:2d:4f:d7:be:de:b4:
ec:9a:08:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:50:47 2026 by rpki-client