Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: q6PCpx2SjYTuhUp+LEma85j+7r9bwzOSIh0UG039h5E=
Subject key identifier: B0:4B:5B:B4:08:52:E0:4B:06:7A:39:C6:08:8B:F2:DB:FF:B6:82:37
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 01A0ECD3E1DF46C272207D546E69FDAA0D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 1A80
Signing time: Tue 29 Sep 2026 11:01:43 +0000
Manifest this update: Tue 29 Sep 2026 11:01:43 +0000
Manifest next update: Wed 30 Sep 2026 11:01:43 +0000
Files and hashes: 1: BVjAALpJvxuQy2GyePspuTkr6KE.roa (hash: n2Oqqyn+P3DE0EdI3BsAkGnYPcIXpRm9D9/3qqS3Klw=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: 1ekEdGbFM8GkZAr1Y5H4IxomOdZTOOeCFw2TsXrbrmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:e1:df:46:c2:72:20:7d:54:6e:69:fd:aa:0d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Sep 29 11:01:43 2026 GMT
Not After : Sep 30 11:01:43 2026 GMT
Subject: CN=b04b5bb40852e04b067a39c6088bf2dbffb68237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:21:c0:db:34:cd:04:b6:97:80:95:8b:ac:c0:
03:b0:b4:59:08:a0:10:17:64:ca:2a:dd:57:83:7a:
d2:22:bd:c0:22:e0:37:b0:48:28:ae:c3:fc:0b:52:
cb:7c:25:39:f7:03:42:4b:23:40:e2:48:c6:1b:80:
76:77:73:e4:4c:98:af:61:e0:7c:76:c1:7b:99:18:
f0:88:a8:8d:e4:17:a3:14:1e:f1:67:ed:8c:99:8e:
b0:ef:7d:b1:dd:a3:07:05:ac:86:fb:04:45:14:64:
fe:4a:da:b0:87:0e:9e:77:f3:87:69:b5:fd:ac:4b:
e0:d7:f9:d7:2f:0d:ec:de:b0:48:47:6f:99:77:de:
97:30:bd:cb:15:83:74:47:bc:00:4c:1a:12:62:a0:
de:45:eb:05:59:de:c6:5d:89:b7:22:d6:b9:2e:cd:
19:d5:c5:42:f8:81:66:0f:b8:79:fb:eb:72:e8:b7:
29:51:40:0d:5c:42:82:d4:07:03:0a:d9:2f:c0:69:
14:d9:0f:07:a9:73:06:6c:35:ca:8c:c5:89:ea:3d:
f3:cd:fb:83:37:50:ab:1b:a9:f0:af:27:e9:7e:52:
da:40:87:9f:40:6d:7a:51:04:2f:59:6f:50:45:81:
6e:68:bf:41:27:99:85:37:1a:1e:63:a5:1d:65:9c:
26:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4B:5B:B4:08:52:E0:4B:06:7A:39:C6:08:8B:F2:DB:FF:B6:82:37
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:7f:23:12:bd:37:94:53:70:0f:29:6a:b7:b1:1c:6a:69:89:
35:6c:26:d8:6a:9a:92:f6:d5:ed:70:ed:01:01:05:b1:96:6f:
83:2b:56:98:ef:d2:5f:de:ec:f1:6b:4f:09:71:39:9d:c7:1f:
7d:44:6b:73:f1:09:17:b1:85:86:ec:82:44:d8:d2:2d:c8:9a:
39:db:9d:e2:bd:54:7a:f4:bb:f1:ec:41:43:4f:f7:6a:42:33:
37:b7:d0:56:b2:f0:65:04:5e:02:6b:85:e1:37:08:d3:e7:2b:
8f:8f:bd:da:d5:f9:6d:70:1a:97:a2:f8:72:5b:1f:49:6a:73:
52:e6:7b:89:7c:24:4d:cd:06:23:c8:13:ee:37:38:98:fb:29:
07:d9:57:14:96:55:2d:42:f6:f9:08:48:96:1f:a6:46:2f:4b:
a4:7a:fc:df:db:fd:8e:fc:e1:82:85:a4:41:34:ca:2c:63:9f:
9c:20:ad:be:4c:e0:ea:df:6c:28:76:d7:d7:40:e4:8c:7f:2a:
e0:18:79:3b:01:a1:ed:cf:3f:b1:81:fe:9d:d7:e2:12:3b:e6:
ea:9e:82:4e:d6:f1:11:c3:92:b2:3d:63:25:c0:89:07:91:89:
2d:8d:6a:15:ca:54:54:94:ca:95:48:be:f0:fb:28:00:bd:b7:
82:90:62:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:42:04 2026 by rpki-client