Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
File: XM97P9h86bzpn5ALZBmdYGvxYGk.mft (raw, json)
Hash identifier: /NhlWi2i658KjVKolAESVhRirJiEFeuUYx3db9ZlN2M=
Subject key identifier: 6E:0D:A6:0A:B6:D1:D3:C3:84:C9:E3:FF:BD:9C:68:7C:FE:11:66:33
Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
Certificate issuer: /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Certificate serial: 01A10814B2C5BDED706D4CE0348F7F5BAD28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
Manifest number: 1A1B
Signing time: Sun 04 Oct 2026 18:02:16 +0000
Manifest this update: Sun 04 Oct 2026 18:02:16 +0000
Manifest next update: Mon 05 Oct 2026 18:02:16 +0000
Files and hashes: 1: KhLnM9UHZFCOQul_YnhOlrlNWQg.roa (hash: F9XQk4xPu6hZHYNZKH9uTFT9zpakfltc+2j9WkGLNVk=)
2: XM97P9h86bzpn5ALZBmdYGvxYGk.crl (hash: KKP5tLPrOz7IINQr7+Am1ibGthr+tNA8clw2Yb4YBRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 18:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:08:14:b2:c5:bd:ed:70:6d:4c:e0:34:8f:7f:5b:ad:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Validity
Not Before: Oct 4 18:02:16 2026 GMT
Not After : Oct 5 18:02:16 2026 GMT
Subject: CN=6e0da60ab6d1d3c384c9e3ffbd9c687cfe116633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9e:d8:a1:54:71:47:e7:54:d1:4f:d1:e7:b9:
b1:65:a9:04:7e:3e:2c:5b:9b:f1:2f:74:e0:09:7b:
7d:e7:06:8a:a0:2a:8b:52:b5:22:f1:0e:05:ff:96:
2a:55:9a:b0:f0:51:cf:f3:6a:27:01:af:37:80:e3:
58:e8:52:68:e9:2b:58:2d:59:4a:77:ea:07:8c:64:
b8:9d:7f:ad:df:41:43:0d:7d:88:e7:04:59:85:8f:
c3:25:61:de:09:04:12:2c:64:3d:ac:b7:b1:54:d2:
66:c9:6b:6d:04:e2:80:f1:65:5a:bb:f2:4c:8d:19:
53:65:2e:7f:24:ae:9a:97:8a:20:41:d3:1a:be:b2:
bc:be:53:a1:11:f8:3f:0f:d1:52:ab:a4:96:0e:81:
89:bf:7c:02:9d:c4:c5:7c:a5:52:3c:b2:e1:d1:94:
cf:38:13:96:87:c7:7f:54:49:92:b9:16:89:64:e2:
32:e7:a8:18:74:0e:0a:10:b9:57:e3:58:e1:9d:cf:
9f:0e:5f:86:4f:a7:55:8b:b7:60:a9:60:5c:7e:0f:
63:f3:c8:af:21:27:1f:26:5b:98:d8:12:0d:23:63:
9b:c7:8b:e7:55:12:1c:b0:6f:3f:00:3e:b1:ab:fb:
fa:f3:8c:5e:8c:62:32:ff:04:54:3e:52:71:a3:1c:
85:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0D:A6:0A:B6:D1:D3:C3:84:C9:E3:FF:BD:9C:68:7C:FE:11:66:33
X509v3 Authority Key Identifier:
keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:01:a3:a9:e7:8c:d2:4b:2b:97:ba:87:d5:b9:85:f1:04:b2:
30:a3:7c:2e:27:7d:13:af:74:3c:92:b7:7a:52:07:6b:c0:b4:
0d:97:76:0b:e4:31:e0:ba:9c:97:49:3f:44:9f:2c:f4:ad:67:
1f:0c:69:8d:c8:ad:83:c3:78:00:c6:14:28:9b:ff:31:55:b8:
c9:da:6c:78:00:89:86:e3:ca:2b:64:59:49:8a:0d:31:23:fe:
96:86:37:23:a3:5b:74:28:bd:97:a7:64:38:7b:a9:b4:28:08:
5b:fe:ad:00:35:37:08:d3:b7:96:90:76:f2:18:b6:03:b9:dd:
e1:8d:46:d7:b7:c4:aa:7a:7d:5d:ee:21:95:75:19:b7:1e:32:
cb:c7:38:50:57:a3:7a:3e:04:2b:fe:b6:5f:fc:19:32:fd:9f:
18:a0:fe:ed:8f:0a:74:d3:bf:30:12:57:37:a7:d1:98:ff:3d:
61:cb:73:9e:33:13:d7:64:72:c4:46:21:3c:b2:70:f6:8c:67:
22:b2:93:b1:6a:44:18:13:d1:80:c3:51:49:c1:a1:42:3b:99:
24:03:65:d9:ce:38:df:ec:a3:4f:57:9f:b7:df:fd:8f:d2:d6:
0b:0f:ce:bf:da:38:c0:d5:68:6a:1c:b7:8e:00:8b:05:79:7b:
ac:c1:67:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 02:28:32 2026 by rpki-client