Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: RjgtcmWFjeMW++NSskzkz9fFzPltLv7fNpzma7BsIuE=
Subject key identifier: A9:D7:92:03:FB:9A:2D:A9:26:42:54:32:D1:45:53:5C:8B:07:48:BF
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 01A1DACA664C60FC63F8A8626604BDAC3DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 1A0B
Signing time: Sat 14 Nov 2026 16:00:59 +0000
Manifest this update: Sat 14 Nov 2026 16:00:59 +0000
Manifest next update: Sun 15 Nov 2026 16:00:59 +0000
Files and hashes: 1: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: E9sWh+aOhMXX+FHPoIGNU2v68k/op12z+e8j0utYS10=)
2: YTkSY80BXrrm0yOSSyQ4NcWfFCg.roa (hash: Srwxxn9T4n8eBKaxltWuAJ0FzIn1uI4bI96/Rm2hnBg=)
3: dwJ-g3-3P2MZcMoOR3FNsYKSwoQ.roa (hash: CEw5oFmdA+lmNi9dXoyHwZUkPspjYdU0MaZLaXpgCiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:ca:66:4c:60:fc:63:f8:a8:62:66:04:bd:ac:3d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Nov 14 16:00:59 2026 GMT
Not After : Nov 15 16:00:59 2026 GMT
Subject: CN=a9d79203fb9a2da926425432d145535c8b0748bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ca:47:68:17:4a:4c:bc:13:ba:b0:41:d8:cd:
12:33:ec:93:ca:af:fb:2d:22:cc:f1:b5:d8:e4:e7:
d7:68:88:52:5f:5b:78:58:fc:cd:80:6f:26:07:31:
40:2e:35:b2:46:d2:01:9e:9f:a8:d5:77:86:a9:fa:
2e:b9:c1:93:d7:3d:c3:dc:48:dc:2b:11:7f:81:8b:
5e:b0:40:72:ac:ac:a1:43:d4:20:e0:68:71:89:01:
23:e0:d2:f6:47:4a:fb:b7:33:b8:d5:81:2a:9f:0a:
a8:fe:56:b7:32:b5:b2:8f:54:ac:bd:c8:26:9e:9d:
df:12:c3:ec:1c:52:39:34:58:09:06:56:8c:89:d8:
a7:c0:c1:5d:d6:05:eb:e8:fc:c0:02:d8:b1:77:74:
66:b3:8f:6e:86:62:33:bf:f3:cb:5e:bc:00:d2:75:
56:a3:c1:9c:ef:ba:63:d1:22:6c:cf:e9:91:f7:00:
4b:a6:15:f3:1a:8d:54:f8:07:8b:61:2a:be:94:0a:
8f:df:ad:4f:5f:b7:3b:4e:7c:ad:15:fd:e6:94:d6:
e2:ab:aa:cb:0b:66:c4:e1:61:82:a2:d8:d4:f7:57:
84:41:06:b0:24:52:87:19:51:11:18:0a:0b:76:72:
c6:2a:b8:78:47:90:54:78:08:1d:06:28:0a:61:ec:
c6:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D7:92:03:FB:9A:2D:A9:26:42:54:32:D1:45:53:5C:8B:07:48:BF
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:80:35:fd:71:2d:5f:82:41:41:38:48:62:e6:0f:0e:ba:24:
82:2e:d6:c7:bf:e4:bb:e2:bb:70:fb:bf:1e:4c:3d:c5:84:28:
92:45:fa:42:61:9b:3c:d0:14:54:c7:d2:05:67:30:e1:85:8d:
24:ce:59:9a:ef:94:50:36:18:a5:46:83:e5:b7:3a:c7:78:07:
e4:3d:e7:98:1c:c7:22:d6:29:28:8a:06:4b:93:b4:ef:3b:ac:
48:7f:27:59:e2:b7:31:85:e3:05:ef:42:a1:51:12:70:36:85:
b1:80:fd:ed:bf:5e:6a:d6:e7:07:95:28:75:da:da:b5:be:0d:
56:90:6b:cd:8f:82:fa:ee:c9:76:c0:01:51:a9:83:6a:b3:39:
81:3a:13:6c:b9:e1:d5:95:7f:aa:ec:d6:cb:5f:ba:7d:a1:73:
7b:6a:19:76:e8:e8:e8:1c:d2:28:46:b9:b1:23:de:1f:2a:2e:
f0:f7:c9:2c:76:60:c0:f0:e6:cd:78:41:be:00:b7:ad:1c:64:
8f:82:ef:82:83:e7:b7:39:83:15:45:31:07:c1:25:31:0b:68:
95:42:70:5d:20:0f:52:da:c6:73:94:6d:be:22:52:a6:a5:29:
9c:7e:d1:ff:b0:da:1c:72:34:2a:58:f6:32:f6:2e:81:73:e6:
8c:09:55:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 00:33:16 2026 by rpki-client