Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: cW5HwtZgEhj7LF4oYp44H133Xcgoh+du8fPeClC1Vpc=
Subject key identifier: F3:E7:2D:98:CC:36:3E:4E:47:8E:E9:EC:A7:82:AE:B9:2F:C2:BB:51
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 01A1051319A9E21FA4CA663E304CABB621CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 08A7
Signing time: Sun 04 Oct 2026 04:01:40 +0000
Manifest this update: Sun 04 Oct 2026 04:01:40 +0000
Manifest next update: Mon 05 Oct 2026 04:01:40 +0000
Files and hashes: 1: 1yTxuvJTgzp3vueVNPtMM4HSlnE.roa (hash: C3mQ9ASRyTlSwgnHvOngoGQirohvWMvEni68YFNubqo=)
2: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: qi9zbfjFFzH9VxldwEdZKj1fjGCYhz19QfoiX9LUhJI=)
3: xweu5qCO47VIbmMKNVD40EQTVOU.roa (hash: 2Ggr+oJ9NSlt1DGrtrpkA0zHBUc5XOHY+zg99GvfTiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:13:19:a9:e2:1f:a4:ca:66:3e:30:4c:ab:b6:21:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Oct 4 04:01:40 2026 GMT
Not After : Oct 5 04:01:40 2026 GMT
Subject: CN=f3e72d98cc363e4e478ee9eca782aeb92fc2bb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:76:dd:ed:59:6e:1f:b4:8c:5d:ae:1d:9e:
cb:82:bb:a2:77:a6:db:8e:7b:3f:6f:5c:de:42:f8:
a7:8a:ad:c2:0d:4a:de:04:1f:66:6e:b0:f1:3f:d7:
45:1d:5f:38:6f:25:50:44:41:8c:99:67:2b:53:6d:
47:6e:a2:be:c6:fd:c3:f4:ce:88:e7:a6:ac:de:bc:
40:a8:6b:64:30:6d:00:d9:89:21:07:87:15:ac:7f:
c9:23:4c:ec:fa:f7:8d:9c:c1:ec:1d:b2:de:7f:1c:
80:45:43:fc:21:a0:2a:ff:90:81:3b:61:a7:db:cb:
94:36:43:09:98:76:87:f5:5f:f1:7f:e9:17:b1:5f:
f4:b7:af:a5:2b:8e:4d:93:c0:67:7d:2b:83:f0:ec:
c4:32:96:7b:be:5d:35:79:3d:1a:fd:99:c0:d5:72:
3e:7a:db:96:cc:ed:78:b4:23:0e:89:20:d0:0f:79:
6f:ef:f6:08:e0:95:63:a3:a0:46:54:0d:16:a2:a2:
54:b4:a0:d0:a8:32:c8:1b:96:bd:cb:44:7f:82:f1:
ea:35:4b:cd:f0:ee:ef:05:1d:38:d0:40:8e:70:f4:
11:df:37:d3:71:56:e7:a2:e1:cb:2b:41:e0:b6:e0:
7d:c1:f3:43:07:8a:05:07:ee:e6:5f:13:a2:a9:df:
33:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E7:2D:98:CC:36:3E:4E:47:8E:E9:EC:A7:82:AE:B9:2F:C2:BB:51
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:f5:c6:26:bd:3a:63:79:91:52:bf:7f:71:69:41:03:ae:c8:
78:13:0a:26:97:3c:2f:6a:ef:c2:6e:23:3c:f9:a7:7f:db:fc:
2c:2f:92:96:b5:97:e5:a7:72:4e:84:8d:5e:25:70:15:81:a0:
3d:cf:6c:1b:b6:74:a5:24:c6:cc:c9:1a:02:cc:7d:7d:39:d0:
25:8b:43:4f:54:73:95:04:4b:ff:f0:08:9c:e2:09:62:0e:50:
7f:69:8f:28:63:c6:2f:4e:d0:75:1c:e3:4f:fa:fd:da:13:08:
19:d1:e9:ce:08:bf:c7:0b:35:26:98:a1:33:72:51:95:32:af:
a2:a6:f4:a2:89:80:1c:12:fe:73:9d:1b:c9:52:0e:4f:3c:9c:
e1:15:53:b0:e6:09:d3:2e:72:26:e0:e0:8f:25:da:07:ef:ce:
83:44:0e:19:5c:92:e0:c6:37:5a:57:b8:52:3a:03:b9:a4:fc:
0f:e6:4a:9f:d0:b1:5e:b3:19:23:8a:36:ef:05:c7:d3:8b:68:
d9:fa:a0:ce:0c:e2:92:17:16:f1:fa:b8:cf:fb:5a:b9:51:c4:
7f:0e:9d:2e:8f:35:2c:cd:d4:93:b2:bb:fa:39:9a:b4:48:11:
ab:90:f2:bb:c0:b4:8e:de:27:5a:f7:8d:c1:43:1e:f4:a4:60:
d5:bd:a3:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:30:53 2026 by rpki-client