Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
File: XfSth7gyLMlJFI4NdmIc6oNYpoU.mft (raw, json)
Hash identifier: dDjg5dnnkTry1prgvOnwysDPnkf3YcxmX72sqgBgkz4=
Subject key identifier: 78:B7:0C:27:20:67:AA:15:FF:97:AC:DA:01:08:06:EC:AE:C7:39:90
Authority key identifier: 5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
Certificate issuer: /CN=5df4ad87b8322cc949148e0d76621cea8358a685
Certificate serial: 01A1242FFB63C718CC4AC67300FF40271BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
Manifest number: 0286
Signing time: Sat 10 Oct 2026 05:01:26 +0000
Manifest this update: Sat 10 Oct 2026 05:01:26 +0000
Manifest next update: Sun 11 Oct 2026 05:01:26 +0000
Files and hashes: 1: XfSth7gyLMlJFI4NdmIc6oNYpoU.crl (hash: GNH9kJBGJ//0Xsjfyc0FgJu+8uJxFAuZT7mVhDV5jvs=)
2: hlSTINC_KpLJH_012cszF50XrrM.roa (hash: R9LXujjJX9A3v2Y9QXZNY393BmFuvvM/3QjbC/Pbq0E=)
3: wi4pwq_pbwyf-RifkawT_5o4jbY.roa (hash: QtIyVI0mDcZKu2N+GCjxkT9Lyx1XzVHsblRr7n1YzG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:2f:fb:63:c7:18:cc:4a:c6:73:00:ff:40:27:1b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df4ad87b8322cc949148e0d76621cea8358a685
Validity
Not Before: Oct 10 05:01:26 2026 GMT
Not After : Oct 11 05:01:26 2026 GMT
Subject: CN=78b70c272067aa15ff97acda010806ecaec73990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f6:15:9a:52:1a:c9:f6:aa:1e:bf:6b:6e:48:
1e:a9:7a:66:cb:0b:da:0b:2e:25:c0:06:69:07:1e:
5e:05:56:49:22:27:dd:25:1c:c5:c4:44:da:f5:ec:
10:83:d7:4d:7f:c8:cf:d7:c9:ec:15:ff:ae:c9:17:
b4:04:63:e7:00:47:34:4b:25:cc:61:e4:67:fc:aa:
c7:0a:47:6f:25:3c:50:b9:ae:08:2d:7d:10:30:9d:
1b:86:4c:64:f1:cd:b9:20:31:e4:7c:08:0a:30:16:
cf:c9:2d:88:66:fe:bb:ed:1b:96:22:c1:85:03:ca:
d5:74:f1:ee:97:06:e7:ee:c4:36:94:e0:9c:cf:a5:
78:cb:89:c0:da:76:12:38:ac:bc:5a:fe:48:97:d8:
fd:88:1e:65:c0:fd:98:e7:0f:5e:26:cd:e0:4d:55:
28:86:8b:40:88:7f:f2:5d:e2:47:b2:19:7a:64:06:
81:ff:3b:64:e1:6d:21:80:6d:1b:7a:82:71:d2:6d:
c6:0d:68:ac:24:32:89:f6:e8:3f:02:27:d6:f2:03:
b7:78:15:1b:0a:77:fd:26:0d:55:97:f3:2d:8d:30:
a6:a2:16:47:b1:56:6b:68:63:2e:4c:1d:30:0e:75:
58:8d:97:df:99:2a:8c:c0:d9:28:2d:30:de:a6:83:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B7:0C:27:20:67:AA:15:FF:97:AC:DA:01:08:06:EC:AE:C7:39:90
X509v3 Authority Key Identifier:
keyid:5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f9:1e:77:7a:15:51:f7:d8:22:52:dc:83:88:19:7a:70:4b:
96:9c:d7:e6:7b:41:77:79:c2:85:c9:8e:bc:4b:42:01:3c:a0:
f8:33:64:64:8d:9f:82:7b:1b:80:3f:14:8d:df:83:4c:b8:18:
f3:78:fb:c9:73:9b:61:10:28:e9:42:5d:86:6f:45:8c:9e:66:
7f:93:05:ad:3b:eb:16:d6:5b:59:5a:0b:58:d2:e2:e4:68:4d:
41:23:5e:9d:a1:0f:d5:dc:e2:9a:76:75:01:97:70:6e:0b:04:
ad:35:15:91:0d:a2:ca:3b:55:d0:36:74:02:c0:c6:4b:f6:4c:
50:b8:1a:6f:d2:10:c7:99:17:11:f0:44:5a:e2:78:cd:ee:3c:
6e:bc:ec:d9:55:14:7a:cf:24:99:28:1c:85:1c:1c:d9:d8:04:
92:7f:70:11:95:96:f0:81:29:3f:41:42:56:59:f2:29:8a:ce:
2a:e0:0a:b0:6c:b9:6e:f2:a8:93:bc:69:5b:50:0c:f9:2f:ae:
10:a7:91:3e:28:61:90:2e:65:dc:fb:fc:a8:e1:5f:e6:39:1e:
97:8c:d9:c0:43:41:7d:63:2b:9b:27:b9:43:5d:21:1e:a9:5d:
88:30:a4:28:f7:81:5c:28:b0:55:f5:02:a8:57:41:4b:8e:bc:
fd:85:ea:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:06:28 2026 by rpki-client