Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: ohQIcJE9AJWq71lexZavYqOkJpa2gQUFmwTpopRwlwM=
Subject key identifier: 47:55:48:80:82:C7:F6:51:34:F2:90:7C:EC:E9:6B:A9:BA:82:AD:9F
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 01A10580F65E73C47A119A127B2E15271DF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 1861
Signing time: Sun 04 Oct 2026 06:01:40 +0000
Manifest this update: Sun 04 Oct 2026 06:01:40 +0000
Manifest next update: Mon 05 Oct 2026 06:01:40 +0000
Files and hashes: 1: PzMpMCVPdUDUUH8GTuka9keIPNQ.roa (hash: IKEP0LVD3JdV2nQIZoc3FzX3XZlJgMd0mFQnJDaVjxI=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: ubRfF2TCxnxZxSY6DtJoKtIzjgPKCGFq4TvXZw5St+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:05:80:f6:5e:73:c4:7a:11:9a:12:7b:2e:15:27:1d:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Oct 4 06:01:40 2026 GMT
Not After : Oct 5 06:01:40 2026 GMT
Subject: CN=4755488082c7f65134f2907cece96ba9ba82ad9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:94:09:d3:b0:ca:bb:5b:5b:f0:95:fc:a8:61:
05:dd:7c:a1:25:82:f0:8c:46:54:2a:14:c6:60:5b:
ab:78:5e:0d:82:12:cb:20:d4:d6:6e:91:b0:17:23:
00:e3:77:4c:af:87:20:13:78:e2:e0:32:9a:5b:55:
5c:0a:32:4c:e3:5e:f4:41:3c:51:1e:83:61:c5:9f:
f7:f0:a9:67:03:8e:f3:3a:9b:51:c4:28:49:71:c5:
90:55:7f:a2:05:7f:fd:c6:a8:71:1b:8a:7b:ba:4b:
f7:8c:7d:8e:af:e2:38:a0:6a:b6:22:a2:f7:61:94:
2c:da:81:58:1b:5b:81:e7:af:a3:b1:64:dd:3c:08:
d8:1c:4a:7d:c4:b7:f6:d2:6b:fc:23:37:51:06:b2:
67:bf:3b:49:23:6f:39:ee:25:dd:1d:da:92:c9:ee:
af:d6:58:8f:30:a4:13:52:12:ef:fc:0d:e8:e2:28:
95:9a:23:1a:d9:03:9d:24:f2:c8:16:f9:32:e3:fe:
be:15:da:1f:1e:5e:d8:1f:ae:57:e1:d2:8c:82:29:
1e:b8:be:e6:4f:88:37:27:97:0f:61:0e:86:31:50:
0c:98:a8:bd:7a:0a:14:b7:2b:5c:3f:1c:76:76:78:
e6:d4:52:6c:27:38:e8:17:b3:90:75:5c:b6:ae:40:
78:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:55:48:80:82:C7:F6:51:34:F2:90:7C:EC:E9:6B:A9:BA:82:AD:9F
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e4:b9:56:a7:22:d2:6f:f6:50:d7:e1:e3:4b:de:5a:68:93:
10:69:de:9e:ff:7f:f9:13:cb:86:cd:d9:2a:b5:4b:1d:5d:17:
23:69:67:a1:e3:ba:a0:4d:12:5f:85:96:d7:c7:45:12:7e:cd:
f4:b4:b5:9d:0b:69:a8:ce:7b:75:50:3b:da:51:96:33:36:9f:
ed:f5:46:58:dd:fc:de:c3:1e:73:a3:1b:1c:da:21:5d:bd:d7:
ff:2b:32:f4:e4:11:c8:7c:58:59:a9:40:f9:5e:93:65:0f:a6:
84:fb:00:cb:59:2b:c1:d0:49:be:8d:ba:8a:7c:48:5f:75:e5:
76:0c:95:0f:05:c1:71:49:bb:2a:fe:f1:1d:35:0e:7d:22:f4:
cf:0b:8a:d2:d1:01:3e:96:d2:a6:2b:34:54:e0:45:bb:28:81:
53:ac:c3:aa:e2:2e:5e:2d:73:4e:d7:4d:ca:4b:92:36:76:65:
24:c8:8e:21:85:c5:8e:ae:db:9d:af:fd:ec:2c:54:f3:df:a3:
f6:9c:40:b3:2a:95:1b:05:9a:09:22:cc:39:9b:97:8c:30:28:
21:2e:fe:52:62:38:4d:dc:f6:da:8d:be:68:53:c0:78:45:8a:
d4:78:8d:af:3f:58:e9:b4:a4:6c:1a:fc:21:2d:39:fa:12:02:
eb:b3:3a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 15:22:00 2026 by rpki-client