Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
File: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft (raw, json)
Hash identifier: LQNzBWgZ7lTMgUXS3xwqWpzGjoXsLte7Lc5MHCNKHQE=
Subject key identifier: 0E:DE:08:1F:B0:FB:55:EA:BC:39:EB:AC:01:CE:DD:78:8C:A2:A0:47
Authority key identifier: 5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
Certificate issuer: /CN=5e8e581537e7aa66783c3403822a1181a3168d08
Certificate serial: 01A105EE4BF8A763C1DB86499CED7544C73D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
Manifest number: 0EB2
Signing time: Sun 04 Oct 2026 08:01:05 +0000
Manifest this update: Sun 04 Oct 2026 08:01:05 +0000
Manifest next update: Mon 05 Oct 2026 08:01:05 +0000
Files and hashes: 1: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl (hash: /aGCAbGqH3ZCrvOHkekLVkbK5OWIZuVCmmt3aIcllVw=)
2: zUPOhxihYzhbcX4tok2wWWwFbw4.roa (hash: MhLBWRoR0j43G7PjNgF2nCiYDlCAe2m1lXi02+T0zpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:ee:4b:f8:a7:63:c1:db:86:49:9c:ed:75:44:c7:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8e581537e7aa66783c3403822a1181a3168d08
Validity
Not Before: Oct 4 08:01:05 2026 GMT
Not After : Oct 5 08:01:05 2026 GMT
Subject: CN=0ede081fb0fb55eabc39ebac01cedd788ca2a047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:3a:ac:93:20:3f:5c:0d:d9:dc:ac:c4:17:fe:
3f:2c:d3:62:d6:34:e5:d7:c0:e0:a2:9e:f1:55:e8:
a8:6d:32:98:41:95:d6:90:f4:ff:f2:53:e9:d5:6f:
54:84:c1:60:37:7b:24:45:d4:7a:62:10:19:86:04:
65:bc:7c:fc:e3:2b:39:87:08:c2:5a:f1:48:38:ff:
16:f2:2d:b3:91:4f:2e:32:72:11:f9:e9:39:88:29:
d9:00:7c:df:b2:06:67:7f:44:20:18:af:f0:09:4b:
05:bb:5a:ea:15:c8:d9:ec:b5:df:b1:c4:f4:9d:dc:
01:8f:1b:08:4b:c8:75:e5:5d:ed:36:90:73:9d:c2:
9b:eb:98:9b:11:42:cc:a7:70:c0:15:a5:6b:38:90:
e9:d0:03:06:d6:36:a5:43:81:4b:d0:13:b2:dd:f1:
0c:c9:84:5c:85:47:3c:30:6b:63:ad:3c:a3:f0:bf:
9b:e0:5e:0b:f6:c4:d2:35:90:27:1e:b3:20:98:4b:
6c:87:78:94:2e:bf:8e:3c:c6:1c:f2:b7:1b:e2:63:
1e:07:eb:83:41:91:cc:52:0c:98:30:ab:96:6e:62:
f5:2f:d2:e9:67:08:dd:de:f1:7b:4d:d9:d8:65:70:
b7:92:17:73:81:e2:d3:0d:6c:e2:c0:f6:08:98:78:
59:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:DE:08:1F:B0:FB:55:EA:BC:39:EB:AC:01:CE:DD:78:8C:A2:A0:47
X509v3 Authority Key Identifier:
keyid:5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:43:ae:32:9a:f1:7f:e5:9e:e0:bf:62:d5:b6:5c:9a:71:e1:
f9:84:f7:b5:82:e9:a3:0f:a8:98:cb:67:ff:c2:b3:5d:c2:30:
56:4a:83:ba:ea:68:e0:b1:04:19:8a:e5:67:a8:5c:15:0a:04:
84:5a:17:fa:fe:5e:b1:c9:09:82:cc:9b:35:8e:a6:69:94:20:
0b:cd:5b:95:0b:27:fb:09:e1:c5:cd:76:3f:ad:4e:27:4b:d8:
27:db:e8:51:b5:4f:55:85:e4:f0:36:d3:6a:5d:f0:c7:b1:58:
5a:1a:b9:c6:a9:50:a4:3e:00:84:3b:dd:75:7a:eb:c4:b3:cc:
de:64:80:45:fc:11:08:23:df:62:7c:ab:dc:27:01:32:f1:77:
52:b7:76:c6:f1:b8:58:33:77:53:7d:0f:e2:5a:97:2d:8c:6d:
77:7d:1a:a3:26:10:45:94:e4:e9:98:3d:77:78:9e:08:16:89:
68:61:dc:1e:17:6e:72:74:5a:3b:cc:e2:8f:fb:24:2c:6b:db:
b7:ed:61:59:5d:d2:b5:9e:c1:bb:ae:e0:9d:f1:d0:66:26:1e:
0f:e6:e8:46:2d:1e:a4:1d:48:81:d2:bf:59:54:e8:8a:5d:b2:
f2:47:5a:71:68:d8:3a:ee:4d:32:f7:bf:3a:d7:24:c9:6f:96:
2e:4b:fd:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:06:41 2026 by rpki-client