Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
File: xb-nGlET_tgkZHdsFDcVFMkhjvU.mft (raw, json)
Hash identifier: gzaeE429AXS/9/S+ok5yOzCoziiAV2mo5p4HYBJGMGA=
Subject key identifier: BC:86:27:87:27:A3:F5:E0:7B:EA:1E:9D:67:29:B1:77:BA:6D:BF:CF
Authority key identifier: C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
Certificate issuer: /CN=c5bfa71a5113fed82464776c14371514c9218ef5
Certificate serial: 01A0C8FD78FEA26F7EB6208BBE3943AB19C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
Manifest number: 0EA0
Signing time: Tue 22 Sep 2026 12:00:49 +0000
Manifest this update: Tue 22 Sep 2026 12:00:49 +0000
Manifest next update: Wed 23 Sep 2026 12:00:49 +0000
Files and hashes: 1: jBvSHulkiAFNZq-1Sz_1NBwC4gw.roa (hash: kIr3tsaXSv0n1HwqnJcooiylPmXgSiBfGD9CqML14GU=)
2: xb-nGlET_tgkZHdsFDcVFMkhjvU.crl (hash: kkEXnE3iRCMz9Fh2Q3tD3YayHjXjYJpxG/5bk+93Mjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:78:fe:a2:6f:7e:b6:20:8b:be:39:43:ab:19:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bfa71a5113fed82464776c14371514c9218ef5
Validity
Not Before: Sep 22 12:00:49 2026 GMT
Not After : Sep 23 12:00:49 2026 GMT
Subject: CN=bc86278727a3f5e07bea1e9d6729b177ba6dbfcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d5:17:c0:86:a0:94:cf:0b:12:2d:50:bb:a0:
b9:56:22:92:5c:97:14:bd:8a:ea:df:13:08:d9:ac:
36:f1:5e:67:61:93:3b:e1:de:62:a3:bd:d2:da:8e:
b1:41:e9:8d:8f:9e:a1:8f:37:38:e2:3c:d7:37:41:
fb:97:42:f9:66:66:3f:8f:d9:ce:0b:f8:70:47:2e:
b7:27:18:e8:16:75:c4:2a:e0:66:06:9c:8f:e1:c9:
1a:15:ce:e0:20:71:98:4a:e3:d6:a0:cd:a8:2d:93:
d1:22:5b:c3:3e:11:89:93:87:a0:51:b1:65:5b:a1:
48:ff:d9:9a:00:1a:8e:40:49:2a:a1:38:f7:99:b3:
51:e7:a0:47:9e:44:2d:bf:e3:6c:75:3c:ab:c7:1f:
f9:3e:e5:8f:b4:a4:e5:f7:9f:d4:71:a0:30:f1:ae:
62:14:96:05:a6:09:c2:b1:e1:75:d4:a7:64:9e:99:
d0:93:39:f7:34:67:38:16:46:55:41:77:7b:2f:a0:
31:6c:70:78:9e:c4:39:ce:18:4d:4d:26:7c:00:fd:
3b:91:93:df:b5:5f:cb:72:79:ff:69:d1:1b:f7:b7:
e3:04:cf:42:cc:10:78:5f:f3:2f:06:f6:38:b4:70:
5d:50:db:55:d7:d9:d7:fc:b5:a2:9d:b8:5b:d9:c5:
8f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:86:27:87:27:A3:F5:E0:7B:EA:1E:9D:67:29:B1:77:BA:6D:BF:CF
X509v3 Authority Key Identifier:
keyid:C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:08:b7:0d:13:1f:83:7d:04:6f:b9:1f:bc:fa:c8:e6:dd:71:
7d:9c:32:cb:77:b3:3e:cd:8c:7b:f0:27:09:f0:ad:98:43:58:
1a:12:c5:1f:b1:49:52:9e:12:61:4a:4e:1f:05:3f:92:60:ef:
82:db:00:e2:33:9a:22:24:f3:e7:a8:9b:f4:90:37:b4:92:00:
66:1e:b0:d7:8a:38:69:23:87:ce:b7:47:b1:45:5a:ad:17:08:
a2:67:df:6a:a2:8c:7e:4f:ff:70:1a:31:0a:e9:10:3d:df:26:
56:39:0b:31:f7:a2:22:18:91:6b:10:a3:8f:e7:c5:2f:32:85:
74:17:bf:2b:97:02:bb:10:ea:3c:e9:bf:14:5e:6c:e9:cc:63:
93:55:0b:4a:68:44:c7:54:18:ea:6b:66:d3:e0:b5:54:e8:5e:
fd:bd:72:8d:37:7b:6f:e7:db:ba:c0:52:c7:36:5e:c4:32:2e:
a6:69:6f:e0:34:29:f5:ef:b0:16:b6:5d:f7:a4:54:e2:8e:11:
bc:ff:3a:33:80:eb:0d:82:a9:89:7f:a2:57:96:96:e4:87:45:
78:e4:8c:63:a1:89:43:cf:d5:93:b9:02:42:d3:03:10:4c:3e:
18:0d:fa:f5:97:98:2f:de:24:e3:ea:dc:d3:93:e7:1c:a8:2d:
74:b5:ed:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:09:10 2026 by rpki-client