Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
File: Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft (raw, json)
Hash identifier: XZiYAzMH0fJWm45ouABziY43xUCtQHdUUrwE5dEIiIw=
Subject key identifier: 2E:0F:BE:15:50:67:76:52:EE:66:55:A3:D3:1F:F3:CD:DA:F6:73:BE
Authority key identifier: 5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
Certificate issuer: /CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Certificate serial: 01A1396DDFE03410D1A822B9BDDF6F8C9719
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
Manifest number: 1AA3
Signing time: Wed 14 Oct 2026 08:01:04 +0000
Manifest this update: Wed 14 Oct 2026 08:01:04 +0000
Manifest next update: Thu 15 Oct 2026 08:01:04 +0000
Files and hashes: 1: Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl (hash: XY9xZ7DWGqiXA30SCqSalEWNuBM2y9Rd3MM7vFTdSBc=)
2: yGB3G9JvJrN2ebP00_hjVPvgDtg.roa (hash: bHuIB6ZCObrwj4J53cKXr7Vc20aEn6p9E11VTiZdX7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:6d:df:e0:34:10:d1:a8:22:b9:bd:df:6f:8c:97:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5efff2578a0e6215dc60e2da946f30d25c63cd6a
Validity
Not Before: Oct 14 08:01:04 2026 GMT
Not After : Oct 15 08:01:04 2026 GMT
Subject: CN=2e0fbe1550677652ee6655a3d31ff3cddaf673be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:1a:0a:ae:90:18:6e:0a:5a:37:9e:a6:4b:9b:
2a:18:bc:3a:ac:9a:d6:a9:b3:57:b9:6e:89:48:3a:
4f:96:d2:9e:ea:1a:96:71:d6:0b:15:ac:1f:6c:2a:
23:76:6a:61:bf:ef:d6:d6:5d:6a:61:10:58:e7:5b:
1c:f9:28:53:74:f7:7b:23:0f:49:51:fd:dd:bd:71:
16:a6:d7:ee:62:9c:0d:dc:4a:aa:64:6d:80:b9:b5:
73:6a:4f:db:32:ef:10:95:61:41:07:b3:2e:da:09:
f4:10:66:f4:3e:10:f5:d1:4a:e7:1f:d0:df:76:6b:
0b:ed:21:47:ca:f6:d7:0b:f8:0d:78:af:34:93:e1:
36:bf:49:ff:79:eb:a0:72:24:01:38:cf:07:dd:f7:
f0:77:96:77:ba:60:1e:db:2c:c3:80:2c:fa:d1:a8:
2b:5a:f2:b0:f5:6e:ed:25:3b:30:41:0d:09:72:8e:
0b:3b:45:86:7a:41:1f:de:23:5b:fc:e0:f3:78:da:
4c:57:90:52:e2:5c:00:6f:3d:10:42:fe:a9:58:b1:
67:46:d2:9b:62:de:44:87:74:9c:63:5d:73:e5:ac:
fe:3d:51:4f:ad:64:e6:93:3d:01:36:45:87:22:b7:
ee:67:f1:0c:5a:c2:3a:8d:4b:7a:01:4b:f7:c4:04:
c5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0F:BE:15:50:67:76:52:EE:66:55:A3:D3:1F:F3:CD:DA:F6:73:BE
X509v3 Authority Key Identifier:
keyid:5E:FF:F2:57:8A:0E:62:15:DC:60:E2:DA:94:6F:30:D2:5C:63:CD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xv_yV4oOYhXcYOLalG8w0lxjzWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/79d1a1-091c-4039-8778-b697907ffdc8/1/Xv_yV4oOYhXcYOLalG8w0lxjzWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:11:3e:f6:8f:44:f0:a3:e5:32:e6:e5:ce:ab:1d:65:eb:e1:
a2:bb:ad:ef:c1:e7:e1:6b:da:89:8a:12:ed:60:24:b6:bd:ec:
f8:cb:c2:6e:82:89:94:58:42:3e:1a:a1:72:7f:de:05:03:5f:
be:85:4c:a6:d5:f5:7f:6b:1a:91:18:e0:28:b5:88:3c:84:5b:
f5:ca:86:24:5e:f5:d2:f6:d1:c6:74:cd:c8:a9:fc:7e:94:14:
1d:29:fe:dd:77:d4:98:32:9c:bb:e0:d7:3f:75:ee:65:59:5f:
0a:c2:6a:61:91:20:53:6a:9e:6e:51:6f:00:d8:3a:8c:d3:26:
85:a6:aa:03:50:10:51:84:a4:1d:4d:b6:4c:d0:69:98:eb:7e:
fa:d0:ec:39:a7:95:e5:d2:eb:ee:46:a6:62:0b:a5:b0:5b:1a:
22:17:d7:60:9c:3e:70:52:b0:cc:fd:c1:96:f2:98:18:b1:f2:
29:0c:98:fe:76:66:6d:23:13:e3:06:03:5f:ff:64:72:c0:0d:
dc:16:c8:10:67:ff:8a:c0:43:3f:ce:b5:36:23:cd:a9:91:6b:
24:01:1e:19:e6:a6:8f:db:eb:32:9b:35:eb:e7:d5:cf:9b:73:
aa:c3:61:e4:27:63:9f:f3:99:a3:ba:92:bc:e7:81:55:73:79:
8b:a1:5f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:18:34 2026 by rpki-client