Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
File: XL6eQwJOzGksM1OYuy2WcRaqwtk.mft (raw, json)
Hash identifier: dZCStO8kN2rE3+2SWBhEofaDZMJ1ahqIN1BJ8xYmBcw=
Subject key identifier: 95:F9:74:80:52:88:FE:E9:89:0E:4B:9D:A5:2A:9F:87:EE:9B:21:56
Authority key identifier: 5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
Certificate issuer: /CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Certificate serial: 01A0CE914F42AC5129B8EBBF378413E9DA0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
Manifest number: 101D
Signing time: Wed 23 Sep 2026 14:00:24 +0000
Manifest this update: Wed 23 Sep 2026 14:00:24 +0000
Manifest next update: Thu 24 Sep 2026 14:00:24 +0000
Files and hashes: 1: XL6eQwJOzGksM1OYuy2WcRaqwtk.crl (hash: NW20I3kreA1Jpnc1v33LX1Tc7UvQm7vUl6wO1tIahbs=)
2: cdVP4VMQTXg2CT86yVWAypk62nQ.roa (hash: LC40P/qPiuezV8f6FpcmDk2skf+yITxCG3dFo+ERAAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:4f:42:ac:51:29:b8:eb:bf:37:84:13:e9:da:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbe9e43024ecc692c335398bb2d967116aac2d9
Validity
Not Before: Sep 23 14:00:24 2026 GMT
Not After : Sep 24 14:00:24 2026 GMT
Subject: CN=95f974805288fee9890e4b9da52a9f87ee9b2156
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:88:7b:71:d3:a7:90:89:c8:ac:c0:4b:4e:10:
28:dd:a4:52:ba:36:86:85:52:b9:0a:08:29:39:9e:
93:4a:97:71:04:33:42:6d:f2:d4:58:e7:ed:bd:5e:
b1:f5:20:a0:fb:8c:e2:57:24:0b:5f:fd:8b:00:4f:
f1:42:dc:f8:da:1b:78:b8:c8:ab:83:40:07:ed:07:
c7:51:60:89:73:1b:41:54:d6:92:8d:f4:62:c8:e0:
9e:66:9e:74:cf:22:b1:e3:9f:61:ad:55:c7:75:40:
86:4f:55:6e:a0:65:5c:87:46:1b:bc:49:65:90:1e:
4e:95:ae:da:66:c1:be:b2:b8:0c:a3:31:78:44:2f:
f1:c2:ca:a0:31:4c:bc:de:06:6a:d8:49:04:49:da:
7a:3c:5d:3e:6d:f5:59:2a:b6:0b:5e:92:5b:52:17:
b1:b3:ff:58:91:0e:11:19:cf:d2:3b:0b:30:1c:63:
8c:dc:46:44:7f:de:42:00:eb:fa:2f:e0:6c:cb:70:
16:ee:27:22:24:ad:ce:d7:76:4a:1c:cd:f7:86:35:
4f:7e:de:42:74:83:ce:8b:35:ce:cc:12:db:ca:a1:
d8:f8:8b:70:32:19:bc:55:97:5b:c2:2c:aa:f1:67:
d6:ec:51:0e:41:bf:ce:07:81:11:7d:0f:46:d6:75:
da:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F9:74:80:52:88:FE:E9:89:0E:4B:9D:A5:2A:9F:87:EE:9B:21:56
X509v3 Authority Key Identifier:
keyid:5C:BE:9E:43:02:4E:CC:69:2C:33:53:98:BB:2D:96:71:16:AA:C2:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL6eQwJOzGksM1OYuy2WcRaqwtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/1b089c-d74b-49a7-89f7-28a56ea5cf0b/1/XL6eQwJOzGksM1OYuy2WcRaqwtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:66:8c:54:8b:9b:89:63:53:f0:d0:87:9f:7c:54:e0:9a:76:
e4:3c:88:90:99:39:95:ce:24:23:4e:4c:de:27:b5:83:b6:eb:
e9:c1:ec:7a:db:ad:e4:ec:53:22:fd:4c:79:85:18:22:2b:30:
dc:15:4c:8f:3a:31:9c:df:50:4b:44:df:9e:e6:45:f2:e0:d4:
4d:8c:d7:5a:b0:ed:de:7f:95:16:81:e8:56:07:28:89:81:cd:
0c:39:b5:0d:00:94:33:cb:b5:35:de:4a:c0:19:e7:8e:96:b3:
61:dd:d1:2e:b0:b6:6f:52:f2:67:ad:cc:c0:12:d2:23:9c:03:
91:b1:7c:cf:7f:d8:c0:e9:5b:84:70:fd:6b:68:72:4f:89:66:
e5:30:56:f4:f9:cf:48:15:cc:0f:ab:0e:0d:fd:9b:93:f1:c0:
83:d0:2f:67:f6:18:02:d3:7f:00:f7:71:2d:ba:b1:62:53:78:
e8:03:01:b7:fe:73:b8:87:15:00:de:c2:3d:b3:70:f3:9a:b5:
d2:5a:cf:db:64:c6:af:57:e4:5f:36:60:05:dc:9d:55:d1:c9:
38:4a:a7:fa:a8:de:aa:fd:7e:1d:15:43:a3:2a:95:ee:d1:b1:
6c:7f:e3:de:be:14:b7:22:ca:0b:e0:f8:1b:e6:cf:2a:75:2b:
32:dc:f7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:43:50 2026 by rpki-client