Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: qdaHqwB0ls5isGi9s6ueoO2D3lIpYUwohnBEVL8Vvio=
Subject key identifier: E3:0C:6A:A7:C0:4D:86:0A:69:C5:88:5C:8C:9E:EE:88:70:63:CD:1A
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 01A1DA93D1B59CF0A6C01AC042C7EB943C28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 1AF4
Signing time: Sat 14 Nov 2026 15:01:22 +0000
Manifest this update: Sat 14 Nov 2026 15:01:22 +0000
Manifest next update: Sun 15 Nov 2026 15:01:22 +0000
Files and hashes: 1: Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa (hash: Ykk34DqNXHApsE9nxxAgQ38pONoyVUESYWMP39kBFzk=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: /brjjCzopln1SmIF+i36M70WM5+mByH5AYOb6XIS5ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:93:d1:b5:9c:f0:a6:c0:1a:c0:42:c7:eb:94:3c:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Nov 14 15:01:22 2026 GMT
Not After : Nov 15 15:01:22 2026 GMT
Subject: CN=e30c6aa7c04d860a69c5885c8c9eee887063cd1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:2b:b1:4c:67:a1:7a:2b:90:09:70:5a:a5:
cc:28:55:1c:4c:31:1a:69:8c:92:54:cb:d5:b3:80:
ee:d4:fb:6e:00:63:c8:60:1f:04:9a:72:41:e1:1c:
f5:60:de:bd:61:0e:bb:c2:ea:46:f3:6e:fd:bd:5d:
df:bf:56:79:7c:d3:b0:b8:67:f0:53:46:70:da:16:
38:28:ca:6a:d6:3c:28:d0:1a:bf:d7:20:00:10:d0:
fe:4c:59:fb:fb:51:82:fe:1b:93:b0:da:49:20:a2:
ef:af:17:af:87:71:c1:5d:0b:2a:24:ad:2c:9d:14:
2b:d9:0b:fb:79:44:cd:eb:c7:7c:17:1f:01:9a:fb:
cf:b4:70:85:76:38:41:b1:19:91:31:69:28:fb:ed:
7e:3c:78:13:de:5f:35:07:e7:33:93:45:a8:9e:e4:
fd:6f:ad:36:5e:ed:a1:6c:78:17:6e:fe:3e:b1:c9:
55:d3:16:25:dc:92:d1:a0:fa:03:0a:cf:c0:18:ad:
c0:28:46:43:a6:6c:44:4d:89:94:59:4f:24:13:85:
ba:5b:7f:6d:1f:a9:20:16:16:ba:62:86:cb:fb:f1:
49:a4:7c:c2:4c:1c:84:e4:e3:d7:6e:31:99:5f:d1:
42:a5:de:a6:4b:74:b6:cf:e9:5f:99:97:cd:19:06:
7d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:0C:6A:A7:C0:4D:86:0A:69:C5:88:5C:8C:9E:EE:88:70:63:CD:1A
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:c5:56:d2:d8:a9:61:c1:79:98:b4:e3:e8:3f:32:0e:0d:55:
23:45:6d:5d:44:1a:0a:b1:0f:92:a1:b2:c4:39:ef:73:9c:78:
de:fa:ad:ef:a2:49:c5:f7:ea:0e:ca:ea:4d:f1:c0:25:5e:dd:
e4:47:de:9e:27:59:2e:a0:41:ea:61:5e:3b:dc:5e:ce:e5:ae:
90:15:79:e4:9a:45:87:10:56:0a:ae:57:21:02:c7:4a:d7:a2:
90:a2:82:cb:9d:b5:0a:18:a5:35:45:97:b6:5b:7d:e3:83:d5:
77:0a:64:4b:e3:d2:fe:24:a5:36:56:d7:70:8e:d8:c9:3d:00:
63:c7:47:a3:44:4a:e8:f3:ff:9e:e6:2a:b2:cd:1d:fe:d8:dd:
c2:9d:d0:09:84:13:4d:d9:f5:ff:85:51:65:d7:13:9b:c3:08:
1e:04:7c:4d:ce:16:1d:0f:10:13:d6:7d:ce:49:da:e5:2a:22:
e4:8c:54:fc:e3:58:cf:b0:1e:06:63:51:89:69:3d:72:a6:46:
34:ec:93:f6:12:45:c7:a3:9f:90:54:5c:88:7c:a4:d8:4f:2f:
72:1c:62:25:15:7a:b3:08:f4:c5:aa:d4:e5:36:69:22:55:36:
eb:7e:c0:e5:94:57:81:a4:59:54:90:f0:05:bd:38:1e:1d:70:
d2:e0:96:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:24:09 2026 by rpki-client