Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
File: X5ZnbPOY05lMTdSilllGFN_1hsc.mft (raw, json)
Hash identifier: g0NWD2hwuJlNNnTYC4nKhtwdOPLYvw4/8NX0IxBTtSI=
Subject key identifier: A7:82:3C:89:41:BD:2F:B3:0B:3F:24:2E:13:40:E9:A3:75:2A:9F:F7
Authority key identifier: 5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
Certificate issuer: /CN=5f96676cf398d3994c4dd4a296594614dff586c7
Certificate serial: 01A12C5791A04DA03A5EF985E9F4A20C4A43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
Manifest number: 1ABA
Signing time: Sun 11 Oct 2026 19:01:38 +0000
Manifest this update: Sun 11 Oct 2026 19:01:38 +0000
Manifest next update: Mon 12 Oct 2026 19:01:38 +0000
Files and hashes: 1: 1szsUB0VoXuxvDb6acgrvBLYEZY.roa (hash: CAu6oABCOITiB7RP9yG7K6+swFKVut89RRzUhC0wUAY=)
2: X5ZnbPOY05lMTdSilllGFN_1hsc.crl (hash: 6N5mDIgT7zuEkILhXf+RIHXHKsH+FSd8vaUTXQoazi0=)
3: Yz6zMQTWF_oPlBis3JkHJwwBpxQ.roa (hash: fw38Poz9RGtWDLhkzBj9EkYC4z3B0EbYl1M6n6QZV4c=)
4: ucieseCn4X1qSKWwEPn_oNVbz1k.roa (hash: LmFDFIu8DGDRUsQfXjI1zzyrnPH0LF4bgVgWF7ntgHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2c:57:91:a0:4d:a0:3a:5e:f9:85:e9:f4:a2:0c:4a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f96676cf398d3994c4dd4a296594614dff586c7
Validity
Not Before: Oct 11 19:01:38 2026 GMT
Not After : Oct 12 19:01:38 2026 GMT
Subject: CN=a7823c8941bd2fb30b3f242e1340e9a3752a9ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:72:11:25:3b:35:c8:42:62:cc:2e:a1:ff:d0:
87:2c:83:b0:0e:9d:af:ed:92:b5:19:ed:83:d8:fa:
1c:c6:86:4b:69:a0:01:03:4d:56:bf:ec:ab:ec:74:
82:68:b8:93:4e:d4:68:18:f8:8d:a4:74:72:30:4c:
57:32:30:76:a0:ab:7d:62:08:df:6f:f5:e0:16:c4:
16:f2:89:10:0f:14:95:29:c6:88:64:5a:9a:13:ca:
f1:bb:5d:71:c8:b7:22:80:d8:17:3c:f8:ed:fd:79:
90:ec:48:20:6b:37:30:1b:71:ba:90:ad:f5:9e:98:
f6:d5:9e:f9:fc:d3:60:af:80:0d:8f:97:64:b2:c2:
7a:c2:fe:90:46:ad:3f:dd:15:5b:61:0b:62:6c:c9:
a5:17:46:04:f0:f8:87:40:d0:5d:98:b3:ef:f0:4e:
98:27:48:5e:a7:22:9e:8b:9f:97:a1:1c:d5:be:7f:
64:31:a6:98:9c:b6:17:f3:3c:d1:c3:95:91:aa:46:
df:d1:40:5a:79:3d:7c:e7:e8:93:09:86:6b:0a:55:
c2:06:b1:cf:bd:47:04:3a:47:7b:ae:36:a9:8d:69:
54:3f:15:01:10:62:f4:d9:7e:85:7d:91:98:40:f0:
da:57:83:44:e2:5c:08:3c:71:3e:5d:c7:3d:6e:47:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:82:3C:89:41:BD:2F:B3:0B:3F:24:2E:13:40:E9:A3:75:2A:9F:F7
X509v3 Authority Key Identifier:
keyid:5F:96:67:6C:F3:98:D3:99:4C:4D:D4:A2:96:59:46:14:DF:F5:86:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5ZnbPOY05lMTdSilllGFN_1hsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/6a6805-5ce0-4128-a04c-f62f35af4371/1/X5ZnbPOY05lMTdSilllGFN_1hsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:29:a7:fb:1a:b5:df:66:f2:5b:38:25:73:2d:d2:4c:46:1a:
f7:8a:56:af:be:35:e2:d3:11:aa:14:39:81:f1:86:ad:93:47:
d0:42:ed:64:f4:b9:c0:d4:14:02:54:71:94:8c:6b:e7:c0:a3:
7e:da:85:7f:21:1b:f7:e1:68:af:0c:ab:b0:58:9f:39:21:a8:
dd:63:35:4b:55:b2:92:98:a7:de:42:a3:3c:56:e3:55:75:6b:
6b:ec:ee:0c:37:e3:79:c4:98:a5:85:4a:5a:7c:41:54:6c:08:
c7:fb:28:be:a1:2e:09:a7:8f:ff:14:8d:ff:61:65:55:d9:44:
89:ae:a6:cd:d0:4a:da:7e:6c:7a:7d:f3:1f:e6:dc:11:2f:d5:
65:9b:16:2b:58:1e:b1:09:2c:19:5b:76:a5:b0:85:24:11:b1:
08:ce:a9:fb:78:24:24:47:00:e0:bb:69:ea:59:fc:8e:55:f8:
dd:df:e4:49:f9:00:02:cc:4f:c6:02:4e:ee:f7:fd:cf:4a:21:
64:db:15:85:f9:c9:5a:bf:5d:d5:cd:c8:55:5b:cf:ef:51:5d:
1b:5e:5c:3f:70:83:09:fa:c2:cc:40:11:ef:e8:77:13:b3:3e:
cf:7e:3b:e8:be:8d:9b:b7:b4:8a:f3:f4:37:f7:89:bd:2e:9f:
ca:5d:b3:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 00:38:56 2026 by rpki-client