Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
File: XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft (raw, json)
Hash identifier: bMazbBIbGx64h2k2iaauNtwIwclz1VVQQH0KuVe+gz8=
Subject key identifier: 6F:41:16:44:9F:49:16:55:61:5F:38:B1:D4:D4:F0:D0:06:1A:5C:26
Authority key identifier: 5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
Certificate issuer: /CN=5e803b66b306008fb172c2dfd522b5655057360d
Certificate serial: 01A0D983F4D3A2797E62DC1E387F4B6362FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
Manifest number: 1690
Signing time: Fri 25 Sep 2026 17:01:38 +0000
Manifest this update: Fri 25 Sep 2026 17:01:38 +0000
Manifest next update: Sat 26 Sep 2026 17:01:38 +0000
Files and hashes: 1: XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl (hash: XYMkoWjkevCkBNqEvgbx+zQD+teYrIO/OWs0k2RHKTk=)
2: fWRyoPqsq-qBSdxIWeERvOiM9FQ.roa (hash: xi+aWZFnVHDnRFBiu1WZojI31+OjhpCl/iLDjILOSEk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:83:f4:d3:a2:79:7e:62:dc:1e:38:7f:4b:63:62:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e803b66b306008fb172c2dfd522b5655057360d
Validity
Not Before: Sep 25 17:01:38 2026 GMT
Not After : Sep 26 17:01:38 2026 GMT
Subject: CN=6f4116449f491655615f38b1d4d4f0d0061a5c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fb:d4:47:21:aa:07:ea:e5:c0:e5:ec:a9:c6:
8f:8c:7e:86:e5:01:78:18:83:5d:b0:97:0b:74:00:
fe:ff:57:87:40:b8:f2:be:cb:46:11:6f:f2:2c:37:
8c:b9:e9:29:f5:68:f2:9a:6e:e9:58:fe:76:8e:75:
19:63:98:ea:d2:91:0a:9c:fc:0d:3a:a2:eb:ce:12:
f8:70:3f:38:b5:32:04:fd:35:2f:ff:5f:5d:66:5b:
b2:5d:5d:52:e3:6a:d4:27:2e:e1:08:ae:2a:75:25:
0d:7a:98:ed:c2:cd:3f:1d:8f:c0:dd:53:06:b0:54:
c2:f4:6e:ce:17:28:70:fe:88:a6:a9:4d:a2:bd:8c:
00:da:48:b1:56:ef:9c:e1:12:7b:fb:e9:2b:07:18:
06:49:3e:d2:7b:6a:99:43:8f:90:e7:12:54:11:6f:
e8:ad:d0:30:38:02:26:65:3f:e1:c9:52:fb:af:6d:
ef:98:39:72:08:f0:81:24:9c:14:34:57:a8:7c:92:
43:b9:62:76:09:13:3e:7c:5c:4e:c0:dc:e0:12:d9:
7f:78:19:85:b8:bb:4f:a6:5a:11:6c:7b:16:50:6e:
62:39:be:71:c2:b1:13:e2:68:34:14:9a:0a:e7:57:
a9:e4:b2:ff:8c:60:8e:0e:e3:4a:3c:76:c7:03:c2:
6f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:41:16:44:9F:49:16:55:61:5F:38:B1:D4:D4:F0:D0:06:1A:5C:26
X509v3 Authority Key Identifier:
keyid:5E:80:3B:66:B3:06:00:8F:B1:72:C2:DF:D5:22:B5:65:50:57:36:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/9d342c-7ce7-4c69-aece-938506a9f2a7/1/XoA7ZrMGAI-xcsLf1SK1ZVBXNg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:1e:90:98:aa:a9:fe:3d:da:a0:c6:9f:2f:7c:96:89:ea:27:
51:5d:fd:4e:27:5c:64:66:39:15:16:e5:e2:84:8f:95:4e:5f:
92:ce:cd:15:d7:87:ea:ca:f8:06:2c:9e:e9:88:da:cf:d4:72:
8c:9c:1e:f0:fe:cd:19:4f:de:1f:8c:5d:97:c2:90:d5:4b:64:
7a:6c:60:eb:7b:e7:b8:66:60:2f:2e:25:3b:c8:66:66:2c:d7:
4c:2b:df:b4:0e:7f:87:a0:e1:ac:a7:02:b1:d5:6d:fd:eb:d7:
39:ef:78:16:98:e1:6e:b6:8f:56:a1:48:e1:d3:79:94:10:f4:
c3:3e:ef:f5:d2:a1:82:5a:4f:2e:42:37:14:19:b6:7c:17:60:
db:99:47:87:b7:95:7a:2d:33:2f:d9:4f:e8:3c:43:a7:82:90:
03:d5:b3:92:a4:c7:5c:22:42:e7:c1:23:30:3b:1d:6f:02:71:
45:71:d9:25:79:32:28:b4:5d:b6:9c:9d:8f:8b:11:4c:57:cc:
6a:03:3b:8c:e9:45:ff:3f:b3:d7:cc:cf:a5:9a:c3:b2:16:5e:
31:fd:68:9a:37:5f:e7:d6:b3:57:77:87:15:86:09:57:c8:e1:
df:b5:4f:5e:3e:a4:27:ad:66:1e:14:0c:24:4e:9f:58:ab:d2:
9b:3f:67:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 00:27:14 2026 by rpki-client