Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json)
Hash identifier: omd1q9Mum3BNK1STt8UIMWOzdytLfubYzz6gARPrvDs=
Subject key identifier: 3A:47:E7:E1:1B:33:DB:C0:F0:14:A8:77:FF:81:A9:97:9B:26:A5:DC
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial: 01A0E99B3DED94B2B9A03D6EB28338E9C76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
Manifest number: 15E5
Signing time: Mon 28 Sep 2026 20:01:00 +0000
Manifest this update: Mon 28 Sep 2026 20:01:00 +0000
Manifest next update: Tue 29 Sep 2026 20:01:00 +0000
Files and hashes: 1: NrZRCuerFzj4EhFGKoh_NKbZNxM.roa (hash: 5QAUpIfqv2CVCHxJDOL189fybpsclOVK/PxPIJsB8Xs=)
2: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: oCK6FMyPIWsIp74NLCQ6Yn9Oc/ta7t5VSXV3GZiGBhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:9b:3d:ed:94:b2:b9:a0:3d:6e:b2:83:38:e9:c7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Validity
Not Before: Sep 28 20:01:00 2026 GMT
Not After : Sep 29 20:01:00 2026 GMT
Subject: CN=3a47e7e11b33dbc0f014a877ff81a9979b26a5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a3:ea:63:0f:28:37:51:58:4c:ce:21:a6:33:
f0:4f:c1:85:ce:16:e1:1a:d5:fb:87:af:62:ce:ed:
12:d4:da:f6:8d:a1:c2:97:25:dd:45:d8:39:ec:3b:
b4:7f:9f:79:93:79:52:b0:15:53:15:3b:db:a0:b0:
55:5e:4a:b4:07:97:43:10:7a:f8:f7:b0:b3:b4:21:
65:58:de:ee:25:77:40:e0:93:52:ff:e9:e8:00:9a:
1c:79:8b:62:21:dd:fa:c3:02:80:44:52:db:9a:a0:
15:93:e6:b5:66:bc:00:9d:09:c5:d8:7c:07:18:91:
90:4f:b7:2a:ba:f1:e8:ea:17:71:85:d4:c1:b5:cf:
d0:e1:13:12:82:01:cd:fc:81:b6:0b:62:2b:3e:2f:
13:79:3f:ac:80:19:bf:46:54:98:ac:3a:3d:6b:aa:
0e:01:a9:25:61:64:6b:a2:3c:71:87:0a:08:34:64:
1a:32:93:8d:99:f9:8d:23:d3:2b:47:ca:22:36:e6:
c9:42:e5:cb:96:d6:86:59:66:da:85:fa:d4:7b:36:
b7:4c:a7:58:d0:8b:60:8e:2f:5d:3c:1e:f2:35:2d:
ef:4e:6c:f9:08:87:eb:ca:49:31:2d:54:5a:c7:ee:
4e:7a:5e:4d:9a:ac:54:ec:48:4b:a6:85:e3:b4:76:
eb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:47:E7:E1:1B:33:DB:C0:F0:14:A8:77:FF:81:A9:97:9B:26:A5:DC
X509v3 Authority Key Identifier:
keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d0:7c:4e:df:97:65:a0:b4:10:a4:5c:d2:68:63:f4:54:8f:
7c:8c:f2:01:29:d5:42:bd:36:fc:4c:59:d9:2d:53:ab:a6:5e:
72:6b:63:51:62:ac:ed:f3:1f:e0:7b:de:c4:9d:ee:fc:d6:67:
77:71:6c:97:2c:3f:3c:75:01:4d:76:31:dc:0e:f4:a1:76:e2:
d3:c5:ad:0e:20:f7:d0:dc:ef:36:89:d6:a4:b5:8d:63:98:fb:
72:3d:db:74:84:74:f9:37:44:05:a2:fb:34:39:82:0e:c0:e4:
9d:3c:53:df:f2:d2:89:d1:20:15:9d:1a:af:e6:a8:50:5d:93:
7c:f6:51:db:1f:b9:7e:36:bd:77:df:3f:e3:74:0c:4b:26:f3:
29:ca:7e:22:d3:bc:a5:3c:17:73:41:92:71:17:0c:f9:f8:ce:
a1:db:ac:90:a8:f0:56:ce:f0:c6:8c:50:1c:61:06:e1:5f:3c:
86:ba:22:06:ca:23:61:46:24:02:2a:92:16:b0:64:ca:7a:d5:
96:db:ab:ba:62:20:f2:ad:b5:41:47:94:64:06:b1:a9:e5:5a:
41:d4:58:3c:62:e0:5b:10:07:c2:ad:f7:6a:60:e3:0c:fe:6b:
a4:6d:37:01:38:42:80:a2:80:5e:83:3c:57:29:88:be:b7:df:
72:d1:ad:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:34:07 2026 by rpki-client