Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: A/QIqjXlQTDfps7ytttK55XG0OcD/J7EP7PPxbbeuH8=
Subject key identifier: 8D:08:F6:1A:9D:45:E0:20:F1:69:F3:71:5F:B6:CC:F1:52:95:3A:98
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 01A1DF837E50BE4BE61921CB6A59B90E1976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 1B36
Signing time: Sun 15 Nov 2026 14:01:39 +0000
Manifest this update: Sun 15 Nov 2026 14:01:39 +0000
Manifest next update: Mon 16 Nov 2026 14:01:39 +0000
Files and hashes: 1: A68FGxDlgvGi2ExLVyu1Rtus6jY.roa (hash: OAq7I962/haIw/8uA0XXyCPjF4pVghhaZk8tZjEL3zU=)
2: VKOQ1y_Uw5fzQd8b1Hdd3EKQAlM.roa (hash: 32JiiJLEtTayhYhvmHeuz5r0x6saNvGEu+svv9Ba2PA=)
3: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: sJIEQqKS4LcQbIsROfAg7Ts3+3WzNyGEWk5/epDVEFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:7e:50:be:4b:e6:19:21:cb:6a:59:b9:0e:19:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Nov 15 14:01:39 2026 GMT
Not After : Nov 16 14:01:39 2026 GMT
Subject: CN=8d08f61a9d45e020f169f3715fb6ccf152953a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:b7:75:5b:62:60:b9:ce:00:f8:2c:21:a0:
62:9d:d9:00:07:de:1a:5b:07:23:49:1f:fb:81:51:
a8:36:e9:9e:7f:d7:b9:63:7c:8a:4c:88:e9:09:d4:
66:45:dc:98:f8:a4:b9:91:21:7c:81:98:a6:3d:22:
7a:06:0e:e7:61:37:10:37:47:d3:00:3e:fb:cc:4b:
77:85:1c:2d:01:c5:0d:7e:94:b4:88:79:44:6f:34:
91:09:82:f0:bf:5b:bb:79:5e:a9:f8:a5:99:bb:fb:
9c:87:f9:49:97:ae:ee:da:dc:d3:af:61:74:fa:67:
e2:de:ff:34:bd:fa:0d:6f:bf:2c:42:cd:07:2e:57:
7a:4c:3e:38:71:a2:df:b3:fd:80:0d:10:c4:6a:8d:
c9:50:6a:3f:18:6d:27:e1:b0:73:00:0e:4d:44:62:
8f:2c:52:19:de:0f:94:53:1a:41:8a:92:ed:2d:01:
02:b4:b4:6f:34:d0:a9:f8:76:38:ea:50:10:f5:73:
d7:e5:be:e1:d2:cd:a5:a2:e1:fc:36:94:b2:d0:45:
68:30:9b:27:52:60:95:16:00:30:b2:6d:41:25:a3:
08:f4:e1:b9:b3:e3:2e:79:e7:23:7b:01:76:49:03:
aa:a9:ae:06:6e:8a:13:61:de:c7:ce:72:ee:cb:96:
cd:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:08:F6:1A:9D:45:E0:20:F1:69:F3:71:5F:B6:CC:F1:52:95:3A:98
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:df:ee:56:25:99:03:90:f1:e3:f0:1d:17:65:31:f5:fe:23:
2d:e9:1e:db:e2:02:10:e4:e2:11:8e:c7:5e:e7:c0:a8:34:3d:
3c:df:21:bc:65:e7:82:86:da:99:f9:a6:87:11:60:79:2a:b9:
38:91:4e:b8:ce:db:0b:9f:e1:03:1d:ea:f2:18:7c:5b:1e:ef:
6c:61:d4:ee:24:e1:35:ae:d0:b3:e0:59:b2:65:34:fa:0a:23:
54:cc:91:2e:c7:96:8f:ac:e8:ec:2e:51:f6:9d:58:56:42:d9:
bb:ce:f0:d3:f0:71:fa:f7:9f:df:f8:e5:fe:44:ea:f5:99:b7:
c6:bb:5d:71:a8:51:60:69:6a:e3:7d:5f:a1:8a:d7:37:53:4a:
99:b9:74:ae:f6:21:18:2d:8c:e9:b6:a1:4f:42:5e:06:4a:27:
e9:3e:24:47:52:17:70:0a:10:fc:6f:5e:50:ee:ad:e3:ff:85:
05:91:f7:d0:17:a3:37:97:5a:ab:e7:dd:72:33:08:18:4a:eb:
92:69:12:7d:e7:81:8b:b2:9c:94:c6:5a:46:44:6d:28:e9:6b:
e4:1d:cd:88:ad:e0:e7:61:26:09:66:69:4b:59:3e:93:18:78:
0b:90:e3:d8:18:52:e0:de:85:7e:cd:21:ff:92:5a:4c:52:3e:
c3:f3:7a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:41:50 2026 by rpki-client