Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: CAkfcRDWV0KfuCeht1aNbADdI6rdI4uPDkqQuZOiOdI=
Subject key identifier: 87:E6:A2:E7:BA:0B:5F:5B:03:9C:CC:92:D4:52:4C:17:32:7F:8A:0D
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 01A0C2FB735933C89AE3915116302ECE3D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 0DD2
Signing time: Mon 21 Sep 2026 08:00:53 +0000
Manifest this update: Mon 21 Sep 2026 08:00:53 +0000
Manifest next update: Tue 22 Sep 2026 08:00:53 +0000
Files and hashes: 1: OvbRlSnTXlATqx6AnWYr1toDU7w.roa (hash: Q7J38waQ9GMMd+3BefTKWI7xIc5v9QQp9c12zI1W6yo=)
2: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: QD2CsWYBfaNWcFVeKitffwLa+tFDtqEDW/X7p1ttH1I=)
3: ka4LXP3r8o1mdLFuGzD128vQb8c.roa (hash: b2UoUARxm+G737EGkLibfrOXAzwN80OkLpiAV/fDR/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:fb:73:59:33:c8:9a:e3:91:51:16:30:2e:ce:3d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Sep 21 08:00:53 2026 GMT
Not After : Sep 22 08:00:53 2026 GMT
Subject: CN=87e6a2e7ba0b5f5b039ccc92d4524c17327f8a0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c0:76:68:84:fc:ff:cf:35:46:0c:15:81:a5:
3e:98:60:95:d3:8d:25:8e:43:0b:1e:12:3b:49:e6:
9b:ef:ac:ba:f8:6e:45:ff:c4:bb:50:e3:f3:29:69:
16:b6:bb:3b:f1:1e:51:c5:fe:c1:44:ac:df:86:c4:
a3:66:79:48:c3:51:53:82:b1:ab:49:de:21:cb:19:
c3:51:dc:56:af:c4:c0:9f:a9:e3:1a:41:2b:ae:3c:
cd:d4:a5:e4:1b:11:25:84:9f:75:14:3d:1b:d9:35:
4a:8b:71:cb:82:71:74:06:98:de:ee:2d:32:fa:9c:
9e:aa:ea:2e:39:cd:f2:ad:2b:f4:18:9c:64:4b:ca:
be:d4:50:47:a1:0c:4e:11:24:ff:5b:ab:c6:54:41:
89:65:8e:ba:10:9c:bd:1d:28:0d:5e:9e:bb:ed:8b:
23:49:fd:a1:92:2e:ec:2d:e0:3a:af:78:88:dc:16:
3b:1b:8c:3c:17:9e:3a:36:08:af:4a:78:3d:cd:f6:
8b:8d:c2:ef:c2:58:1a:7a:0c:3d:59:9f:32:70:16:
16:3f:a5:e9:a5:56:4d:84:93:9f:dc:54:1f:d5:91:
dd:1e:a5:e4:b3:dc:a7:1b:a6:60:d9:a1:1a:b1:ec:
30:80:53:16:b0:ca:55:c9:31:71:2f:3c:ce:80:9a:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E6:A2:E7:BA:0B:5F:5B:03:9C:CC:92:D4:52:4C:17:32:7F:8A:0D
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:5d:d1:40:81:4c:c7:0d:d2:2b:76:6f:0b:13:d0:e3:4e:d3:
eb:cd:86:1d:05:9c:84:dd:92:73:e7:13:d2:12:c6:dc:c2:45:
74:eb:a0:b7:18:81:51:47:ab:6b:d0:f4:05:56:b2:94:bc:14:
95:28:cf:69:bb:ca:7a:5e:8c:ab:fd:d0:5f:ce:4b:cb:7e:e7:
b6:f6:94:27:99:1d:45:96:37:52:1a:3b:40:e7:21:d0:7b:a9:
1a:83:32:86:12:6b:b7:b2:57:bd:51:55:eb:16:b3:ed:cb:57:
96:05:a2:5c:85:83:0b:13:68:3e:84:0b:df:80:45:1c:fc:a0:
83:b4:7c:4d:4c:64:93:8e:2e:de:b8:fd:d2:1c:27:07:eb:c9:
6c:fe:72:bf:79:18:17:f0:dc:15:55:90:72:9a:a1:48:a4:15:
48:bf:ce:4d:96:d2:4c:c6:5f:bf:26:0c:f9:07:8e:c8:f0:db:
d2:ac:fa:cd:41:fe:b0:26:5f:9b:59:84:bf:59:1c:af:f4:28:
14:c0:24:ed:88:d4:7e:ff:46:04:40:1e:08:5f:de:b6:1e:b1:
79:b4:06:84:07:42:34:eb:27:67:45:8c:92:39:45:44:18:95:
12:5c:7c:d5:47:e2:e8:d8:d4:36:48:1e:08:72:29:65:eb:cd:
97:57:c7:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:35:48 2026 by rpki-client