Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
File: XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json)
Hash identifier: 7PVg2vlzXDNPuk13VZyz7ClX/LQbEI+4UO4m5IP55KI=
Subject key identifier: DD:7B:F3:D9:CA:97:EA:5E:49:2F:42:02:9F:A5:FB:6C:10:F1:9A:EC
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial: 01A1DD5DB63B25CAE8E5FF9E2514FDE3921A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
Manifest number: 0A70
Signing time: Sun 15 Nov 2026 04:01:08 +0000
Manifest this update: Sun 15 Nov 2026 04:01:08 +0000
Manifest next update: Mon 16 Nov 2026 04:01:08 +0000
Files and hashes: 1: ENw1C_RnXFX5u68Lf1yCGRU2j50.roa (hash: laVhxtiGuU9nq7LPNeyNYQb/Cwi24PMNAEi+kdkehFA=)
2: Kbt9j-hZnb94eOsmvK6LAdCimdc.roa (hash: zOiNq48c0XiT+FhoSdc64iXKcIuYpw4NIVOhVG30e1o=)
3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: s0a3HgaRn8CUaPilACu2cEZqSuAbYjvn6U61BWUjguc=)
4: avfWH99nPoOW7DLQE0x7Si_KvhQ.roa (hash: UCgXZAxPXfRssHeFoFTyFUIT22WDj1cAxQIAYxr8z30=)
5: mojZXrTMzMI8tc-sxL8WkZQtlqo.roa (hash: wx0Tu3b7R9CBy6GDWRL/5bfDjRmZvV07Hgorhjb5M58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:5d:b6:3b:25:ca:e8:e5:ff:9e:25:14:fd:e3:92:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Validity
Not Before: Nov 15 04:01:08 2026 GMT
Not After : Nov 16 04:01:08 2026 GMT
Subject: CN=dd7bf3d9ca97ea5e492f42029fa5fb6c10f19aec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:35:82:9a:66:bd:83:8a:23:9d:11:96:99:89:
77:74:7c:2f:ca:ae:17:14:72:d0:d8:98:39:9f:f9:
45:f3:3d:ce:e6:51:f1:d2:1d:96:a5:75:0d:46:d6:
7c:a7:71:ee:dd:ea:72:be:05:b6:be:c4:cf:38:f0:
b9:9d:73:67:fd:a9:e8:23:c9:92:15:0c:97:bf:4c:
2f:c9:4d:43:2c:d4:50:11:6c:ca:a3:47:26:6d:6f:
0a:bd:18:d2:d4:ff:8a:b5:3d:f9:03:d0:a0:f1:d7:
7d:ff:51:1b:13:5c:d8:6f:c3:c9:6a:d6:40:ee:9b:
62:53:ee:df:f6:8b:aa:79:0c:b3:44:ce:38:8e:26:
3c:39:16:af:b4:df:6d:6c:7d:f8:49:53:7a:19:cf:
80:c2:4f:dc:fa:ca:2c:5a:94:05:5b:d0:53:b0:49:
0c:5d:36:b2:28:7f:1c:3c:0f:65:9f:76:aa:7f:16:
2e:75:48:88:cd:c8:06:c3:a0:6f:82:18:ca:21:42:
73:ab:15:30:ff:54:4b:30:89:36:bd:ca:cb:eb:08:
57:35:3f:ad:8c:28:59:f4:b2:ad:33:e5:84:69:2f:
98:c7:16:3e:b8:f7:15:35:7a:4c:ac:4d:7b:0c:84:
9b:66:e8:1f:74:77:dc:96:08:44:82:15:12:f3:18:
97:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7B:F3:D9:CA:97:EA:5E:49:2F:42:02:9F:A5:FB:6C:10:F1:9A:EC
X509v3 Authority Key Identifier:
keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0d:c1:21:f8:c0:4a:fa:57:18:4e:df:ca:31:87:47:7f:e9:
ef:49:28:8c:9f:e2:8c:34:60:ac:0c:04:92:3d:be:6c:cc:17:
e0:85:8d:e3:ed:f5:8e:77:8c:e8:37:45:1d:b5:a9:22:54:62:
7a:7e:2a:6b:3b:3d:cc:dd:ea:c2:39:bc:e8:42:52:f6:65:b6:
07:08:21:bf:e3:16:ed:a8:fd:11:a8:89:80:50:ee:48:d2:d2:
2e:ca:fa:cf:62:5a:56:a5:76:50:09:53:ff:99:a6:f0:81:51:
60:0b:19:84:51:c4:d6:04:80:63:57:89:cc:6c:dd:9d:bb:29:
99:ad:de:64:de:f1:af:f3:a1:05:f9:3a:0e:c4:30:1e:d6:f1:
a4:44:89:87:05:2a:55:bc:70:6a:00:e0:91:27:2f:f1:16:e0:
76:1a:96:84:e7:65:63:e9:44:cc:69:bb:c5:a4:a7:89:6d:e6:
ac:24:94:cf:f9:a5:01:83:ca:ae:14:11:48:a6:37:eb:e9:ac:
d5:dd:41:c1:25:b4:57:d6:76:7d:1b:a8:83:1d:d4:ad:1b:a1:
0b:fb:a4:39:26:21:de:96:9a:18:6f:a3:fc:86:0c:5d:f7:a5:
89:03:b5:7f:91:a6:ea:6d:64:78:86:ab:34:34:9e:ea:67:d5:
f3:35:35:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:07:49 2026 by rpki-client