Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
File: XX9jQBQHwcx5excDToE9IlT5dz4.mft (raw, json)
Hash identifier: 4vB7532DI06Hf9Ubr96lamkepWrQAfinct3vYOr+6Hg=
Subject key identifier: BF:5E:7B:01:65:21:F9:45:16:93:AD:C3:E5:3F:9A:E9:FB:2C:83:40
Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Certificate issuer: /CN=5d7f63401407c1cc797b17034e813d2254f9773e
Certificate serial: 01A1DD271004B25DA4E8351819C9B3D3770F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
Manifest number: 118E
Signing time: Sun 15 Nov 2026 03:01:26 +0000
Manifest this update: Sun 15 Nov 2026 03:01:26 +0000
Manifest next update: Mon 16 Nov 2026 03:01:26 +0000
Files and hashes: 1: IJctrhezjfWjiA84ZaayWYeZh1k.roa (hash: VetyKsjNSyH6fNCp1k97xHgv6Vja8yJIQbMcO2qIjkU=)
2: XX9jQBQHwcx5excDToE9IlT5dz4.crl (hash: cJsP+J6x2OwQ/3pzvhqn7Vt5KhtX/WhT4BhPFg6n9QU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:27:10:04:b2:5d:a4:e8:35:18:19:c9:b3:d3:77:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e
Validity
Not Before: Nov 15 03:01:26 2026 GMT
Not After : Nov 16 03:01:26 2026 GMT
Subject: CN=bf5e7b016521f9451693adc3e53f9ae9fb2c8340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:83:3d:52:28:fd:59:86:0b:10:20:db:c0:5c:
36:9b:5f:ce:f2:57:9e:71:42:cc:df:3d:ba:6d:95:
46:2c:bd:8d:6d:0b:70:28:21:31:ba:5c:5b:07:7e:
e1:18:6b:b2:bb:a2:3d:14:f0:c1:26:a1:63:91:b6:
87:92:72:8a:ed:7b:f5:e6:e7:a4:2e:b6:b0:ee:72:
51:04:07:69:4d:b5:82:3d:11:6d:5e:24:3e:3b:94:
cf:62:de:a1:bc:ef:e6:d4:1a:75:ba:e2:55:cd:84:
50:b7:12:0c:e6:d6:f8:96:ce:a8:c9:f2:02:7c:c2:
25:67:a7:c8:57:b7:c4:60:2f:97:b0:0b:bd:04:99:
7e:71:af:28:c3:62:2f:69:d0:f4:5f:4a:26:ae:6d:
e5:f3:d7:20:40:56:00:54:12:6c:00:d5:b9:6c:a4:
48:15:bc:0f:9c:a8:5f:30:77:47:bd:04:07:72:1c:
ad:64:3f:a0:6f:aa:3b:4f:a0:27:3b:99:c3:b0:e3:
5b:61:e7:2a:49:df:31:82:d1:ef:d0:2a:e3:6c:8a:
70:51:31:f7:53:dc:a1:76:3b:b7:5f:7c:f8:7c:04:
0c:70:16:44:61:55:2d:0c:df:51:7f:fc:cc:82:75:
fc:28:05:50:a1:8b:a2:a7:5c:2f:af:37:c0:2b:97:
94:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:5E:7B:01:65:21:F9:45:16:93:AD:C3:E5:3F:9A:E9:FB:2C:83:40
X509v3 Authority Key Identifier:
keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4c:43:1c:2d:5c:e7:14:e3:a4:93:b5:d0:8f:59:8f:d2:0d:
11:fb:55:36:1b:d0:02:03:9f:a5:54:4e:2c:55:e7:c4:d5:ef:
49:f9:5e:7a:ac:e0:5b:50:25:1f:f5:c5:77:bb:de:be:37:38:
60:10:7d:ff:50:a6:9b:67:4b:a4:8a:3d:9e:07:17:f3:35:9d:
a3:cb:33:a8:a9:24:49:c5:27:e6:74:ce:fc:b7:4f:40:fb:a1:
2a:30:56:08:73:80:18:78:90:bf:c5:f7:58:e8:ba:b6:76:aa:
8e:90:66:41:05:14:6e:fc:6a:f1:01:ba:ab:01:d1:d2:fe:ee:
d2:85:0f:bb:f8:1e:a9:b6:3d:8f:fc:3f:8e:bb:11:cb:be:4f:
bb:de:21:11:6a:0f:b4:31:8d:00:5f:9b:aa:f1:57:76:2f:42:
95:b2:02:9b:9b:4e:07:33:0c:c8:bc:ab:b4:72:06:03:c4:b5:
e7:a4:76:0e:23:15:c1:2e:90:90:ec:36:d8:44:8d:28:8a:24:
2c:b8:ee:c7:4b:c7:33:2c:ba:8f:44:48:2d:fd:cb:f2:8a:c9:
1c:21:d9:4d:52:8c:cd:8c:8e:10:2e:95:76:2a:b1:bf:14:41:
bf:72:67:f4:b5:30:c2:a2:51:18:56:c8:e1:4b:6f:c0:64:4d:
41:29:9d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:51:36 2026 by rpki-client