Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
File: XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft (raw, json)
Hash identifier: HQXd0NjY+daeOeOQmyEh0O6+4XReM0STX000VxyHfTo=
Subject key identifier: 0C:6F:B2:E1:F4:DF:EB:5B:7D:7C:1C:EA:CB:9B:BA:57:13:4D:2A:53
Authority key identifier: 5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
Certificate issuer: /CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Certificate serial: 01A13CA57DD2DB3242F0CAB2AE10180A75A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
Manifest number: 10CF
Signing time: Wed 14 Oct 2026 23:00:40 +0000
Manifest this update: Wed 14 Oct 2026 23:00:40 +0000
Manifest next update: Thu 15 Oct 2026 23:00:40 +0000
Files and hashes: 1: XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl (hash: NB8+YERyL1Zsie5AkB2ySFFCHKIlbqGny3s/rsS48nI=)
2: z7DQCTMfSpxYNEqc8NdY7ztXAQY.roa (hash: 0f3C1JOESj8A6E71R4wmJYEbq8aExFFVXotwYdP1hio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3c:a5:7d:d2:db:32:42:f0:ca:b2:ae:10:18:0a:75:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb813e09c9955e0bda7041f8373a8fc5dae6b9d
Validity
Not Before: Oct 14 23:00:40 2026 GMT
Not After : Oct 15 23:00:40 2026 GMT
Subject: CN=0c6fb2e1f4dfeb5b7d7c1ceacb9bba57134d2a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:a8:df:b4:21:8d:1d:79:43:38:03:4c:60:
6f:51:e2:c1:b9:a3:1a:20:1c:40:46:7c:01:3d:ad:
5d:96:6d:be:43:1c:70:4e:da:20:4b:1c:68:b0:78:
d6:bc:c3:5f:7a:5e:b6:88:06:7f:dd:86:2d:85:eb:
57:50:bf:8a:05:bf:bb:14:07:f6:45:af:df:cc:b1:
9e:14:16:5f:e3:f2:2e:46:df:1e:f9:e5:d4:03:f7:
23:73:69:40:d1:27:ee:73:89:c9:70:0b:5f:ad:5c:
b5:3a:a8:31:6c:cd:73:5a:c0:5a:2b:e1:c6:08:4c:
b0:1e:ab:9b:02:45:6b:66:a2:93:72:ce:aa:70:a6:
4b:1e:df:1a:62:7e:7d:2d:90:d4:d0:29:76:bd:b1:
19:09:9e:87:31:51:ac:e9:71:ac:f1:94:b6:a2:bf:
d5:a1:45:3c:b9:f5:fc:8b:08:18:3e:2f:8c:c1:ec:
34:0b:c8:3d:b7:f6:e0:36:62:ff:8a:5f:85:32:34:
6c:76:13:b5:de:9b:65:c4:53:15:74:3f:ee:97:ed:
62:b9:33:5b:48:99:6e:8c:70:06:1e:cb:8f:c6:0d:
c2:58:66:ce:82:84:f9:10:f0:9f:66:21:0c:72:02:
ae:cf:f9:c1:b6:28:a6:70:d9:90:6c:55:70:b9:38:
99:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:6F:B2:E1:F4:DF:EB:5B:7D:7C:1C:EA:CB:9B:BA:57:13:4D:2A:53
X509v3 Authority Key Identifier:
keyid:5C:B8:13:E0:9C:99:55:E0:BD:A7:04:1F:83:73:A8:FC:5D:AE:6B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLgT4JyZVeC9pwQfg3Oo_F2ua50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/37205b-fc57-464c-a1c1-6c62b9366705/1/XLgT4JyZVeC9pwQfg3Oo_F2ua50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:d1:20:d8:97:0b:d4:70:66:48:90:9d:2b:55:f8:f1:20:a3:
7a:fd:18:65:1f:b9:fe:d6:7b:15:3b:94:33:88:3a:79:85:2a:
6d:f6:87:f5:28:aa:8f:e5:d0:55:ce:4c:23:d2:9b:ac:a9:de:
a4:2c:95:33:d0:33:73:12:20:56:96:5f:af:e3:6e:fd:3a:e6:
3a:ac:5c:c1:98:b3:9c:e4:c5:ab:f0:42:51:4e:46:96:10:a1:
c4:05:e5:ba:f7:6c:44:93:5f:19:0b:ba:4b:fd:3f:0b:1a:23:
d6:a1:6d:d6:a2:40:87:e6:89:4e:b1:0e:7f:3e:d8:e0:75:f0:
43:ba:2c:af:12:45:b6:bc:d2:81:7e:e3:37:91:4d:b3:af:c6:
4e:6c:12:4e:cd:72:bc:e4:b4:2f:8d:ed:4d:fc:3b:de:29:12:
f1:38:65:9e:87:c5:d3:f8:7f:74:5f:75:1a:58:09:c4:02:2f:
b2:0b:09:21:20:94:7b:e4:66:2c:bd:06:1a:7e:1a:b2:e5:b4:
54:a8:6c:aa:fc:4f:5a:27:47:41:c6:07:21:d3:96:ef:b3:c9:
fa:ff:a0:22:a4:7f:22:6d:2b:93:99:81:82:3b:75:c5:4d:5f:
c3:03:7d:1c:64:19:aa:1d:8c:ab:8d:3a:56:0e:d4:df:77:a4:
0b:98:3f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:35:58 2026 by rpki-client