Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
File: xb-nGlET_tgkZHdsFDcVFMkhjvU.mft (raw, json)
Hash identifier: R6ElV7jWiNcakLrSAgg3Kl86guJF7lf7askLKKK5++g=
Subject key identifier: ED:BD:DC:D3:24:3C:CA:E7:92:71:C9:12:50:FF:84:C8:41:E8:72:D1
Authority key identifier: C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
Certificate issuer: /CN=c5bfa71a5113fed82464776c14371514c9218ef5
Certificate serial: 01A0E02AD9D2B1447B3C171EC100D0888254
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
Manifest number: 0EAC
Signing time: Sun 27 Sep 2026 00:01:39 +0000
Manifest this update: Sun 27 Sep 2026 00:01:39 +0000
Manifest next update: Mon 28 Sep 2026 00:01:39 +0000
Files and hashes: 1: jBvSHulkiAFNZq-1Sz_1NBwC4gw.roa (hash: kIr3tsaXSv0n1HwqnJcooiylPmXgSiBfGD9CqML14GU=)
2: xb-nGlET_tgkZHdsFDcVFMkhjvU.crl (hash: TilFOScflw7e71EBevGfD7+HujcNRXS4YolXPDfTf00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:d9:d2:b1:44:7b:3c:17:1e:c1:00:d0:88:82:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bfa71a5113fed82464776c14371514c9218ef5
Validity
Not Before: Sep 27 00:01:39 2026 GMT
Not After : Sep 28 00:01:39 2026 GMT
Subject: CN=edbddcd3243ccae79271c91250ff84c841e872d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:77:63:f4:e9:17:ec:49:e8:26:8b:f2:01:f5:
b3:2c:e0:55:d9:bd:ad:85:e8:1e:b6:67:20:9f:37:
45:21:3f:ba:8c:0b:2e:0e:dd:cd:9f:cd:10:2c:5c:
d3:40:29:d1:fe:6e:a4:1f:ae:e3:cf:b5:ea:57:ff:
a5:4c:c5:2d:97:31:f5:13:0b:23:01:3b:9c:7d:aa:
bd:06:31:a1:d7:d4:b0:c3:62:f6:e9:73:ac:7a:39:
5b:bd:b4:e3:03:26:2c:b2:8c:bf:85:93:67:91:e9:
72:64:d8:41:87:75:cd:59:8b:56:01:45:75:a0:87:
2a:14:1a:5c:48:40:a8:3f:d1:d9:0a:7e:fe:6c:43:
5e:89:1c:23:e4:96:c1:b9:80:fa:ff:58:e1:f7:b8:
2f:4e:a1:f2:1e:ec:38:1b:eb:09:b8:c1:ee:7d:52:
82:c3:2d:79:d9:a8:1e:55:4d:31:83:f7:a7:fa:7e:
2a:d4:37:f0:4f:4e:32:64:45:bb:20:a9:4b:25:bf:
52:aa:a5:3a:0e:80:c8:a3:68:21:78:e6:d6:e8:ae:
31:c3:50:be:1c:dd:7e:56:d8:66:b7:30:b2:47:bf:
36:55:ad:92:20:5b:40:f1:00:07:b3:2b:ee:0b:f0:
90:3f:88:b4:b2:45:2a:72:a6:f3:92:5e:8d:ca:c0:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:BD:DC:D3:24:3C:CA:E7:92:71:C9:12:50:FF:84:C8:41:E8:72:D1
X509v3 Authority Key Identifier:
keyid:C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:58:1b:9d:0c:42:97:78:29:d1:c9:d0:5a:ec:54:17:64:e6:
a9:d7:e0:5c:8d:1c:6b:49:55:8c:ce:02:38:5e:89:64:ec:00:
02:30:05:9d:91:c3:7a:83:a5:93:2f:0e:89:b9:52:30:53:20:
fe:82:cf:c3:66:98:5a:de:17:be:a3:3a:45:c5:34:9c:0a:91:
41:73:2a:cf:e2:bd:1e:be:83:58:49:af:59:cb:6e:a6:36:4c:
21:6a:5c:ef:8f:31:4c:79:81:4e:35:01:65:2d:d6:30:61:40:
5b:96:70:36:07:a3:4d:ac:3a:32:7d:0f:0c:76:11:cf:a4:8b:
94:f7:b8:3e:9b:85:5c:8e:c2:5b:c8:34:72:0e:f8:11:88:f1:
80:a8:b4:6c:1e:83:fe:74:04:38:3d:f2:a3:db:42:32:e5:bd:
26:67:89:4b:53:34:24:49:65:cc:7c:39:6a:0e:39:9f:10:5d:
e4:8e:55:e9:4b:7f:29:64:e6:87:8d:d9:0a:0f:b7:6b:2e:78:
ef:4b:9d:f0:88:44:23:cb:13:43:64:ad:7a:24:c0:b0:21:41:
8b:91:f5:84:de:ac:dd:1c:07:23:37:48:d9:ee:fb:db:b6:63:
5b:28:4c:34:19:ca:a4:c0:56:30:30:54:ce:ca:25:f1:f0:8e:
ef:44:d4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:17:09 2026 by rpki-client