Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
File: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft (raw, json)
Hash identifier: 0n9PjOLpTmeGr762UPK83oqSnZvIj/3GdtcvhCqvFiA=
Subject key identifier: 3C:18:34:B2:2F:45:7B:B7:17:8C:22:9F:35:46:19:45:36:76:BE:B5
Authority key identifier: 5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
Certificate issuer: /CN=5e8e581537e7aa66783c3403822a1181a3168d08
Certificate serial: 01A107DC75C5226A98CD4D553D89F963D9F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
Manifest number: 0EB3
Signing time: Sun 04 Oct 2026 17:00:50 +0000
Manifest this update: Sun 04 Oct 2026 17:00:50 +0000
Manifest next update: Mon 05 Oct 2026 17:00:50 +0000
Files and hashes: 1: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl (hash: Bp38gvJi734DO6Z/2IduzHRZrnFokxAQ4IEOHqmg69c=)
2: zUPOhxihYzhbcX4tok2wWWwFbw4.roa (hash: MhLBWRoR0j43G7PjNgF2nCiYDlCAe2m1lXi02+T0zpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:dc:75:c5:22:6a:98:cd:4d:55:3d:89:f9:63:d9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8e581537e7aa66783c3403822a1181a3168d08
Validity
Not Before: Oct 4 17:00:50 2026 GMT
Not After : Oct 5 17:00:50 2026 GMT
Subject: CN=3c1834b22f457bb7178c229f354619453676beb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4c:9e:f3:6e:1a:ef:83:4a:83:08:10:b0:6d:
6e:25:a6:6e:a6:04:5f:bb:d4:b7:96:1a:43:c8:cc:
cb:a9:6d:b7:1a:86:d2:0e:5f:e8:b9:1f:56:f4:fd:
ee:c2:e4:10:2d:85:92:ce:30:b0:dd:70:bc:7a:63:
09:41:22:40:14:8c:f5:c8:2c:c0:e6:b7:c8:5c:9c:
ff:a6:f3:ff:56:c6:20:7f:31:06:cd:e2:7b:2a:69:
a7:35:36:6e:f6:04:5e:a5:85:af:1e:b3:c3:0e:8c:
95:29:5b:93:ed:b9:a0:38:44:50:8e:74:12:c6:3e:
70:96:a1:f9:5c:39:cc:da:2e:cf:7e:a1:15:9d:76:
2e:4f:55:81:d1:3a:fd:aa:68:10:38:d8:28:a3:4e:
1c:1a:4f:a0:cb:60:c0:d7:0e:02:89:b1:10:c2:db:
2d:ee:24:d5:e1:8b:34:68:c4:1a:0a:c1:34:1f:cb:
7b:42:c6:69:7b:4c:b7:3c:aa:b6:55:63:45:af:da:
04:ec:5f:47:59:9e:64:ac:69:04:ea:58:63:63:ed:
ef:35:42:9d:a1:f6:39:d4:13:15:0c:27:a6:e1:ce:
92:bc:91:67:79:d3:62:78:3f:9a:c9:33:99:43:5a:
f9:bd:fb:c8:39:f4:1f:08:ef:ee:95:a5:27:9e:2d:
a3:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:18:34:B2:2F:45:7B:B7:17:8C:22:9F:35:46:19:45:36:76:BE:B5
X509v3 Authority Key Identifier:
keyid:5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:54:65:95:ca:a5:aa:86:f2:36:b2:a1:21:92:55:6a:e8:49:
01:bf:24:4d:de:00:df:2e:fa:07:0e:2c:91:ff:32:ad:ad:e9:
44:fc:fc:ca:58:17:fc:8b:6b:2f:62:84:f1:09:70:69:ae:c9:
0e:4c:2c:f4:5f:58:a0:63:65:84:05:4d:a4:0e:c1:a6:17:12:
7a:ec:9c:e3:bf:89:26:38:21:13:2c:f6:2e:50:d3:da:62:9e:
2b:5b:2f:70:da:70:7b:aa:01:f1:8d:e1:d7:db:3d:5f:69:fa:
1b:32:ec:f6:ae:60:eb:f6:1a:60:16:2b:17:3b:5d:78:01:68:
4a:0a:f2:f7:47:c1:70:28:d4:32:33:ba:4c:d3:79:bd:f7:8a:
95:bc:14:54:46:c8:46:2c:19:dd:f9:82:f7:fe:09:c1:32:ec:
a6:15:01:51:35:91:52:d4:81:2c:25:12:cb:81:f3:1b:6e:dc:
f5:10:41:64:af:5c:f4:d7:fa:b5:bc:77:94:43:a9:97:dd:be:
db:51:b8:ac:0d:b7:60:68:ae:24:bb:c0:69:ed:c9:62:50:e5:
42:be:06:d1:07:e3:b6:ed:e2:5c:cd:4a:9b:b6:f5:45:80:fb:
87:c4:9d:2a:38:56:1a:4a:30:ad:3a:42:74:d4:19:b1:aa:ce:
5f:87:b1:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:44:33 2026 by rpki-client