Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: xSNNORBXWRddErUhxIeMPOUeUFVEzE8HVEgH2or5GCM=
Subject key identifier: 2C:E8:58:DC:AC:58:7E:71:65:DE:EE:D8:BE:19:0B:27:44:D9:18:8B
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 01A12466EE5EC31DDFDA614089EE8469DCED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 0F89
Signing time: Sat 10 Oct 2026 06:01:27 +0000
Manifest this update: Sat 10 Oct 2026 06:01:27 +0000
Manifest next update: Sun 11 Oct 2026 06:01:27 +0000
Files and hashes: 1: RrwlRSSdwln9HbzArcN9f7ThR9c.roa (hash: Ic3y0/hXv+5FL5zNAqt7WX+ncQH0cGC5wuQsjbsXF7I=)
2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: IokLO65US1Cyids6uVrDV7pp43MWLNlGSS55RXG8jGE=)
3: fWpL_ta7aXoIKT8lwYmDL0nQegU.roa (hash: r+7J0jRgrAdlkGpSk5T7jtJhr78GxAY9zYWBhS85+uQ=)
4: l5tw0iDO7abT_AibKjZJaQ4nwWc.roa (hash: r+71S+WnEwowT4NhvO1eI4eYiERh6tzaeOlSbc80Img=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 00:43:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:66:ee:5e:c3:1d:df:da:61:40:89:ee:84:69:dc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Oct 10 06:01:27 2026 GMT
Not After : Oct 11 06:01:27 2026 GMT
Subject: CN=2ce858dcac587e7165deeed8be190b2744d9188b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:fb:ef:90:0b:3a:f4:d2:31:82:43:4e:4b:
58:37:ca:ad:60:8f:1e:63:ba:89:a3:03:11:8e:01:
35:cb:d3:06:e1:e5:71:8d:1d:ef:5d:18:e0:c2:a5:
43:1e:81:e5:4f:f9:c9:ae:44:68:9a:95:aa:88:63:
7a:22:50:2f:a5:14:2f:80:b5:e2:d8:b2:3f:99:16:
71:c7:21:8e:20:15:aa:cd:af:e3:d5:72:bb:cb:ce:
98:fe:c1:fd:73:d8:8b:75:84:fe:88:b0:f6:7d:c8:
c4:7f:85:60:8f:4b:ef:93:dd:1e:37:1d:7f:c5:26:
3e:78:f7:9d:4e:6b:97:e9:30:64:00:e4:f2:c5:7a:
64:9f:68:a5:b9:52:e3:98:c1:13:07:21:de:a8:5d:
5c:50:bf:91:78:e1:cb:db:11:f5:da:f3:ec:e8:b5:
92:a1:8c:d5:79:63:a1:37:41:e7:cd:57:ae:61:19:
49:4c:d6:7f:4a:93:0a:b8:61:c6:f0:7c:e5:71:a6:
46:6a:fd:ed:e2:c8:57:a9:0a:ca:f7:9b:e2:fa:53:
4c:7e:5e:17:89:15:73:db:4c:78:78:59:6f:b7:82:
ba:41:f8:19:d9:83:d7:4c:7e:95:48:d2:ad:de:01:
9f:76:38:92:6e:23:1f:32:a4:80:fb:51:63:20:d3:
28:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E8:58:DC:AC:58:7E:71:65:DE:EE:D8:BE:19:0B:27:44:D9:18:8B
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ea:c9:07:d6:00:42:4e:4b:6f:8a:4a:a8:ed:01:41:18:a8:
5f:e2:8a:9b:29:d0:5a:31:62:9f:b7:3f:f9:d5:25:c9:4b:f9:
6c:ce:92:cd:93:5a:62:f9:7d:ea:5c:b1:f0:2a:67:16:1b:90:
1c:5e:37:e9:84:64:ae:fb:3f:7b:cf:5e:a2:eb:29:0f:05:4a:
76:30:8f:64:f4:63:6e:10:28:7b:1b:5d:49:5f:bc:ef:57:87:
e0:43:54:c0:a5:3c:60:6f:37:13:9c:7a:10:6b:dc:4a:63:f0:
f1:e2:84:54:29:09:f2:81:14:80:78:6f:82:68:db:c1:45:3a:
90:72:51:dc:ad:d2:39:f9:17:aa:85:30:7a:fd:53:85:fd:dc:
30:5a:4c:b2:ae:34:26:32:7e:03:df:da:fd:67:3e:94:60:f3:
a5:31:5e:af:f8:43:43:4d:8f:6a:59:6f:2b:cf:33:2f:4d:16:
35:44:d6:69:f0:3f:f1:cf:47:cd:47:21:7c:16:3c:4e:b6:73:
5b:70:53:b9:21:c3:83:ce:fe:a1:44:c0:f9:89:e9:07:06:af:
8c:de:0a:30:20:95:14:73:b6:eb:f1:be:98:b6:9e:1b:a4:cf:
6d:94:75:16:99:1a:77:15:a5:da:f7:d3:88:c8:9c:af:e4:71:
63:dc:2f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:32:03 2026 by rpki-client