Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
File: XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json)
Hash identifier: IB6kT6n0SZ99JNWDqEI1pMZ/DGs5x/v8s/h/C2C/a6w=
Subject key identifier: CF:F3:6E:10:7C:B9:4A:C2:26:99:37:4E:1F:5F:A3:A9:F7:AC:45:3A
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 01A0E81CEA17D57B2F83CE70350EC42AF107
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
Manifest number: 1A78
Signing time: Mon 28 Sep 2026 13:03:23 +0000
Manifest this update: Mon 28 Sep 2026 13:03:23 +0000
Manifest next update: Tue 29 Sep 2026 13:03:23 +0000
Files and hashes: 1: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: aoRJPoL64rKM27nZkeHVslJPDA2p1WChf9j+AOKBzkU=)
2: vOvUH4QL3euA8n5Zs-p3s8pu5OU.roa (hash: qqJCGshMa7lPJa7oCp0UWM6NmrUrD8W4y4uDd4fxLLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 13:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:1c:ea:17:d5:7b:2f:83:ce:70:35:0e:c4:2a:f1:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: Sep 28 13:03:23 2026 GMT
Not After : Sep 29 13:03:23 2026 GMT
Subject: CN=cff36e107cb94ac22699374e1f5fa3a9f7ac453a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:89:4b:b7:1d:6c:3c:e7:f7:db:fa:5f:91:
5c:15:b2:21:85:c8:76:f1:57:e4:9a:b8:12:6f:a5:
e9:78:85:15:8b:51:bd:78:c1:98:ed:aa:87:12:62:
be:bc:fc:69:1b:10:92:70:5f:97:94:bf:30:5b:c0:
4c:a3:7e:05:b8:f7:0f:fe:15:22:37:00:cd:22:f5:
20:1e:b3:92:22:7e:25:77:4c:47:20:99:ca:c3:39:
88:27:13:ac:45:60:f8:95:bb:f3:cf:f9:b0:90:f3:
1d:dc:79:b8:73:88:df:2f:03:0c:a3:96:3f:a9:32:
93:ad:2f:3b:33:b6:ba:04:61:00:5b:0c:a2:19:88:
94:61:df:e1:ca:03:56:b8:75:8c:fd:30:51:90:45:
2f:10:48:8a:a7:7c:fc:73:9d:aa:85:01:f6:e8:a9:
2d:99:8c:00:7e:99:76:e1:54:f6:f2:72:36:f1:13:
3a:4b:82:a7:f5:b4:46:72:4b:fe:d6:b4:9b:f0:ad:
d2:70:66:50:ad:c6:e2:02:44:2a:d3:8a:33:64:67:
7b:62:f6:1a:1d:02:10:79:97:47:16:e3:cc:ae:59:
eb:5f:35:79:c4:85:98:61:db:e6:c6:ea:b1:3f:44:
4f:c4:67:30:aa:49:70:ce:30:b4:fb:53:8f:1f:4e:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:F3:6E:10:7C:B9:4A:C2:26:99:37:4E:1F:5F:A3:A9:F7:AC:45:3A
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:01:e1:16:e4:27:6f:ae:0d:34:83:b3:1e:df:97:65:df:eb:
78:de:c6:52:3c:1b:76:0e:4e:e0:b8:3e:65:e4:cf:19:49:c6:
04:dd:d5:ab:5c:23:f6:f9:b7:34:11:0b:36:68:d7:15:70:00:
e6:bb:81:ae:8b:34:c3:65:b7:54:af:56:9d:32:74:44:15:37:
b5:6c:e6:e8:dd:c6:8e:fa:69:7b:85:83:9a:03:f3:d9:42:bc:
e1:d2:3f:e9:c7:5a:16:43:d1:44:29:50:be:02:5e:29:43:88:
df:d2:15:da:54:b6:18:0f:a7:36:09:6d:cc:2a:14:e7:51:c2:
e0:9d:d4:39:7a:d2:7e:8e:3d:78:f2:ac:08:0d:4d:bf:a1:da:
7f:7e:9e:61:a8:07:14:3f:e2:16:ec:29:11:d4:a1:cd:e4:71:
aa:13:fd:1e:65:c3:d8:cd:41:4b:d2:9f:9a:61:d9:51:d3:14:
59:24:cc:1c:20:35:4a:7f:c0:57:85:f9:eb:48:9c:d9:74:90:
54:b7:72:ce:12:83:ae:4e:61:a9:f2:b9:81:e1:cb:ce:4c:97:
c8:ff:e5:00:d5:30:90:59:90:cf:2c:1c:f8:95:28:cb:8f:30:
e6:a1:55:5f:31:59:b4:11:9d:92:17:f7:fc:e6:be:9a:af:ae:
5b:81:1a:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 00:43:22 2026 by rpki-client