Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: 7+sydecE15NNJDnrsLjyb+bNLesbnTBiCsjxhoVLkXs=
Subject key identifier: 8D:8C:0B:1E:8C:5F:36:14:36:92:89:0F:2E:B5:DC:15:96:22:E1:C2
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 01A0C09F87967405086E8837FFBCCC5F4694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 1A62
Signing time: Sun 20 Sep 2026 21:01:15 +0000
Manifest this update: Sun 20 Sep 2026 21:01:15 +0000
Manifest next update: Mon 21 Sep 2026 21:01:15 +0000
Files and hashes: 1: Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa (hash: Ykk34DqNXHApsE9nxxAgQ38pONoyVUESYWMP39kBFzk=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: zpRMTbS1WRE3cVOTvSOGtYAN7PHiJTU+IaYHyH7NL60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 21:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:9f:87:96:74:05:08:6e:88:37:ff:bc:cc:5f:46:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Sep 20 21:01:15 2026 GMT
Not After : Sep 21 21:01:15 2026 GMT
Subject: CN=8d8c0b1e8c5f36143692890f2eb5dc159622e1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:a1:47:c3:66:35:be:66:b7:92:43:9c:87:
55:81:ae:62:41:34:c6:9a:f2:e8:68:c9:da:94:5c:
2b:d2:df:8a:d5:9b:db:db:0e:cc:fe:17:d0:ad:8c:
72:8d:ac:d8:1d:5c:d1:a8:ea:42:b8:9c:a1:13:2f:
0a:93:02:b1:83:fe:36:33:93:5d:d8:54:8f:6c:3d:
94:8d:ff:45:db:03:fa:27:70:4d:c5:76:7d:dd:e4:
44:a1:7c:fc:04:4c:e2:9f:10:f1:0d:6b:d3:4e:1e:
59:f9:c3:b8:31:df:a3:56:87:de:7e:b7:3e:c1:60:
73:e4:f5:91:7e:19:54:33:89:52:7b:df:dd:01:88:
10:82:c8:d5:96:7b:99:7a:8f:29:9c:d4:a2:aa:b4:
b8:f0:9f:c4:71:42:30:55:25:5b:50:5b:34:3b:b3:
63:05:d9:f1:7a:32:49:2a:8f:20:4b:31:20:4d:9a:
f4:43:e6:22:8d:35:e6:77:fb:34:ed:0f:2a:0e:fb:
5e:68:97:1e:48:86:a4:e7:2a:3a:c5:5c:e8:1d:7e:
4d:0d:55:5d:62:29:d3:32:05:ec:de:97:74:e1:ce:
14:5b:b8:a7:c6:3f:1c:de:66:b1:44:01:36:91:3f:
49:c4:d2:f8:95:cd:69:6f:6a:4b:ae:4e:e6:11:6e:
55:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8C:0B:1E:8C:5F:36:14:36:92:89:0F:2E:B5:DC:15:96:22:E1:C2
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5e:99:62:cc:ea:30:8f:38:b2:66:4d:76:4a:a9:6e:e5:83:
f4:8e:b0:1d:1f:8f:75:21:e0:81:bb:6d:ba:ff:a6:68:72:5d:
b5:20:92:c0:47:cf:86:f4:ed:4e:10:25:43:bf:77:c2:db:da:
c6:e9:07:29:5d:d1:b9:15:a8:50:75:75:83:69:2c:cd:13:bf:
59:9c:3a:fb:a0:6c:17:6b:69:3a:70:a6:77:f6:25:82:5f:57:
35:91:55:d6:42:67:48:ac:66:32:86:f0:c9:c7:c0:31:48:31:
94:3c:b1:4c:30:83:d5:d7:29:99:19:1d:bb:f7:20:83:84:a9:
fd:af:02:30:5c:de:46:9d:0b:db:52:82:92:dd:00:22:ad:67:
eb:21:9d:11:0d:33:7b:a9:ea:48:97:a9:96:7b:be:0a:16:14:
88:55:3a:eb:31:03:e7:b1:c5:63:80:17:ff:50:dd:f4:46:3a:
2a:59:65:18:0f:81:be:9d:b5:27:63:9c:22:07:d7:74:81:9c:
27:71:8d:ff:02:64:02:1f:66:08:8f:45:6c:22:70:85:9f:1f:
ae:7e:69:15:47:8c:f6:c8:aa:6b:7c:e4:34:17:90:c7:f7:cf:
44:3e:8b:09:19:dd:47:38:02:30:67:f9:b4:0d:e8:c6:c7:3c:
2f:39:1f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:02:48 2026 by rpki-client