Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: KHgwcaZiw56a4qJmgXWvhXErKVCm5vdbZuu66fOeWls=
Subject key identifier: 1B:6A:F0:35:96:30:76:61:95:8A:FD:6F:6A:93:A6:16:4D:41:8B:B9
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 01A1DA94171C30D5A78D8F62BA0EDC7BAD5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 0AB6
Signing time: Sat 14 Nov 2026 15:01:40 +0000
Manifest this update: Sat 14 Nov 2026 15:01:40 +0000
Manifest next update: Sun 15 Nov 2026 15:01:40 +0000
Files and hashes: 1: 1-N-Z3cPVFu_Om0GHK2AgOkgXdoM.roa (hash: fr16WHaKP/dmz7kwPH4GVwwXFVV/SyIEEVY49/wQV+U=)
2: 1aw8Nv97xOelgCP3-YnwnaxEm5Y.roa (hash: jy29WIgwdNl8op/0r93ONPzqQSdB42DU8p3Gs7efZY0=)
3: 2PxDuTNSWd2nVBQOyZp7w-a3G48.roa (hash: nuRMk74zjQwmTzVhehj6QjrkhW4+qo+fGCHLFEBJBC0=)
4: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: BrhZ0IPH3TFElwS7FGMNDV6R5mqqv3mxXlpSVDq2bHQ=)
5: c9R4pyYEgXuth8LibhVlQrijaqw.roa (hash: GjJoF2AKi6roB+eJMggN2owFvnp/FEnfdBtdPLGnDgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 15:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:94:17:1c:30:d5:a7:8d:8f:62:ba:0e:dc:7b:ad:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Nov 14 15:01:40 2026 GMT
Not After : Nov 15 15:01:40 2026 GMT
Subject: CN=1b6af03596307661958afd6f6a93a6164d418bb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4c:ff:9a:4a:f2:b6:3c:d6:24:98:28:cd:7f:
85:90:13:6e:8f:aa:56:d4:25:50:b3:c8:32:b9:76:
9d:38:e8:cb:1e:83:2f:29:5d:0e:39:0a:e7:8a:c3:
f3:7a:e1:95:fa:f0:2a:27:92:9c:e9:08:4b:ec:b7:
45:81:bc:28:80:95:27:db:9e:51:26:14:8b:97:9b:
6d:15:a0:32:08:f0:46:b8:e4:68:d7:2a:d0:60:46:
1d:00:b0:1e:16:09:dc:93:18:af:04:4d:a2:64:e0:
e4:f6:3f:8a:cb:54:ff:02:c8:fc:f4:72:14:04:13:
89:4d:8f:39:7a:e1:76:14:a8:21:a1:e7:1b:df:f3:
c6:9e:64:9a:d8:94:51:8b:95:f3:b9:92:28:b4:ee:
b6:d4:79:fa:ca:4e:86:1b:18:e5:bb:2b:21:ed:16:
6f:40:ff:b6:16:42:47:db:d5:b5:99:5d:dd:01:a0:
97:c5:1c:f7:02:e6:26:42:7c:d7:00:9f:12:00:ec:
65:2d:88:cc:8b:55:e5:88:59:32:b5:ff:c4:40:0b:
ba:f0:3e:9d:06:d8:10:e4:a6:52:6f:ed:d6:f2:c3:
ff:f3:b7:15:4b:19:66:af:ef:18:c7:c5:29:e9:9f:
ed:46:f2:9e:f0:53:52:08:0f:be:4a:14:fa:be:84:
0c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6A:F0:35:96:30:76:61:95:8A:FD:6F:6A:93:A6:16:4D:41:8B:B9
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:99:36:96:b7:4e:d8:83:58:e5:4c:82:92:99:99:d4:b2:72:
a4:2d:82:73:7f:e8:0f:9d:d5:2f:ed:86:a6:da:16:12:c2:c6:
8d:ec:7b:0f:fe:94:87:41:57:2f:8d:d1:5b:c1:2d:b2:ea:4a:
b2:d2:13:e7:c1:9b:f9:d0:72:ae:f2:e9:b3:b1:55:a5:68:07:
a9:8a:3f:99:af:e2:ba:83:4b:0d:e2:7e:72:66:b4:af:20:48:
34:99:b5:77:8e:95:ec:57:26:e3:25:14:e2:ad:59:c2:23:89:
e4:53:a9:ce:fb:d6:93:83:b3:7a:bb:7e:e2:57:5f:85:98:ca:
1c:e9:1c:34:6c:8e:10:a4:6c:e3:ed:0c:26:8a:aa:77:48:a2:
f9:98:22:1a:bb:70:1f:14:24:0c:34:4a:7a:50:c9:bb:77:23:
d4:e5:3a:b6:8d:86:2c:d2:a8:89:9e:6f:d4:9f:59:e8:f1:f5:
57:ce:d6:7c:53:44:45:c2:ca:eb:86:9a:58:5f:7a:ca:76:04:
cd:00:81:d6:53:98:54:c0:85:de:cd:24:39:08:00:63:14:04:
5e:d0:32:b5:ee:f4:bb:ce:bf:50:6a:f9:67:42:12:b9:0d:29:
97:48:9f:23:4c:6f:74:41:3b:21:06:19:27:8d:7c:fa:bf:34:
55:ce:0e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:43:12 2026 by rpki-client