Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
File: XhP-KBZzV0iLUE_qxGll0U23upw.mft (raw, json)
Hash identifier: kVN9EMj+3EGB61xM48dqKLrUiR6gVPJovdak4D/B2jI=
Subject key identifier: 6E:F4:54:68:2A:11:86:D3:3D:75:EF:B2:05:AB:90:F1:75:A6:2D:76
Authority key identifier: 5E:13:FE:28:16:73:57:48:8B:50:4F:EA:C4:69:65:D1:4D:B7:BA:9C
Certificate issuer: /CN=5e13fe28167357488b504feac46965d14db7ba9c
Certificate serial: 01A1DE714C101FDBE206CF0CBCB5E73D0FF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:02:09 +0000
Manifest this update: Sun 15 Nov 2026 09:02:09 +0000
Manifest next update: Mon 16 Nov 2026 09:02:09 +0000
Files and hashes: 1: OsWqV5kxvLO3zxITMBJcQ1-SzWo.roa (hash: JSe4ZxDgFulyfZ8DBgoN9opn6yDV2vfR5CfVXcGr6vA=)
2: XhP-KBZzV0iLUE_qxGll0U23upw.crl (hash: yEJhtnPAjaUppwXq6DUhEBLYEvy3XWRar4VrwHXx32o=)
3: eZbZTXWIEfvwIX9vrH3W1UJ6wb4.roa (hash: UarGyxZlxuTDN6MQKGhHWE7FjSFEv7rUD+yerIHdN7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 09:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:4c:10:1f:db:e2:06:cf:0c:bc:b5:e7:3d:0f:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e13fe28167357488b504feac46965d14db7ba9c
Validity
Not Before: Nov 15 09:02:09 2026 GMT
Not After : Nov 16 09:02:09 2026 GMT
Subject: CN=6ef454682a1186d33d75efb205ab90f175a62d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:23:da:20:37:5a:d5:bb:fa:04:48:b4:40:
70:bd:8c:0f:3a:81:40:c8:89:f1:bb:02:27:ff:b5:
da:d9:fd:70:14:49:b4:74:7f:b6:85:cc:42:8f:ea:
fd:e1:25:f1:c9:06:19:e3:3e:80:71:00:85:da:a5:
de:ea:8d:65:ba:92:c8:2a:90:02:3b:7b:dd:3d:4b:
59:49:ec:2d:51:1e:8f:08:e5:79:ef:98:0b:18:24:
b7:4b:5d:0c:ba:cc:b0:72:fa:b9:41:98:44:b3:9d:
d5:32:4f:f7:ac:53:e7:51:82:0d:58:cd:c3:ff:38:
e9:83:05:db:35:9a:38:8d:ca:0b:53:c0:65:fc:da:
b2:f2:35:13:49:a3:93:85:32:87:83:c8:51:41:6b:
9f:23:b1:d8:b3:d0:e8:48:8d:84:6e:9d:1f:72:aa:
53:46:cf:6a:4f:52:22:bb:28:b5:b3:12:c2:2a:94:
68:d3:4f:1c:67:cd:c1:a7:91:55:69:48:9b:c2:06:
82:6d:0d:87:d7:66:39:1e:a2:0b:66:f8:0b:3b:07:
99:fb:55:b4:ba:5b:a4:f6:fb:04:54:34:8e:19:88:
f4:a9:bf:9c:ae:c9:74:e0:17:2f:b0:04:5b:10:c1:
3b:92:ef:e1:ef:ae:c6:b1:6b:1a:ab:cf:d3:80:92:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F4:54:68:2A:11:86:D3:3D:75:EF:B2:05:AB:90:F1:75:A6:2D:76
X509v3 Authority Key Identifier:
keyid:5E:13:FE:28:16:73:57:48:8B:50:4F:EA:C4:69:65:D1:4D:B7:BA:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:46:8b:62:e5:66:9e:56:5d:14:a2:13:07:17:e8:a1:e9:89:
d7:1d:f9:af:d7:b8:ca:28:f4:dd:a3:ef:ed:99:3b:6a:bd:5d:
41:b7:a7:cd:26:3b:ec:61:21:f0:96:cf:04:13:89:2c:5a:81:
6e:f5:1e:34:db:ea:3d:54:04:a2:1c:65:ce:1e:d4:db:bb:67:
b9:0d:75:23:7f:f2:a2:59:45:29:18:e3:02:2b:1e:3d:7c:58:
f2:e0:1b:6c:9e:e9:bc:8c:5f:5e:4a:ce:2a:95:69:83:e1:ea:
05:b2:12:25:9b:30:ef:f9:05:ff:02:8f:01:2b:b0:13:11:53:
34:02:91:33:2b:3b:dd:ec:62:71:9c:27:a8:64:d5:4c:64:a2:
1c:03:64:97:1c:9a:b7:4e:10:c3:b0:60:c0:4a:d7:28:e7:d8:
58:54:b2:01:09:4d:dc:a6:a5:22:ed:95:28:ba:f2:3f:d8:02:
5b:ee:03:30:e8:ea:72:54:24:38:fe:ed:67:f3:55:af:d5:67:
01:d5:ba:fb:e5:4c:26:33:6e:95:d3:5e:ce:e5:5d:0d:15:d1:
88:7e:3d:bb:e5:4b:7f:0e:62:30:f4:2a:50:d8:88:10:b0:89:
d2:f8:eb:0e:df:dc:a1:88:7c:35:bb:17:f5:0e:e9:cc:5c:56:
d5:09:cc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:49:16 2026 by rpki-client