Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: oWkWawRk0HE3BHgW7fXFXtYuFG4xCywK+1k4MZpCVkc=
Subject key identifier: 9F:66:FD:4D:27:0E:CE:70:02:5F:FB:9D:2C:FE:77:41:5C:4F:4D:EC
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 01A135FEA79476112BFCF144B389028C755D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 0AF4
Signing time: Tue 13 Oct 2026 16:00:43 +0000
Manifest this update: Tue 13 Oct 2026 16:00:43 +0000
Manifest next update: Wed 14 Oct 2026 16:00:43 +0000
Files and hashes: 1: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: EkboAmULRmRWOBzqiS6bMl6JPsgl3DOqqYvBtB1fJ1c=)
2: fEX8gqUG1LVB_0Itz6jjy8BylCM.roa (hash: bClbr4BM1B8au7SouGGHSbu2r3IvtTxx8cZlmVhtATA=)
3: icQ0AcEvu_-qE7TgC7krMOgnJZw.roa (hash: TT85iwxVDL43p5rxPlJ2c7AZR544/dDmq5mbe/7Jn68=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 14:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:fe:a7:94:76:11:2b:fc:f1:44:b3:89:02:8c:75:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Oct 13 16:00:43 2026 GMT
Not After : Oct 14 16:00:43 2026 GMT
Subject: CN=9f66fd4d270ece70025ffb9d2cfe77415c4f4dec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:95:7d:ae:94:2a:fa:0c:2b:35:7c:dd:64:18:
2c:02:e4:77:7a:ff:47:16:2b:38:6b:61:ae:e5:68:
b2:d8:df:0e:d0:a0:7c:3d:00:a5:6b:1c:dc:94:cd:
cb:26:23:2c:0c:95:46:6b:58:a7:87:8e:fc:ec:4a:
14:ba:e1:c1:40:42:b8:32:64:df:02:77:24:e7:61:
38:6f:16:13:50:86:d0:47:3b:35:4d:de:88:69:e6:
3c:fa:98:ac:97:fe:cf:98:8c:01:4d:cb:e0:2a:91:
cd:27:2f:24:a0:d8:20:4a:76:53:2b:9f:23:3d:eb:
79:06:d3:8e:19:f5:78:aa:18:e1:47:66:ce:36:dd:
d8:49:eb:bb:fa:df:52:c8:f1:e0:4c:d3:0a:01:c0:
7e:72:cb:96:a1:34:b7:fa:6c:61:42:b9:21:9e:e9:
5c:ea:9e:85:4c:c6:47:66:65:8a:7c:80:56:41:1d:
cd:d6:43:9c:df:a1:2f:e2:ff:04:d7:78:af:22:86:
f7:2a:be:a7:e7:0a:00:04:58:14:0f:9d:57:dd:0a:
b4:36:ea:99:5a:2a:3c:0b:62:f8:2b:4a:72:85:53:
b7:72:88:5a:92:24:f7:ef:bf:4a:ba:2a:2c:33:a1:
67:6c:02:2c:28:7b:3b:57:a5:35:45:5e:a3:8a:83:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:66:FD:4D:27:0E:CE:70:02:5F:FB:9D:2C:FE:77:41:5C:4F:4D:EC
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d9:45:ba:6d:c8:10:f6:01:7f:ac:10:9d:e7:d4:15:fd:fb:a0:
e2:38:f6:d9:28:61:f0:d6:84:80:a6:8a:f6:7b:67:9c:d0:79:
8c:45:9b:ad:c9:bf:d7:a5:1d:11:8a:bc:af:c3:f9:ec:d8:e3:
a4:15:79:f7:3f:b4:09:4c:a4:e4:5b:cf:eb:2f:57:06:18:2d:
fc:40:08:40:e5:5f:82:8e:3b:87:39:7f:f7:76:ba:6b:29:21:
79:43:eb:45:f0:24:4b:a9:83:7e:4b:2d:82:46:ed:a1:40:a1:
cd:f8:57:77:42:1d:e3:b9:03:07:18:ab:c4:f4:2f:6a:03:70:
a5:1e:13:99:e3:45:3f:b5:28:7a:a5:0f:2e:66:d0:17:80:90:
47:ab:d1:56:8c:5d:a1:73:c3:ff:9b:b5:0c:21:bb:50:b9:b7:
31:be:62:3f:09:51:74:fb:6d:ca:e3:e3:69:62:d1:08:d6:c5:
32:29:59:30:95:80:fe:94:fa:0e:6a:c5:58:8c:c9:c1:68:a7:
64:c8:fe:7c:95:66:42:1e:f5:d1:e1:ca:9b:f5:82:ad:85:e8:
fe:1b:bb:a7:4a:a3:4e:63:4a:c8:42:65:7c:08:49:bc:02:8d:
32:9a:e4:ee:83:44:88:3d:d0:a6:35:31:ba:dc:a9:a4:71:58:
34:a3:a0:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 21:54:20 2026 by rpki-client