Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
File: XK56oVlNiZKbERo3Hw_ybyAvWOI.mft (raw, json)
Hash identifier: Vlo+jc5M6dk17Wk0eO/Wf29y594WiZz4yWsn3DZPUW8=
Subject key identifier: DA:2B:F8:E1:1E:05:2F:BD:AB:05:E5:FF:6E:AD:D0:64:B6:74:1C:E8
Authority key identifier: 5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
Certificate issuer: /CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Certificate serial: 01A0F042A34DEEB7BB9835A1955E0D6A6E31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
Manifest number: 196D
Signing time: Wed 30 Sep 2026 03:01:34 +0000
Manifest this update: Wed 30 Sep 2026 03:01:34 +0000
Manifest next update: Thu 01 Oct 2026 03:01:34 +0000
Files and hashes: 1: Oanj9HZBO6pjmAia4pctaEcwILk.roa (hash: XGqLRhTKxqFHvcnOJ1VVsX5xFgoIImSw0HHatVrIKYA=)
2: XK56oVlNiZKbERo3Hw_ybyAvWOI.crl (hash: 10/+StIRQ+aZrdz0sXhMwfQo6KPdU7+4UWLEER6VS3E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:42:a3:4d:ee:b7:bb:98:35:a1:95:5e:0d:6a:6e:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cae7aa1594d89929b111a371f0ff26f202f58e2
Validity
Not Before: Sep 30 03:01:34 2026 GMT
Not After : Oct 1 03:01:34 2026 GMT
Subject: CN=da2bf8e11e052fbdab05e5ff6eadd064b6741ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:42:0f:06:69:eb:de:0f:ed:c2:10:0b:a4:
a3:d6:8b:7a:4f:30:78:7d:1f:59:fd:fc:f5:2c:71:
b8:12:a8:c6:7e:02:ae:37:74:fe:33:35:0d:d3:67:
f4:b3:2b:9b:aa:06:70:ce:9d:5c:ba:16:93:87:c3:
03:aa:21:5d:0a:16:09:3a:c1:93:b1:33:1d:b6:bc:
14:8a:6c:6a:da:1c:cc:97:f0:28:b0:05:e3:01:08:
3d:cd:11:db:30:e3:fa:c1:83:54:78:6b:31:2e:bc:
2b:d3:41:18:c6:e4:70:5f:1d:f1:69:df:9e:fb:27:
db:e9:2e:0e:17:a6:9e:b2:97:fb:e2:ac:c3:60:e1:
4c:2f:2a:19:5a:c1:58:ba:75:49:a1:38:27:e5:23:
8e:e1:ad:12:cc:33:7e:0b:45:ab:37:21:a3:87:cf:
e6:6a:1b:c0:21:a4:ed:27:aa:cf:d2:80:43:3e:7f:
c2:42:51:fe:b9:47:7d:60:8e:b9:4d:f5:c4:46:35:
72:37:3b:55:49:7b:3f:a7:58:72:dd:38:4d:49:3f:
ec:68:4f:a8:24:36:aa:df:8f:68:be:a8:4b:79:26:
a3:77:8c:9e:b8:35:e6:f7:7c:78:a9:7a:ce:36:ad:
62:91:f6:76:b5:9b:54:3c:81:05:76:e1:eb:c9:2b:
ae:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:2B:F8:E1:1E:05:2F:BD:AB:05:E5:FF:6E:AD:D0:64:B6:74:1C:E8
X509v3 Authority Key Identifier:
keyid:5C:AE:7A:A1:59:4D:89:92:9B:11:1A:37:1F:0F:F2:6F:20:2F:58:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XK56oVlNiZKbERo3Hw_ybyAvWOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/5e6bae-962f-4057-8ec5-279f594b3a2f/1/XK56oVlNiZKbERo3Hw_ybyAvWOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:3f:83:86:30:3e:14:77:61:3e:49:9f:fc:c3:4a:49:6e:41:
69:ae:9b:d3:4e:4f:0b:0d:3b:f7:25:7c:3c:d1:15:70:3a:6e:
99:c0:8a:3d:e4:a4:24:8c:84:d4:b4:3c:05:17:9e:1a:ac:8c:
b2:bf:dc:3d:18:6b:ae:aa:e7:f5:66:f6:43:af:59:de:70:3e:
e2:93:5d:d9:cf:fc:e8:9d:3f:60:1b:b4:de:55:f0:96:89:cf:
ca:24:c1:fe:6a:76:f1:04:9e:b6:60:65:de:da:3f:25:2a:9a:
02:f7:d5:5d:60:d2:d2:d7:6c:5c:f0:ca:34:c8:e4:36:69:86:
9b:0b:fa:37:cc:8c:38:40:5c:d2:4c:50:d3:60:f3:0f:d6:a5:
56:e3:a3:65:4c:8e:76:2a:8c:02:27:cc:1d:d6:d8:ee:69:85:
e1:74:cf:be:c2:db:96:19:e9:c5:e5:c6:f7:4d:1b:cb:23:fb:
0c:77:07:e1:92:52:ef:08:e4:e7:49:15:04:a1:d2:21:00:95:
e1:36:ba:f2:4d:fb:e0:f4:29:28:74:be:10:2b:76:56:9b:82:
3a:9a:3d:07:f7:a8:d0:2d:8c:a4:2e:bb:27:96:c9:c4:17:65:
79:60:e3:c9:7d:5a:d5:98:23:4b:a9:91:1e:1b:77:48:10:a5:
6c:a7:ff:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 14:08:34 2026 by rpki-client