Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
File: XpNr6hsMOiCKuifYsQsnXkdN3iw.mft (raw, json)
Hash identifier: yJBxlIjqAvP7u4GCWXOQt9SMBT4fRrMFqa6JJ9eRssI=
Subject key identifier: 4F:3A:A4:8C:2C:26:3F:C7:5A:FA:15:71:44:DB:CA:8A:A9:3A:D8:D9
Authority key identifier: 5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
Certificate issuer: /CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Certificate serial: 01A1013651D6E133A667A44779920A656BEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
Manifest number: 1A87
Signing time: Sat 03 Oct 2026 10:01:39 +0000
Manifest this update: Sat 03 Oct 2026 10:01:39 +0000
Manifest next update: Sun 04 Oct 2026 10:01:39 +0000
Files and hashes: 1: I4H-h-0IvTFBhVPDqjS4bNj_Ebs.roa (hash: sH+OJNMuVDP+q4KSVOmVWCp6qFy7xvvRbWmFSeE0ZQA=)
2: XpNr6hsMOiCKuifYsQsnXkdN3iw.crl (hash: VePqc4dLiMPxDobXSmpFT+gJC4I3xcQsWuWDfzAewzg=)
3: tAwZU3BOPbTvz3ImjlM559IcNTA.roa (hash: y+WYOBqvK0tCP5OHjWQ0ygtKGjnCPslAmq7bpnA8QLw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:36:51:d6:e1:33:a6:67:a4:47:79:92:0a:65:6b:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e936bea1b0c3a208aba27d8b10b275e474dde2c
Validity
Not Before: Oct 3 10:01:39 2026 GMT
Not After : Oct 4 10:01:39 2026 GMT
Subject: CN=4f3aa48c2c263fc75afa157144dbca8aa93ad8d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f8:ea:5f:d5:ef:9a:09:ec:bc:e4:8b:4e:c2:
50:34:b6:87:98:84:24:9e:79:6f:57:9d:9e:be:8c:
6f:00:3a:08:bf:f1:e6:1c:fe:28:de:1f:6d:be:5b:
94:19:88:24:ab:6a:3a:ff:89:48:5a:c2:76:31:bf:
a3:3b:a2:de:a3:46:d7:24:49:6e:f6:3f:35:9d:43:
a1:77:02:3a:d9:7a:ca:4d:1e:8b:d4:cc:57:45:1d:
9d:e2:c5:96:ba:39:06:31:b7:04:08:c4:da:a6:fb:
70:c1:cc:69:70:7a:39:77:c9:1f:dd:85:2a:cf:73:
b6:c6:eb:13:63:7d:0b:9e:fe:33:29:88:f4:8c:78:
3a:46:86:0f:2b:a0:cd:32:64:51:50:e3:83:d1:5b:
76:e2:29:ef:04:75:13:0c:0a:ae:83:ca:8f:3e:48:
1b:b1:b9:cc:45:40:90:8b:ce:86:3b:af:ba:62:51:
01:d0:9b:94:04:2c:ce:c8:95:e8:5d:c8:a0:38:30:
db:ee:13:c8:fc:39:53:cd:c3:17:91:7e:dd:8b:76:
1c:33:e7:7d:4f:a7:c9:da:c0:10:02:6e:95:cd:3b:
a0:07:89:c4:cd:c6:e4:88:18:a8:fd:3a:0c:ae:76:
db:3f:3c:17:fd:f3:22:dd:a1:7c:b2:f2:9c:c4:f1:
f0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:3A:A4:8C:2C:26:3F:C7:5A:FA:15:71:44:DB:CA:8A:A9:3A:D8:D9
X509v3 Authority Key Identifier:
keyid:5E:93:6B:EA:1B:0C:3A:20:8A:BA:27:D8:B1:0B:27:5E:47:4D:DE:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpNr6hsMOiCKuifYsQsnXkdN3iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/32876b-a82b-4704-ba67-98477a8653c7/1/XpNr6hsMOiCKuifYsQsnXkdN3iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:6d:ef:cc:2f:b2:3b:af:26:a3:de:1b:07:0b:5f:81:1c:15:
04:53:36:a5:f0:b0:0b:65:0e:98:ae:47:e6:1c:e7:72:92:2b:
c0:c0:e3:e8:78:0b:68:70:91:8f:35:f1:36:2b:02:c9:24:9b:
43:d1:08:8e:d5:5f:e4:a9:53:bd:23:c3:30:9c:af:85:08:95:
56:5e:f9:ad:6a:74:ac:34:e4:71:ab:9c:e7:17:17:73:43:dd:
ad:5e:d7:76:2f:e4:7f:30:18:6e:84:8a:4c:cb:af:ed:6b:bd:
72:73:4a:9b:7a:fc:8e:94:75:f0:21:53:95:72:85:98:0c:34:
3c:6a:43:60:d4:64:0f:16:be:d0:0e:88:b8:a6:c2:49:5b:bb:
2e:b4:c7:df:f4:eb:f0:6d:c4:c4:d0:e8:20:d8:48:7e:2f:36:
f7:cf:70:9c:72:a9:d0:3e:1b:ac:ef:9b:9c:0a:d3:27:40:12:
13:35:bf:71:31:ba:a6:4a:8c:41:dd:92:12:96:77:58:5e:e7:
6c:ac:ed:5b:82:d0:59:8c:90:65:e5:d0:6a:bd:40:10:7c:c0:
c9:34:49:31:53:5e:16:6d:aa:d3:f6:35:6a:f3:63:5f:56:13:
00:78:72:2b:2c:d6:d2:f5:8b:91:ab:d3:ed:b1:27:e6:24:73:
89:7a:a0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 13:28:55 2026 by rpki-client