Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: Vqhl8hFoKSNbZQ2n3vh4dj+mCM7IPLgVzYXyHcFks1A=
Subject key identifier: 7F:39:B8:63:25:7D:6D:86:0E:01:6C:EF:74:58:F5:05:B2:86:6E:E0
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 01A1DE703EA28C7FE615D41681481F14D3E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 0AB8
Signing time: Sun 15 Nov 2026 09:01:00 +0000
Manifest this update: Sun 15 Nov 2026 09:01:00 +0000
Manifest next update: Mon 16 Nov 2026 09:01:00 +0000
Files and hashes: 1: 1-N-Z3cPVFu_Om0GHK2AgOkgXdoM.roa (hash: fr16WHaKP/dmz7kwPH4GVwwXFVV/SyIEEVY49/wQV+U=)
2: 1aw8Nv97xOelgCP3-YnwnaxEm5Y.roa (hash: jy29WIgwdNl8op/0r93ONPzqQSdB42DU8p3Gs7efZY0=)
3: 2PxDuTNSWd2nVBQOyZp7w-a3G48.roa (hash: nuRMk74zjQwmTzVhehj6QjrkhW4+qo+fGCHLFEBJBC0=)
4: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: mV++eyHRPIpK+iEdTp8UQfjjS6wWRz5kGENu6OknXtw=)
5: c9R4pyYEgXuth8LibhVlQrijaqw.roa (hash: GjJoF2AKi6roB+eJMggN2owFvnp/FEnfdBtdPLGnDgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:70:3e:a2:8c:7f:e6:15:d4:16:81:48:1f:14:d3:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Nov 15 09:01:00 2026 GMT
Not After : Nov 16 09:01:00 2026 GMT
Subject: CN=7f39b863257d6d860e016cef7458f505b2866ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a7:07:52:3d:b7:39:a1:23:9d:62:77:f5:46:
bf:bb:8f:6d:1c:a8:6f:bf:38:01:22:07:95:f2:e6:
c3:04:fe:e0:f8:4f:d6:e8:cc:2a:56:9b:4b:19:fc:
a8:9c:56:a1:c9:64:05:d1:ff:6f:15:28:fc:20:77:
b0:e8:e4:c7:ab:60:ce:67:3c:4f:4f:f5:50:74:c4:
7b:10:c5:fa:99:0c:90:8b:da:fd:bb:a4:57:ea:0e:
b3:5f:a7:43:b9:65:f2:c9:12:af:be:d2:ce:b0:f0:
2f:d6:45:37:e4:68:29:0a:32:1d:57:3d:22:50:6c:
0d:83:53:fd:15:97:29:e3:73:7e:d1:67:21:49:46:
b5:64:aa:21:86:eb:2f:3e:e4:b0:18:c8:d8:2a:df:
ce:3e:0a:06:52:bd:4a:d5:17:b1:8e:5b:f9:7c:de:
ce:be:89:69:ec:b7:89:4f:c9:01:e4:08:ce:01:40:
0f:e0:79:01:75:04:15:4c:8d:00:05:c0:ba:da:e4:
3d:3f:82:e0:7d:d5:a3:ce:f3:7e:67:66:dc:53:ba:
78:33:d8:24:ec:c0:cb:28:92:ab:18:88:db:fe:45:
71:44:be:d3:19:18:3c:da:a6:fe:17:46:9d:90:46:
d4:0c:5d:71:99:69:00:f8:54:2b:07:ce:2e:bd:ee:
51:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:39:B8:63:25:7D:6D:86:0E:01:6C:EF:74:58:F5:05:B2:86:6E:E0
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0b:e9:b0:5e:82:78:ce:c0:6c:be:fa:7f:b2:00:e4:74:b4:
4b:09:40:97:12:dc:3e:97:4e:48:d8:de:cc:63:90:f7:62:1f:
16:0a:d2:d9:06:2a:55:ed:5b:62:a9:c0:d3:9b:24:68:64:63:
43:ce:fa:db:27:29:fa:b1:4c:50:e0:35:d5:a1:04:22:d9:ba:
06:38:41:f8:7e:3b:f2:60:4c:18:75:ed:65:66:6d:df:22:64:
a1:a0:04:30:b0:45:6d:9e:9d:09:81:e5:1e:64:2e:be:fe:0b:
c8:77:d8:b0:06:65:ea:18:2d:a4:fb:d4:70:5f:bb:93:00:b5:
ee:ac:a8:4d:16:e9:13:cb:7c:d2:be:ab:d6:de:ff:80:ad:8b:
b5:b5:23:2b:3d:81:f1:96:c7:45:cc:2e:5d:7f:e3:ba:db:30:
e4:81:09:3c:a7:76:ab:de:cb:6c:da:dc:5a:da:cd:84:46:dd:
d9:87:19:43:40:ee:70:12:01:da:32:10:25:d8:f0:b6:0d:87:
8a:db:f0:84:54:15:ab:72:2f:3d:e3:fb:59:23:02:92:62:80:
54:86:8b:9d:83:89:90:1f:a1:cc:8b:19:de:7d:d8:f0:67:f9:
d1:18:7c:c6:94:f9:be:f2:65:d5:d2:67:c6:96:9d:87:ce:0b:
bd:16:f1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:33:07 2026 by rpki-client