Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.mft
File: Xx0htjXMvXDmTKZR9atINcrjufk.mft (raw, json)
Hash identifier: cjGgt7PZGlEhxPVNxtps9FlAT+5NM8DksBm0ZhwoO8g=
Subject key identifier: 88:7E:D7:78:12:3F:59:98:8E:23:F4:24:0D:6B:65:80:D3:1B:D0:C0
Authority key identifier: 5F:1D:21:B6:35:CC:BD:70:E6:4C:A6:51:F5:AB:48:35:CA:E3:B9:F9
Certificate issuer: /CN=5f1d21b635ccbd70e64ca651f5ab4835cae3b9f9
Certificate serial: 01A0CF6CC9D10A96BD517CDE0E176ED4B58C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx0htjXMvXDmTKZR9atINcrjufk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.mft
Manifest number: 83
Signing time: Wed 23 Sep 2026 18:00:08 +0000
Manifest this update: Wed 23 Sep 2026 18:00:08 +0000
Manifest next update: Thu 24 Sep 2026 18:00:08 +0000
Files and hashes: 1: 7bWbVotUtv52xOiDEME3dz5_e98.roa (hash: sHchAOAFmNObQRTRvZeViPzc8t8WH0mwLDZ2MCC81Ag=)
2: Xx0htjXMvXDmTKZR9atINcrjufk.crl (hash: fUJKpK/9XJmCt41+8YWkIcjmpj/ersmILchnegU+Rps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx0htjXMvXDmTKZR9atINcrjufk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6c:c9:d1:0a:96:bd:51:7c:de:0e:17:6e:d4:b5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1d21b635ccbd70e64ca651f5ab4835cae3b9f9
Validity
Not Before: Sep 23 18:00:08 2026 GMT
Not After : Sep 24 18:00:08 2026 GMT
Subject: CN=887ed778123f59988e23f4240d6b6580d31bd0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:30:65:b1:80:ce:e8:60:da:fb:60:3c:d6:28:
25:ea:9b:5e:35:05:0b:f2:5e:08:7b:fd:f2:d3:3b:
a3:92:9b:24:97:13:9f:d4:90:57:d6:d0:a0:76:f9:
ce:df:ff:7d:e6:e7:0d:90:19:3b:49:28:d9:cb:09:
7a:2e:13:1c:3f:e4:fa:63:45:28:a1:66:5a:69:fb:
17:99:6b:b4:0f:2f:54:63:5a:d0:d7:ce:5f:40:a2:
0b:fc:c9:73:65:5e:a4:35:1e:18:e0:6c:51:4b:c4:
60:dd:2a:d9:f3:d1:5e:39:57:d3:4f:da:09:54:e7:
d3:1e:41:19:72:7e:37:72:55:cd:fd:cb:eb:1f:0b:
e7:3e:86:33:d5:31:a4:5a:71:f5:0c:56:5c:b7:b3:
62:6b:a3:de:98:e2:3f:8e:d9:bb:fa:db:9a:48:24:
42:94:35:48:c4:bb:79:7d:8e:d3:3c:28:36:94:32:
99:27:71:ea:5d:d4:f5:29:cd:23:ae:3a:ad:7c:e9:
52:d0:1c:f1:cd:b7:5c:06:68:e1:e4:97:ea:ca:d5:
eb:5c:60:7a:33:9e:fd:90:35:78:c8:ab:28:69:ef:
14:36:e9:fc:91:06:94:6f:ac:1c:c5:4a:10:dc:4a:
f4:20:59:48:f9:ca:e5:3f:fd:d3:59:a5:33:1a:c5:
0c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:7E:D7:78:12:3F:59:98:8E:23:F4:24:0D:6B:65:80:D3:1B:D0:C0
X509v3 Authority Key Identifier:
keyid:5F:1D:21:B6:35:CC:BD:70:E6:4C:A6:51:F5:AB:48:35:CA:E3:B9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx0htjXMvXDmTKZR9atINcrjufk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:75:ce:ca:dd:1d:56:f3:cf:32:96:93:43:3c:d3:84:df:46:
49:34:52:c7:40:ef:89:a0:01:cf:fa:84:93:a4:63:bb:39:c3:
c8:60:4f:ac:6b:a0:09:0d:44:84:64:f0:f7:52:ef:f3:9b:48:
ce:0c:67:44:ff:f4:ae:dd:1c:a7:f7:8f:4f:e9:7a:b1:f7:07:
16:4b:04:a9:d1:db:10:d5:56:ad:8d:72:28:77:b2:65:f7:b0:
86:8e:66:e5:14:64:42:ef:af:f4:ff:9d:b3:bc:10:ae:b0:c5:
db:53:5a:c6:8b:61:dd:13:ca:6f:b7:54:ab:9f:f3:fd:4b:2a:
8e:b6:31:5d:81:de:f3:e0:24:3e:c1:b4:bd:99:dc:7a:40:b2:
06:5d:30:3d:80:ed:17:bd:4a:0c:db:4a:1c:94:2b:e6:70:ed:
55:4d:fa:cf:ad:b8:23:02:59:a2:86:0c:ea:3f:d0:f9:7a:f2:
f3:fb:75:d3:7f:0b:aa:9b:1a:0e:69:be:c8:63:3e:f0:be:f7:
05:e2:0e:7d:68:0e:61:01:3f:f1:9e:70:3a:c2:82:02:d1:de:
e0:e5:0d:41:2f:3c:7d:df:54:f7:49:63:9e:04:14:37:bc:8a:
07:1f:85:c3:5a:0a:f5:da:d8:71:53:9c:c7:74:9a:d4:ea:c3:
97:3c:1d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:16:05 2026 by rpki-client