Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: gfXyU83kGz6Jp74/L655v/g9n+AVDv6r65Aifp6iMaY=
Subject key identifier: 8A:7F:CF:11:AF:7A:A7:17:FF:D8:AB:F8:8D:6E:8E:56:5E:8E:51:6B
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 01A108B8F9A4D5FB9565999E815DBE8490AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 21:01:42 +0000
Manifest this update: Sun 04 Oct 2026 21:01:42 +0000
Manifest next update: Mon 05 Oct 2026 21:01:42 +0000
Files and hashes: 1: 017yR2AH3nhtreOuYgsNpqkrBt0.roa (hash: jH8rFvA13JhY4szX2F6JGpx37/sl3RxTDMuhAZiU224=)
2: OOfgMgyirAjAQpzlSeWvWZ7kZIQ.roa (hash: wpPBvbubRrWqOyJudWgmsWq2Hw2lni+AI3RKu2B28mg=)
3: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: /iPNAxxwshJPPoYB5i/xxVuYhbMWzKHR6f3aPe7Dzgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 21:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:b8:f9:a4:d5:fb:95:65:99:9e:81:5d:be:84:90:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Oct 4 21:01:42 2026 GMT
Not After : Oct 5 21:01:42 2026 GMT
Subject: CN=8a7fcf11af7aa717ffd8abf88d6e8e565e8e516b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bb:19:c8:01:92:17:82:2f:df:d0:c3:7b:5a:
8e:49:26:ba:70:1a:60:41:ac:14:6c:d9:b3:0b:6a:
8a:3e:af:70:82:16:7a:86:19:02:dd:ea:e5:bf:6e:
e2:8c:4a:8f:27:ac:1b:70:e3:c2:cf:17:16:1e:21:
75:69:c7:25:59:90:cc:11:a0:fb:8f:4c:19:19:be:
3e:61:45:48:b0:63:1b:26:60:64:02:cc:fa:ab:94:
2c:cc:b0:ee:04:71:e1:d2:1c:63:80:2f:a3:31:9b:
8b:70:b0:9c:d4:d9:7f:20:fc:ab:84:68:6d:cb:d6:
76:9b:fa:61:20:4f:77:02:ef:a7:28:57:12:17:3d:
b0:49:e5:cf:01:83:9c:fa:da:34:5c:05:a9:f3:bf:
c3:34:86:d7:f0:46:f7:89:94:33:09:f1:bb:40:77:
de:93:11:51:e0:12:9c:44:ff:e5:76:ee:a3:d6:7d:
4f:cc:79:48:f6:16:f5:88:f9:da:4f:8b:49:10:c1:
15:29:5c:3d:dc:89:0d:e4:1d:ca:0b:92:de:ed:b1:
bb:28:96:19:81:f7:fb:b7:95:ee:0c:86:12:8f:4e:
04:f3:9a:01:a7:46:48:74:34:6b:8f:a3:21:69:21:
b3:80:4e:f2:4b:d3:e8:a4:db:11:c0:2a:20:a4:70:
80:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:7F:CF:11:AF:7A:A7:17:FF:D8:AB:F8:8D:6E:8E:56:5E:8E:51:6B
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4a:de:f5:48:22:d5:e0:4a:89:0c:0b:6f:ba:fd:b3:22:b0:
42:4c:c4:c0:64:a0:24:29:fe:8e:60:57:92:3b:c7:ef:9d:69:
58:f8:0b:1c:5f:1c:e1:e7:00:62:13:87:74:b4:fc:89:76:b2:
08:33:cf:4a:6d:f8:a4:d7:da:53:42:1e:b5:a4:18:70:58:09:
18:77:e0:a1:ac:99:7e:3d:e1:06:7d:72:90:5d:5d:81:77:8c:
df:23:77:01:7d:92:e5:06:43:6f:ce:5f:62:88:c2:25:ab:77:
21:d6:19:3c:91:fc:55:b3:bb:54:bc:c2:fa:97:ed:ee:5e:37:
a5:97:92:2e:d6:4c:26:b5:a6:30:73:48:49:bf:9f:b0:5f:15:
81:89:ed:58:52:2e:fe:0f:2d:55:54:c3:4a:af:e7:88:31:15:
1d:f8:38:ac:b5:44:5e:9b:c3:30:6d:46:b4:81:16:12:23:10:
a9:9c:62:a5:26:4a:1c:ce:a3:3e:8e:9f:f2:20:23:24:b1:9b:
bd:95:9d:26:2a:1a:89:4a:57:25:e9:26:e4:90:1a:bf:e0:31:
54:9a:f2:a9:64:b9:70:24:19:01:c7:46:40:2f:e2:2c:bf:06:
58:f6:3e:94:6f:a2:e5:84:ae:d5:20:0c:09:ee:7c:44:45:54:
2c:ba:43:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 03:44:15 2026 by rpki-client