Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
File: XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft (raw, json)
Hash identifier: eGhmMpNbDcgzUi5KRWrdQVr70TQ3dmVJHee5h9OfH68=
Subject key identifier: 8A:C1:0F:AF:F2:D2:6E:28:A2:2C:39:DA:13:46:35:51:F9:DE:53:3A
Authority key identifier: 5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
Certificate issuer: /CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Certificate serial: 01A1347E9F9EEA32265FC91F61672AC3A07B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
Manifest number: 1AA0
Signing time: Tue 13 Oct 2026 09:01:15 +0000
Manifest this update: Tue 13 Oct 2026 09:01:15 +0000
Manifest next update: Wed 14 Oct 2026 09:01:15 +0000
Files and hashes: 1: 0m0w4NNU4NOo-8_y3zxSZs-Hcdw.roa (hash: d/QLJQ6M0z3RViK7W5MP6w1Y/VAa68ow0nmGzD8+98w=)
2: HKYjGRXbhcsbgj-zO-lhhp8iHf4.roa (hash: r0qRRb9G05Y3zjQIakuz14pzZ5PruwE51RJizxy5NMg=)
3: OXzsf9355x_Po1YlBAMmXxH7YfM.roa (hash: HyUx0AM/t82HDbhNTlK93mKwtwtfVGbEby4qtiM7vwI=)
4: SD-pJr4ttUBaZ1S20Tz4AuB6P1I.asa (hash: +ZZUrq34lcu1uY7HrOMrXNxK/Du8JITTl9RrFi410RY=)
5: XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl (hash: lyKQY3Ykf9WLFtcWj+3r6fURpO7vuu0OoRXp264xIu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 09:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:34:7e:9f:9e:ea:32:26:5f:c9:1f:61:67:2a:c3:a0:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd23c7ac6e682fbc53be1a0e9318f6ccae7193d
Validity
Not Before: Oct 13 09:01:15 2026 GMT
Not After : Oct 14 09:01:15 2026 GMT
Subject: CN=8ac10faff2d26e28a22c39da13463551f9de533a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c8:2a:f7:a3:6a:58:1f:43:ec:21:05:a5:d4:
b7:1e:2b:84:d1:4e:7e:f7:64:b7:7d:83:2e:c6:e0:
c7:74:c8:d0:85:fb:71:d0:08:8a:d4:39:e0:d6:36:
82:8f:74:a2:4a:0a:a9:ae:c1:6c:f8:66:f4:1c:02:
fe:33:ab:4c:3c:a4:f0:7c:3a:3e:d4:04:1e:ac:f4:
32:59:0c:13:cb:d5:36:a7:cf:40:60:11:3b:2f:31:
a4:ef:0d:4c:2e:b7:af:93:1f:1c:1d:a6:74:1f:9d:
0b:f1:a7:88:48:ae:7b:14:4d:95:39:9d:58:cd:f9:
db:dc:2b:32:c6:b9:fc:ad:da:ae:9a:94:70:21:5e:
a6:87:75:b1:12:e0:6f:18:be:6c:a0:3d:b9:77:cc:
90:e3:9c:4c:43:d2:f9:2d:19:4d:bb:67:0d:a8:20:
3d:0c:33:72:1c:9f:b4:04:ad:be:36:5a:a1:2d:74:
29:0c:1d:30:da:b7:30:77:45:6b:7e:5a:f4:8c:23:
0b:7c:96:bb:8c:d8:ae:5c:15:cc:b6:a8:33:ca:07:
e4:00:31:82:09:31:0c:40:e4:9b:9e:8c:4f:0f:4b:
0e:c2:59:18:1b:18:3c:5c:47:66:2f:62:4e:b3:31:
57:4f:44:5e:f7:2c:60:b1:05:5f:dc:43:74:52:57:
72:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:C1:0F:AF:F2:D2:6E:28:A2:2C:39:DA:13:46:35:51:F9:DE:53:3A
X509v3 Authority Key Identifier:
keyid:5D:D2:3C:7A:C6:E6:82:FB:C5:3B:E1:A0:E9:31:8F:6C:CA:E7:19:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdI8esbmgvvFO-Gg6TGPbMrnGT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a42e9c-d92d-4b20-a5eb-ebe2332caf1c/1/XdI8esbmgvvFO-Gg6TGPbMrnGT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:90:d3:dd:2d:ae:46:f9:e6:e8:4a:b8:b7:8f:d9:e7:9a:bf:
4d:bc:af:b3:80:1a:79:78:22:c4:92:d9:46:3c:2a:64:12:42:
f2:3a:b1:d1:39:61:07:c5:28:59:29:97:f0:c7:aa:9e:b5:ea:
87:8d:db:38:49:28:45:81:50:7d:cf:7d:60:94:27:18:05:3e:
64:de:9a:c8:47:33:09:16:dd:8f:0a:ef:f4:ba:5c:46:c6:ae:
29:36:6b:b5:da:69:a9:8e:d0:29:24:3a:51:7f:45:05:f9:6d:
cb:ee:11:3e:60:b3:90:4a:19:9d:48:3a:d0:4d:03:e2:c6:fe:
1d:1a:f6:fc:d0:99:bd:09:6f:9c:d2:17:1d:2a:21:56:28:5f:
3f:70:47:48:ce:ce:47:7b:ab:cd:1d:4d:19:f6:2e:0b:b8:45:
33:01:39:24:89:44:84:3f:11:9d:d7:8b:d3:ec:f7:75:8f:b2:
48:07:9e:83:b8:5b:49:4f:8d:36:4d:bd:d1:39:ac:ad:81:62:
ec:81:52:0d:9e:71:90:26:90:31:9c:9f:9b:b8:a6:ba:9a:ae:
17:aa:d7:1a:42:5c:da:e8:26:97:8a:68:9a:7e:64:4b:af:55:
83:a1:69:d1:04:f5:90:48:92:54:5c:32:f5:76:bb:e3:b3:c1:
67:05:da:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:32:13 2026 by rpki-client