Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
File: _XjxP_qS8HTr5VfSotKa0Noz5dg.mft (raw, json)
Hash identifier: 6I80S+XVAto5CCkEPLTj418sm6hqy6yarHl+q+373ok=
Subject key identifier: 52:68:F8:E2:85:02:3F:E7:B7:FC:BC:2A:62:59:7D:71:33:AC:69:B1
Authority key identifier: FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
Certificate issuer: /CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Certificate serial: 01A109940824482E60512B3D50A66654B596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
Manifest number: 0FE2
Signing time: Mon 05 Oct 2026 01:00:58 +0000
Manifest this update: Mon 05 Oct 2026 01:00:58 +0000
Manifest next update: Tue 06 Oct 2026 01:00:58 +0000
Files and hashes: 1: H7yvjO1PteMvFud2cVf980xvhOM.roa (hash: RhQsj0SDsU/JKqzjG9Bf/mkgnMQmL8vD/s9sreGOu30=)
2: _XjxP_qS8HTr5VfSotKa0Noz5dg.crl (hash: 3rWUk5GNMqs0ZC77eXhoImsJpk7l63cdrl3S9H6nttk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:09:94:08:24:48:2e:60:51:2b:3d:50:a6:66:54:b5:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd78f13ffa92f074ebe557d2a2d29ad0da33e5d8
Validity
Not Before: Oct 5 01:00:58 2026 GMT
Not After : Oct 6 01:00:58 2026 GMT
Subject: CN=5268f8e285023fe7b7fcbc2a62597d7133ac69b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:df:23:6b:6a:7b:12:a6:32:9d:83:5a:97:54:
bd:19:75:3f:39:a0:90:78:15:12:ff:ad:c4:20:4b:
3a:7e:4c:68:86:65:54:b0:e3:62:9f:ad:a8:1b:ae:
66:8c:f7:f3:3f:26:ae:04:35:46:e6:a5:49:5d:8e:
a8:f2:f1:3f:5d:6d:96:00:db:fb:0f:39:19:7d:d1:
71:f6:69:cf:06:b1:00:da:08:0a:eb:c9:94:01:39:
21:42:de:a1:8b:46:da:38:af:6d:ff:a0:a5:62:bd:
a2:46:d9:1a:77:31:09:08:a8:4e:e3:53:96:23:3d:
8c:bc:c7:2f:d9:86:92:22:b5:f1:d3:cd:1e:af:d7:
71:29:65:4b:57:a9:b2:ec:6f:9f:b4:63:a6:b7:eb:
a4:4f:56:bb:ea:9e:cd:db:f7:6a:85:fd:64:95:7a:
e7:91:a0:fa:1a:f2:ec:90:da:83:ac:7e:4e:8f:47:
47:c6:4c:ed:e3:70:a3:45:36:b8:74:12:05:22:dd:
68:c0:71:2d:f5:9f:6b:59:99:64:84:c4:fc:cb:fa:
23:e2:60:4d:54:6a:ab:b6:07:67:97:34:c3:63:63:
10:5e:18:bb:c1:16:da:76:d0:62:81:f8:30:b7:92:
38:4d:67:3d:20:f0:18:bd:c8:fb:f3:8e:12:3a:c3:
b5:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:68:F8:E2:85:02:3F:E7:B7:FC:BC:2A:62:59:7D:71:33:AC:69:B1
X509v3 Authority Key Identifier:
keyid:FD:78:F1:3F:FA:92:F0:74:EB:E5:57:D2:A2:D2:9A:D0:DA:33:E5:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_XjxP_qS8HTr5VfSotKa0Noz5dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e41c34-0252-4718-9f3d-fdf0118cc016/1/_XjxP_qS8HTr5VfSotKa0Noz5dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:13:b7:85:a6:26:11:a8:d7:af:61:31:99:3a:b4:78:f9:e5:
d2:f1:e9:79:b1:53:44:b3:d1:af:9c:92:51:d0:c0:29:ed:f9:
a8:f1:66:d2:89:f5:52:a8:83:91:f5:8b:8e:7a:4d:a4:be:3d:
48:e3:c0:7c:c4:b3:03:79:eb:95:92:eb:dc:65:a9:af:92:f3:
52:93:2f:f1:fa:e6:f4:5e:dd:a5:03:b3:3c:47:83:a9:b9:e4:
ee:33:c2:6c:48:46:3c:5c:a5:fb:5e:78:2c:64:43:a3:05:47:
e3:74:42:23:74:4e:c1:f6:a3:20:16:e2:68:35:31:24:b4:cf:
25:6f:53:b2:18:d0:23:48:2d:23:be:47:8c:f3:22:5e:d7:6e:
ef:c4:76:f7:85:8a:ec:22:0b:fe:30:71:9b:00:d6:f2:66:e5:
b1:a2:98:c2:68:28:02:15:85:b9:d4:96:60:a9:2d:f6:22:88:
24:ea:d5:9e:dc:70:f4:c3:ba:32:24:c5:a1:d7:dd:12:20:25:
29:5e:98:5c:69:7a:e5:fa:c4:6f:2b:e7:70:19:96:ed:a3:e5:
c1:42:dc:f3:5c:ac:d5:57:fd:ba:64:9e:c6:d3:94:ff:cf:31:
5d:dd:74:da:75:81:06:f5:47:f8:45:be:ea:0d:85:17:e9:f8:
05:74:5a:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 14:50:40 2026 by rpki-client