Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: A3ZEyEzDYhX/qXnoX923oDE0/ZqvFntFqZ7iiHti4c4=
Subject key identifier: 15:DA:4E:D8:BA:08:AA:68:37:1E:78:D0:9B:1B:5D:51:35:6A:86:D4
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 01A11BD102293AB1D37B79B773DEFA98A92B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 0DB5
Signing time: Thu 08 Oct 2026 14:00:44 +0000
Manifest this update: Thu 08 Oct 2026 14:00:44 +0000
Manifest next update: Fri 09 Oct 2026 14:00:44 +0000
Files and hashes: 1: 6KBg76wO49ZTNeUZLEQvdfuAEnc.roa (hash: C78F4tRrcjaUZ0tkRMKZ6DDDl8hmlq6D1hHs1hdNls0=)
2: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: Dm0JKtrV8GprxWnluFj+rWbU1jCznSToXJ2Blp5jri4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:d1:02:29:3a:b1:d3:7b:79:b7:73:de:fa:98:a9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Oct 8 14:00:44 2026 GMT
Not After : Oct 9 14:00:44 2026 GMT
Subject: CN=15da4ed8ba08aa68371e78d09b1b5d51356a86d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:58:89:51:c1:ca:56:43:80:83:19:bc:2d:81:
49:79:d2:38:40:11:c4:86:de:17:70:91:4f:57:11:
8e:17:b2:a8:70:cc:2a:46:cb:d8:d0:ef:de:2b:27:
8a:7d:3c:2a:2a:3a:0e:65:b0:18:28:ab:ed:25:a9:
89:e1:7a:54:48:0f:00:7d:b0:72:6f:ea:f4:f2:e7:
42:5e:6c:68:5b:48:39:de:7c:3b:57:54:0c:61:be:
f6:7c:45:bf:9f:f9:44:64:e3:60:95:c7:fb:6e:f8:
c7:15:5b:9a:45:1a:60:04:38:ca:dc:ea:2c:27:3a:
ba:c7:11:4c:c8:49:15:0c:0d:52:51:25:2a:ab:9f:
eb:f0:e0:b1:7d:fd:21:fd:f7:34:85:9b:b7:1c:bd:
46:fe:14:de:39:7b:73:bd:98:84:6e:e4:1d:28:96:
52:04:3b:18:e0:3a:68:0a:04:13:fb:09:fe:4b:9d:
df:c7:67:93:d0:17:27:45:d9:a1:1d:82:01:a9:47:
e5:a9:f1:48:68:7c:95:5a:f1:11:59:e6:fc:77:a5:
67:f3:dd:0a:7f:16:0e:f5:1d:31:3d:fc:c3:a5:37:
f7:a7:0c:a2:20:7b:7a:4e:f6:2a:46:f0:1c:b0:05:
cd:a2:c5:57:9f:c5:43:17:95:84:8c:15:a3:f3:e0:
18:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DA:4E:D8:BA:08:AA:68:37:1E:78:D0:9B:1B:5D:51:35:6A:86:D4
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:03:8e:bb:c3:2c:63:de:9c:d2:65:8d:bc:44:87:7c:5a:26:
79:7c:40:c2:30:50:b9:55:38:93:e0:a3:ce:f5:c4:83:e0:f3:
11:9d:05:ff:a2:ab:dd:97:df:95:1c:c8:0e:bd:17:94:3e:2f:
b1:9a:1a:86:db:5d:5e:c2:81:78:c3:a5:6c:df:b6:24:cd:d8:
41:5d:00:cb:92:03:66:6b:91:ee:eb:3c:85:4b:49:78:e3:c9:
4e:6b:58:22:3a:ee:23:00:e6:08:74:0a:8f:e0:2b:0e:0b:3e:
84:b3:75:5b:bb:62:f9:f1:5f:5f:1a:95:75:99:53:51:b3:26:
1b:c0:3d:52:e0:30:14:5c:95:49:42:ea:83:0a:3d:0f:e2:a2:
61:a4:04:7c:a0:5b:82:d5:35:22:80:d4:27:ec:7e:13:27:7e:
ea:36:c0:2c:7b:a0:5c:b8:e5:19:d3:2e:93:8e:6e:d4:6b:65:
b8:85:9f:ab:a2:27:72:37:e5:5e:46:6d:9b:3a:08:51:28:c9:
da:28:8d:8b:67:76:0b:60:05:75:4c:ea:33:e9:ab:50:10:1b:
16:88:a4:54:bf:c0:24:16:ed:4c:a3:4a:3b:ba:16:aa:2c:ed:
6c:0e:f5:86:ab:fe:37:19:49:db:22:de:a7:dd:c5:c1:83:4b:
61:59:63:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 20:42:12 2026 by rpki-client