
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: HyUh3msXYDIvKfX1ZxT65V78097oPU4EFTi8OU677is=
Subject key identifier: 27:A2:45:6C:28:C2:9F:F1:90:73:0E:CB:95:6C:87:69:6D:09:E4:9E
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 01A1D9EEF410A70A1C9B3143725934C20FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 08F0
Signing time: Sat 14 Nov 2026 12:01:18 +0000
Manifest this update: Sat 14 Nov 2026 12:01:18 +0000
Manifest next update: Sun 15 Nov 2026 12:01:18 +0000
Files and hashes: 1: 1-KmRXcm0EffFQzS72fl1S3DZymg.roa (hash: rN/S5u/23R8Op30IhNEisJnhOq3o+6urpM4nYbYy55k=)
2: 1-p16KxsivgGZD8PXd4e_YHv5IC4.roa (hash: Qyqte6RopFpPPBHjfqe/11Zhs4/QiIF284F5Db6RdbY=)
3: HZjQ8dfa0hWcB-NnpWnYAzaxB-I.roa (hash: LZrOQ/KPSOzENF2jkc9vB3eqHtccVFGCJ8IUIaKPVcQ=)
4: IysZA3MLX2ZvO0KleomY7IPYa0Y.roa (hash: bJ8QUh9i9KG4qjAdJBbyeKXtAo2Wxax62J362DNjcHM=)
5: KVYnG1rasxK0lFwIWs0m90qVCwo.roa (hash: 3EZ/z4Q8VBlWlWq5DaBE242a5qu04Bq4t9H9x0FLAzs=)
6: OpYOp0A5IPKJ7jbcXskpSxQGlaQ.roa (hash: rADmm3meTWoAJpb+yfOPFFjI2xZfTZaGcVmBPuOR9B8=)
7: QlVQHCKLxPDMUT5yzxzLFxcAbhM.roa (hash: z2k4hBGjSObTZ9Cn+8RZ81P7abO/BO6NGKjOJSPjmms=)
8: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: JQUJ6DbZrjBezqQjXbkopSl/PrfdAHLt5T8rd4GZMcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d9:ee:f4:10:a7:0a:1c:9b:31:43:72:59:34:c2:0f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Nov 14 12:01:18 2026 GMT
Not After : Nov 15 12:01:18 2026 GMT
Subject: CN=27a2456c28c29ff190730ecb956c87696d09e49e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4d:83:7e:3c:2b:df:67:2a:84:45:b5:e3:c4:
9e:c2:39:c1:34:8b:46:a2:59:25:0d:8f:5f:4d:18:
69:14:c4:ca:41:b5:eb:b4:64:79:8a:8e:bc:74:c9:
cc:45:9a:2b:93:bf:b2:4e:b6:49:50:c1:f1:b2:2b:
fe:0a:c3:8f:5c:1b:7f:ee:ab:be:05:77:d8:3a:dd:
89:33:84:54:fd:08:35:b9:6c:bb:ad:85:89:86:cc:
4a:51:44:8e:a4:05:44:40:10:3d:e9:cc:58:40:26:
0f:f5:b5:dd:45:8f:cb:21:e8:44:cb:f9:01:a0:08:
30:7f:ed:e0:40:12:14:23:b9:ef:4e:1c:53:21:b8:
14:bf:0e:2b:7a:2c:62:b8:57:e7:b3:e5:5a:e3:50:
02:93:f0:b1:c8:a9:0a:b2:c6:05:1c:58:c4:87:af:
cc:ff:ab:01:4d:65:be:ae:3d:91:ab:ae:24:40:d0:
40:d6:e2:9e:c7:6d:42:cc:d1:7b:46:12:98:12:82:
15:77:3b:24:ff:37:38:64:f6:75:51:4c:00:e1:79:
c9:e0:02:5e:9b:c2:d3:2e:e1:fb:bc:93:df:b7:9a:
7e:db:d0:05:43:b6:9b:88:bb:46:1a:8c:71:06:bc:
7f:5f:97:21:35:67:e3:05:ab:8c:ad:5b:e4:88:30:
d2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:A2:45:6C:28:C2:9F:F1:90:73:0E:CB:95:6C:87:69:6D:09:E4:9E
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ac:2a:fe:bc:41:e6:cb:d0:f7:06:cc:8c:30:bd:6c:e9:1b:
88:1a:f6:a4:17:25:97:a7:97:f9:a2:8b:a3:c3:8a:d8:f9:ea:
8c:1f:3f:50:b6:4c:c9:0d:61:df:19:a4:1d:70:56:f1:96:c0:
a5:35:35:f7:7d:79:ad:f1:3d:61:16:72:d2:a7:73:e9:4c:02:
58:41:d1:44:d7:d6:5c:dd:6c:6d:ce:1a:86:74:31:4f:dd:3e:
db:65:c6:5f:b5:c2:e8:0e:d2:41:c6:31:8b:2d:04:a6:2b:ea:
ad:d8:15:71:2b:ec:83:78:eb:fb:3a:3a:7c:97:af:d2:7e:49:
94:ea:5f:f9:c7:60:68:14:03:5a:81:a7:da:f8:2c:a6:bf:54:
d5:4f:21:e1:6b:7f:78:8b:d7:60:79:cc:9e:ab:85:c4:43:47:
e3:37:65:28:3c:bc:a1:7e:dd:e0:37:f1:62:8e:55:8f:1c:cb:
bf:fd:de:d6:e2:82:96:3f:3f:72:80:96:ed:ac:00:8e:f4:91:
35:c0:dc:08:fd:1d:80:f5:c5:fa:3d:47:61:74:a5:0e:cb:e8:
56:ab:eb:aa:2b:60:8f:3c:ab:ca:8d:7d:7f:0f:47:3e:6f:75:
c1:43:75:70:50:76:90:85:a0:de:c8:22:65:9c:bf:38:3b:53:
7b:f1:48:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:28:56 2026 by rpki-client