Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
File: Xo0HtF99gxJMn4wPrAO-wCRos34.mft (raw, json)
Hash identifier: aLbAARo7Hj4+m4UEzsqL2ATAs0cjfSc/ggqtPGfJVLk=
Subject key identifier: BF:BA:43:16:5C:03:DD:81:30:0B:C1:8B:B1:75:7C:78:55:10:BB:F5
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 01A0BF5527F218AF40C9CB2C27E390C8FC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
Manifest number: 1A80
Signing time: Sun 20 Sep 2026 15:00:24 +0000
Manifest this update: Sun 20 Sep 2026 15:00:24 +0000
Manifest next update: Mon 21 Sep 2026 15:00:24 +0000
Files and hashes: 1: 5Hw5SCG7_OPw7F7WvcmHt1ubypc.roa (hash: SMRdVTfHclZq4V+gvOodEyeG5zAH5sDMph36bqmt3rk=)
2: AtV2hA3YXGqznUtgR3uB6bOY8lI.roa (hash: E9jIH1WdWmHG5Hqaca5c+6ilzJbhu15ZC+JxJ/GcG+0=)
3: EoMrU16bqHoGy2xh9XxsU9osNps.roa (hash: /uTZPWaskDiwuTtmaYcl1U/fLPuv+/ZTx4jUSu0Cxmo=)
4: STKH0GmYkagldfyopz-70YJ69EQ.roa (hash: h88I+byL++CNYEweLeezPhZiJJxRIwysZUnB4MEC57E=)
5: WQ55TI7O_Y3_x9hkYSvF2UvokSE.roa (hash: TZOmAdpezSY7WR8DK0sxR8J5sP9pIOwu7JtZmeFi+dA=)
6: Xo0HtF99gxJMn4wPrAO-wCRos34.crl (hash: suobywfO/mVv/Kf3PCClR5mzbp+Bwxhpna5Ska6skvE=)
7: hgl809tjaX7Gbv4DItgm3ScJV_4.roa (hash: 1spmr6hLWhe0MEAFi9Vr2mFMBf7qQUqSQroJeyohJqA=)
8: knU4dZaimoTFNsDybo_RrHKE45g.roa (hash: 91cLBLePGru3Ew/uOYSPXYIkqMobJYmdo5K1Q7DADLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:55:27:f2:18:af:40:c9:cb:2c:27:e3:90:c8:fc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Sep 20 15:00:24 2026 GMT
Not After : Sep 21 15:00:24 2026 GMT
Subject: CN=bfba43165c03dd81300bc18bb1757c785510bbf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:bf:dd:6d:49:5e:ef:e3:e9:fa:ef:c7:0b:04:
d6:bc:19:b6:d7:f7:6e:31:54:93:ed:89:07:a1:21:
6d:29:e4:cb:eb:80:84:b1:6d:0c:35:e2:25:ac:2d:
63:38:65:99:68:1f:d6:62:50:0d:40:4a:0c:c1:a4:
07:23:4b:d0:f5:6a:9a:9b:cb:82:25:76:cb:f3:fc:
85:f3:a2:b5:79:29:9e:aa:8d:65:43:6d:1d:a2:fd:
6c:30:2b:b4:9e:28:a7:95:89:f6:16:dd:84:39:65:
14:e5:22:e3:b2:00:95:70:f0:55:59:67:78:05:b3:
cf:fe:41:ef:99:72:48:ed:bc:dd:79:4f:a1:53:f0:
8a:60:41:e4:b5:b9:11:34:6b:ad:24:b9:62:85:1b:
00:a0:67:2d:18:1b:3d:f1:81:91:0a:fb:8a:98:02:
28:70:d3:68:9c:97:d7:95:47:b1:03:88:fb:a9:7b:
f2:b8:c3:07:5e:fd:6c:4c:ea:4f:a6:59:47:8c:1a:
18:d4:e5:f4:4b:79:21:94:d7:a8:c8:ea:40:73:3f:
88:61:18:ae:5f:2e:35:6c:88:62:0b:14:5b:34:4e:
48:41:c4:05:85:10:2b:c3:15:73:bd:4d:a7:10:e5:
ce:8e:ac:b0:ad:a7:bc:e0:a2:ae:72:cd:4f:63:1c:
35:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BA:43:16:5C:03:DD:81:30:0B:C1:8B:B1:75:7C:78:55:10:BB:F5
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:65:7f:1e:c2:93:4d:e2:30:19:d4:ea:7e:6e:b8:56:92:7e:
6d:91:d8:c8:06:16:45:97:de:33:a8:f6:2a:28:ca:bc:00:a2:
43:78:0d:c1:ce:df:90:fb:a6:5c:66:78:b4:43:f2:b2:48:e0:
b5:3f:b2:9d:a5:5c:16:c2:ab:9d:b3:63:0f:04:8e:cf:8f:e3:
57:f9:6d:30:e8:9c:34:b2:0d:72:83:91:ea:d1:4a:fc:b1:d5:
3f:74:6a:49:e8:53:f2:3b:87:eb:c2:9d:78:ec:49:55:ef:b6:
11:5b:00:c8:b0:0c:ac:89:72:50:13:1c:a9:1f:75:40:bf:0d:
55:61:6e:a0:a5:ab:6e:90:3e:21:e0:bb:28:6c:f0:08:85:29:
6c:43:02:10:cb:73:bc:a8:92:fe:07:85:d6:ff:16:05:96:77:
21:e7:1a:75:06:a6:32:0e:73:3f:dd:15:12:bb:48:5e:87:c7:
24:a7:a7:a4:4f:ee:6f:35:bd:91:2d:ba:0d:c8:ac:14:b0:35:
34:f1:43:d5:74:98:28:9b:e3:98:93:0a:b1:26:0c:ca:db:b3:
d1:9b:59:6e:75:1c:f0:ff:83:db:d4:f3:53:e9:7a:a8:7e:c4:
33:e9:ad:47:92:77:89:a5:bc:2c:14:8f:68:c1:96:6c:9a:b3:
a0:d7:71:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:42:58 2026 by rpki-client