Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
File: Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft (raw, json)
Hash identifier: nALK6+5WyoPzTE1OVcp+h2aTMETW+71wjMCqBM1NZDE=
Subject key identifier: 02:00:30:33:97:DA:53:9C:40:DB:70:BF:FE:B8:34:08:05:10:31:1C
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 01A1DCF0294F46F1B5392D3523C0DD4246CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
Manifest number: 1B14
Signing time: Sun 15 Nov 2026 02:01:28 +0000
Manifest this update: Sun 15 Nov 2026 02:01:28 +0000
Manifest next update: Mon 16 Nov 2026 02:01:28 +0000
Files and hashes: 1: 1-LEx6HA_ElLN7I9P_kHQ1F1UrEw.roa (hash: mF1Cgy7Sa57VbCV/wf5zFh1Um2OlcmfFYL+kKb6eNaQ=)
2: 3M28JHI7FacsIOAJQWmxce2Slr8.roa (hash: YkTIvgr/OPBfSq7cSMGcukiH55SIyz1JhUaAuApclZY=)
3: Gk3x3dMvMywr2S8J1gmXYe0hnoU.roa (hash: /bwOAvbGES0zjJv2PTCP3py4NDDoCXEMIJubC3y4gDQ=)
4: IK5t8ZtR9FmBC9B2Oc1q_FzsZ60.roa (hash: 99eWXzzKhZzYTyaPK2nn6KPekh7aMTWJKB401rZwNvg=)
5: Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl (hash: MzpyvPzpse6r2EohdNGXJmzoyKTxYN0q6+ZNs8xl6Ks=)
6: aqoU9zJ3XearIjlOINJlmfcvvuw.roa (hash: Sz6yVgzziCuFuMg8Vphcvorcn0t0kQDujyZ/W1bGUWw=)
7: kl3oy-dFL14cqnAqsoTUT2p-gAs.roa (hash: 2IH7sBJVtOHKhrFUONXV2aGCQkjnVLJ+vB9vvY8IEzA=)
8: kyQ4JI7k9YbINgfhHLT6m28Lt5g.roa (hash: k6gw+9YpfRZ8fBPrWOAfF6dmY/qo7leQ3UVRA8om9+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:f0:29:4f:46:f1:b5:39:2d:35:23:c0:dd:42:46:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Nov 15 02:01:28 2026 GMT
Not After : Nov 16 02:01:28 2026 GMT
Subject: CN=0200303397da539c40db70bffeb834080510311c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:ed:18:27:da:f0:7d:5c:15:aa:df:64:69:
41:78:96:40:3b:5e:64:24:dc:7f:8c:91:24:bb:f4:
39:df:69:1b:17:a2:ef:49:31:f9:ca:8d:21:fb:a1:
eb:e3:94:21:af:ac:b6:03:ef:2f:ac:bc:b1:72:c8:
2c:ba:b4:02:b0:97:f1:cf:69:e9:3e:dd:4b:f7:07:
c5:24:3c:f8:09:b7:f6:38:b0:40:7e:8f:50:41:8d:
8c:f7:84:56:29:35:0c:fe:65:e1:72:c7:08:05:8c:
bc:13:a7:a3:d5:61:80:74:3c:c4:7c:6e:64:2a:d7:
c4:62:7a:91:7f:bb:33:e2:f1:78:42:3f:0d:47:4c:
a9:24:28:e5:05:ab:04:0b:97:1d:64:b3:b2:6a:57:
60:d9:5d:6d:78:0d:a3:5a:14:b1:b1:f6:c3:fe:cb:
d8:11:9b:6d:d3:fe:41:06:4b:4b:1d:22:54:39:5c:
67:76:bf:37:c8:36:fa:71:4a:0e:84:e9:6a:2d:f1:
b0:5c:14:e6:74:9e:ad:b0:17:7b:1a:3f:c3:9f:29:
5d:e4:96:7e:38:70:0f:a0:e4:5d:a7:6f:ed:cd:e1:
26:0c:1a:c4:15:02:c3:7d:90:12:cb:5d:e9:de:63:
57:e7:bb:37:1a:63:76:35:b7:2f:25:fc:8c:29:85:
9a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:00:30:33:97:DA:53:9C:40:DB:70:BF:FE:B8:34:08:05:10:31:1C
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:55:6d:05:24:40:11:73:9e:81:bd:d9:1f:80:e2:44:8a:52:
63:24:72:69:6e:7d:44:ee:f8:f2:1f:33:bc:05:85:3a:fa:e6:
d0:47:4f:08:8e:23:db:ca:50:c4:1f:34:1b:3f:1d:3c:16:24:
d8:53:af:77:d2:d3:e1:be:fc:7a:7e:46:af:fe:a6:a1:6f:05:
f0:b2:2a:e6:73:68:c8:aa:ce:bc:97:17:41:ab:6e:35:37:fc:
36:a4:b0:2c:ab:17:02:9b:cf:59:4f:40:01:b5:bc:4c:6e:83:
ca:c7:17:3a:9e:41:88:3a:2d:6b:05:22:1e:a4:ea:44:cd:3d:
a7:a3:ce:a9:34:37:b0:dc:09:78:4c:8b:87:9c:0a:1a:0a:bc:
a9:fd:cb:69:28:1c:04:b6:29:fb:b2:7f:56:4d:cd:f5:46:28:
a4:c8:dd:8a:7a:b9:54:73:65:28:f8:d7:3a:93:61:50:fc:82:
8f:34:61:f5:ee:88:89:53:50:52:9e:01:65:ad:e9:a4:c9:b5:
d2:dc:f2:1f:76:a8:c0:3f:ae:5d:13:94:ba:01:20:88:38:95:
2b:a7:3d:ba:86:78:ae:e2:01:aa:c3:ae:09:7a:1d:59:63:dc:
80:87:77:97:95:81:cf:c1:f1:4b:db:38:2f:d3:34:d6:55:4d:
62:d7:92:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:16:42 2026 by rpki-client