
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
File: XuAEvvpVPds1Vk-3disF6yIuz5M.mft (raw, json)
Hash identifier: aF3yYICXKclpzmZrDPdsmvcvKCc8GdLf1U/PkqNl3o0=
Subject key identifier: 56:AB:28:91:59:91:34:5C:F0:B3:F0:F7:73:66:7D:8C:14:C4:81:40
Authority key identifier: 5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
Certificate issuer: /CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Certificate serial: 01A0C85900CB6BC3B5A75028319007E35FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
Manifest number: 12CE
Signing time: Tue 22 Sep 2026 09:01:10 +0000
Manifest this update: Tue 22 Sep 2026 09:01:10 +0000
Manifest next update: Wed 23 Sep 2026 09:01:10 +0000
Files and hashes: 1: AnmyPTbeKIdDpKQo2ow_d3sowCk.roa (hash: 5yDe2nBXJJOjrwl2r1aO5EGRjZW/0EOoxp3H2cvGJfM=)
2: H2Ow2vJleUpffVQJUaw-DrOP25Q.roa (hash: KI8QYq2nupDeoMFFlx5O6qkC1YhqNdHz/2qG81EcAxI=)
3: OgDedPoLqQ8e0IHdzPTL4sAzlxc.roa (hash: B++2fKZYAzjlOxy+tDnJEo09oVmzZa6HnhPwxHljg8k=)
4: XuAEvvpVPds1Vk-3disF6yIuz5M.crl (hash: uNjTTIRzPh/gmwRV4STTDUJu6VKmnwUj506kljfPyiM=)
5: zmd5DMlEMs7x1X9PCKsNsTMW85A.roa (hash: +YU6hVZe0+5DtmTz9/lx0AEtMcLkshGqyIbMlS0ia0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:00:cb:6b:c3:b5:a7:50:28:31:90:07:e3:5f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee004befa553ddb35564fb7762b05eb222ecf93
Validity
Not Before: Sep 22 09:01:10 2026 GMT
Not After : Sep 23 09:01:10 2026 GMT
Subject: CN=56ab28915991345cf0b3f0f773667d8c14c48140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:95:1c:eb:a6:f7:14:8e:7d:30:21:fc:86:c8:
39:f7:71:aa:7f:94:53:e1:07:bd:bc:11:98:67:79:
44:c2:07:fd:c9:32:26:a9:5a:dd:57:0a:73:30:ad:
47:e0:d9:17:b7:3f:58:ec:89:03:1d:2b:c5:22:ff:
76:5c:95:5d:de:f4:be:0b:e5:14:c3:96:9b:44:9e:
dd:44:0a:60:d7:ca:d1:9f:52:cb:c9:53:f4:67:14:
35:53:af:0e:35:60:f4:ee:49:83:17:60:ea:25:80:
af:9f:47:ad:60:db:b9:32:38:1c:d6:5e:23:11:a4:
e7:1a:7b:74:ba:55:2d:5e:68:15:37:25:68:a0:b9:
5f:d8:c9:78:4b:37:85:ae:83:73:60:82:4a:d9:54:
d2:16:27:92:ff:d3:73:c4:85:2d:39:8d:f6:b0:99:
af:0e:1b:88:c0:4a:b6:5a:de:8f:14:a1:a4:ee:aa:
95:11:ac:11:07:35:65:90:2c:c9:77:54:93:6c:d6:
95:82:92:01:ae:23:c5:c6:a6:c4:81:ea:a7:0c:1f:
4d:03:4f:f6:50:1c:a7:58:b5:76:46:f4:49:6d:99:
ca:94:4c:ae:de:04:78:4a:1d:8f:c0:62:84:6f:21:
0a:31:90:e2:54:6c:af:55:15:38:83:47:d5:09:e1:
97:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AB:28:91:59:91:34:5C:F0:B3:F0:F7:73:66:7D:8C:14:C4:81:40
X509v3 Authority Key Identifier:
keyid:5E:E0:04:BE:FA:55:3D:DB:35:56:4F:B7:76:2B:05:EB:22:2E:CF:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuAEvvpVPds1Vk-3disF6yIuz5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3c35ea-7c9a-48e2-b3b2-e228aab45014/1/XuAEvvpVPds1Vk-3disF6yIuz5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:f4:ac:21:17:ca:f0:fa:1b:68:91:8a:b3:db:49:4c:b8:ec:
c7:a7:c4:92:cf:d7:2a:b4:d3:3d:81:f9:24:32:dc:6e:9a:db:
01:35:36:06:67:33:61:0c:eb:81:4d:2b:bb:24:08:84:3d:86:
9c:4d:9e:81:de:a1:ee:70:dc:2d:84:2d:53:10:37:60:69:be:
cc:ae:21:37:1b:87:f5:a4:d7:ac:90:17:0f:20:eb:09:2c:a5:
d0:88:dd:38:03:7d:fd:28:6b:84:20:fe:54:d7:01:ea:31:46:
5b:3d:6e:37:3c:bb:fe:e4:d6:ea:70:e5:3c:82:96:68:59:24:
b9:d7:69:a3:46:d8:31:b5:2b:bc:54:18:5d:e0:59:22:f2:98:
10:f7:ea:16:94:9f:8a:e0:20:cd:c7:4b:bb:c7:d9:26:0a:ed:
3e:12:ae:2d:e4:ce:fb:82:08:99:7c:79:30:70:fb:9a:ea:f9:
c8:1a:b8:4f:dd:df:fe:c9:2c:82:fc:21:11:a6:8f:5a:4c:ea:
1e:71:2a:dd:35:f9:32:28:d6:1d:f4:04:49:d1:2f:cf:44:04:
f1:71:95:14:4c:a2:7a:b9:7f:29:7a:74:87:35:95:17:b3:10:
a5:66:b2:07:01:15:25:c1:8a:42:8d:ae:b3:94:6f:03:64:59:
65:72:2d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 15:02:39 2026 by rpki-client