Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft
File: XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft (raw, json)
Hash identifier: f9aO2tsVVi6Yop3sGj3wfEaymemxqiB0Ra+31oN6qlQ=
Subject key identifier: 43:FC:72:3A:6F:DD:02:32:B8:E2:E2:19:2A:42:ED:96:BB:E0:C0:18
Authority key identifier: 5D:D6:C1:38:4B:4A:4C:A5:01:DD:33:C5:F0:D8:58:0D:44:16:EB:3A
Certificate issuer: /CN=5dd6c1384b4a4ca501dd33c5f0d8580d4416eb3a
Certificate serial: 01A1DD269773E07DDE0687AD3C7AAFC58974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdbBOEtKTKUB3TPF8NhYDUQW6zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft
Manifest number: 07F1
Signing time: Sun 15 Nov 2026 03:00:56 +0000
Manifest this update: Sun 15 Nov 2026 03:00:56 +0000
Manifest next update: Mon 16 Nov 2026 03:00:56 +0000
Files and hashes: 1: XdbBOEtKTKUB3TPF8NhYDUQW6zo.crl (hash: 29eAOK1dP7naHpcxL/MBZogu7cZa1u/TC97Zas1jbHw=)
2: x90dPkWW8REhzconoQULUI7Rl80.roa (hash: IZPztQukbhq4U8uDrkKMf9ofAgLjzhebtlSwoKIMZXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdbBOEtKTKUB3TPF8NhYDUQW6zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:26:97:73:e0:7d:de:06:87:ad:3c:7a:af:c5:89:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6c1384b4a4ca501dd33c5f0d8580d4416eb3a
Validity
Not Before: Nov 15 03:00:56 2026 GMT
Not After : Nov 16 03:00:56 2026 GMT
Subject: CN=43fc723a6fdd0232b8e2e2192a42ed96bbe0c018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:72:8f:71:da:cc:d5:ab:21:f6:be:2c:6e:ca:
07:df:25:c1:eb:74:cd:4f:cb:6e:7d:6f:61:8c:16:
03:80:78:d0:62:f5:cb:1f:5a:94:19:6b:ed:69:eb:
92:ed:0c:06:1f:0b:93:4a:d5:69:e2:8b:94:3d:93:
c2:11:b3:de:45:c0:1c:83:89:55:74:b4:c0:e8:1b:
e4:e5:c7:bd:c4:5d:73:1d:d6:8f:1e:18:9b:31:d1:
a8:05:ab:58:c4:31:0d:ce:70:a2:5f:96:72:f4:8c:
22:3f:fb:69:2d:80:98:0e:8b:f5:f1:6b:61:75:9f:
a2:06:e2:91:12:07:31:dc:9a:82:40:a5:69:7b:73:
7c:72:41:bf:82:dc:f6:aa:0b:a9:81:94:cf:ac:a5:
bd:bb:a9:c0:f6:33:a6:8c:78:09:2f:07:6d:15:e1:
4a:f0:dd:ad:de:02:34:20:7a:99:95:ad:d0:df:3c:
0c:39:39:ba:2d:bf:58:c9:f7:3e:e9:59:ff:b1:5b:
02:5b:8f:fa:a5:65:2a:84:57:79:0b:ff:49:f4:e2:
d2:e6:51:97:aa:27:38:c5:ee:69:1b:f5:3c:04:6f:
b9:52:73:02:bc:ef:7e:15:0c:2d:06:5a:48:46:f7:
a2:51:fe:8d:29:03:90:87:4c:db:0d:87:ef:cc:8e:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FC:72:3A:6F:DD:02:32:B8:E2:E2:19:2A:42:ED:96:BB:E0:C0:18
X509v3 Authority Key Identifier:
keyid:5D:D6:C1:38:4B:4A:4C:A5:01:DD:33:C5:F0:D8:58:0D:44:16:EB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdbBOEtKTKUB3TPF8NhYDUQW6zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:46:d5:7e:2b:65:6e:ac:75:d1:97:93:ba:bd:68:7f:9a:03:
0f:a5:64:5c:ac:86:9b:d3:e2:26:39:50:11:2d:d1:b2:de:03:
07:a4:59:4a:b1:d5:e9:4b:1e:f8:20:4c:aa:de:21:2b:47:f9:
8c:da:77:5d:32:29:93:60:67:ad:61:82:12:ec:41:ac:dd:df:
e9:05:b6:bd:00:1f:25:49:21:10:a5:be:5c:e0:8c:69:b0:2b:
be:a2:e0:35:50:d8:30:a8:c9:8e:d5:00:3c:af:ed:ed:e2:37:
e3:b4:cd:28:33:5f:d4:57:76:67:81:ca:79:90:f0:aa:76:ac:
f2:4a:94:25:7e:a6:68:72:45:a6:60:34:2f:6c:88:7d:20:44:
4e:49:7d:ab:8f:71:4a:36:00:23:6f:07:a6:db:34:bb:23:57:
61:4e:ee:b9:c2:1f:ec:b8:8d:44:07:ba:5b:21:fa:cf:72:fc:
46:86:53:f0:0c:14:64:e4:36:0a:dc:15:d5:fe:f3:7a:4e:9f:
23:ed:43:5a:2b:af:94:4f:db:70:e6:a4:f6:7d:b0:46:fd:a6:
67:36:e1:67:f2:f0:84:7d:1e:cd:da:4f:07:d8:ad:1e:49:ae:
e5:59:d0:ed:53:26:e3:e5:dd:f6:ac:3f:57:ad:36:ed:0b:2e:
44:cd:c4:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:01:57 2026 by rpki-client