Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
File: XWwVypA9fSVFPq619ySgTjqmWQg.mft (raw, json)
Hash identifier: aE4hrd3qBJPWU1d4+u73RDUaKpHVmQ3G/brBDrYa0VQ=
Subject key identifier: 4D:3C:B2:3D:29:72:C0:47:24:A3:B5:EF:40:95:E7:70:8C:81:9B:AE
Authority key identifier: 5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
Certificate issuer: /CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Certificate serial: 01A0E58810F109183D32EA3FB76EAF58177E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
Manifest number: 1A86
Signing time: Mon 28 Sep 2026 01:01:34 +0000
Manifest this update: Mon 28 Sep 2026 01:01:34 +0000
Manifest next update: Tue 29 Sep 2026 01:01:34 +0000
Files and hashes: 1: 3t8az_xmWCwRgwYdF8ntbUiTIo4.asa (hash: OYtFSUrUtQCeFSpMmkc6CELhcO6KgL/e+r+O7ChwoMw=)
2: 98276ywNR3GWE3eA4GBIWlMqClE.asa (hash: QZoO0A1vljWFvsSQFCIsfrovq51qQKECKf/LpyJyKgc=)
3: PRbbcfFVNFIHvCLuBhm9svvvFeY.asa (hash: TTKXbBMADa8jzEvKjCjU8NuDyyjAgBi2zrMscCgrZ3o=)
4: XWwVypA9fSVFPq619ySgTjqmWQg.crl (hash: 1HtUteyeC2rj7WPtwxVTX9GF/vp2TVb/L4iUoQIeY0w=)
5: fsfsFG6c-uDOrtkFycj7XUTrSFs.roa (hash: /2iuoJT/Z9P4V0/09Vme7KEMEVlGA2pEZglck+m/U0E=)
6: obrcupVsssO_agB28qMpvHAxeW4.roa (hash: GS+FF6yB/em6e/eXYvpbII2ejEv9rt1t/93lekFQ52Y=)
7: otlDwitKEaIJU2uBA1kA4FQjaiM.roa (hash: PnlNyi9JuqZEzROpx8dqkQn2kawiLgt6YWBA0/7GyGs=)
8: royOJADOHC1NNGIUFUSG8i3BLQ0.roa (hash: 2PUXEpyjrcM46Q23bjPi20e6P3M7C3MjAxYWgm68WVY=)
9: xE39Ruj0m92ceMsS3LNfFTVLuDk.roa (hash: X8+e4gKAkSWFlzWGvgEu09Paqpm627rMwTZHilH3gFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:88:10:f1:09:18:3d:32:ea:3f:b7:6e:af:58:17:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6c15ca903d7d25453eaeb5f724a04e3aa65908
Validity
Not Before: Sep 28 01:01:34 2026 GMT
Not After : Sep 29 01:01:34 2026 GMT
Subject: CN=4d3cb23d2972c04724a3b5ef4095e7708c819bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:46:50:ac:90:68:47:91:32:d6:18:a3:6f:84:
4e:ba:8b:a7:d6:3c:75:ea:4a:1f:4a:e0:05:9a:c3:
3b:e0:88:2a:f7:bc:4c:fb:22:63:d9:24:82:24:c7:
fe:ac:7a:4b:13:cc:ac:c4:58:ba:1a:45:67:e6:e4:
60:3f:98:36:d6:13:e6:b0:cf:4d:71:09:ae:97:6a:
b5:c4:ed:38:41:8c:09:4f:f4:3a:52:db:36:33:bb:
28:f7:63:0d:9b:b0:48:f5:33:6f:e0:ca:c5:fa:25:
d3:c8:a9:7d:08:17:9b:40:4d:6e:33:13:18:30:00:
c1:c6:00:9c:ad:d0:af:ee:1b:4e:a1:38:ce:3b:eb:
aa:13:c5:1f:71:81:3d:b1:10:eb:5f:19:28:bc:f9:
30:92:2b:6e:2a:0d:cb:f3:8e:26:d2:4a:6c:92:4c:
6e:fe:49:3c:09:60:85:00:ac:74:bf:a7:e2:d5:98:
ae:07:3e:f7:69:54:11:37:76:9b:fa:b7:d2:9e:92:
f0:2a:3f:63:34:4d:fe:a2:ad:db:54:76:26:44:4c:
b8:90:ec:1c:c2:84:28:5c:79:48:e0:c7:1c:b8:cb:
22:3f:03:11:95:7a:3b:38:df:b6:2c:f9:ac:0a:53:
ea:3b:2f:a4:93:4d:18:aa:84:98:3c:bd:3b:a6:38:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:3C:B2:3D:29:72:C0:47:24:A3:B5:EF:40:95:E7:70:8C:81:9B:AE
X509v3 Authority Key Identifier:
keyid:5D:6C:15:CA:90:3D:7D:25:45:3E:AE:B5:F7:24:A0:4E:3A:A6:59:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWwVypA9fSVFPq619ySgTjqmWQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/2864c8-c042-428f-a02d-3b34c23b9c5a/1/XWwVypA9fSVFPq619ySgTjqmWQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b2:75:67:d3:45:5c:8f:b0:9f:3c:fe:79:ea:f9:68:6c:82:
7e:88:2e:6c:49:76:91:63:64:8b:cd:34:0c:06:2f:2b:4e:3f:
52:ff:43:9d:3d:be:37:fd:f2:9c:e8:cb:24:2c:5e:60:a5:a5:
be:35:23:42:82:40:9a:3c:4d:7f:b0:89:d0:43:f0:f0:bb:23:
89:47:04:ac:ca:48:f2:90:85:07:2e:db:35:cb:6b:c4:37:6d:
49:70:83:c1:10:a9:0c:a6:29:2f:84:2c:bf:71:88:eb:25:41:
e2:77:27:43:da:74:f8:b4:1f:99:0f:f7:76:c5:2b:d2:c8:8f:
9f:f2:fe:b3:29:dd:61:aa:5c:43:a5:04:77:e8:af:ed:6b:73:
c5:d7:38:27:76:88:56:76:e1:32:7c:2f:bc:1a:6b:0b:80:0e:
c1:96:0b:92:e2:3b:f2:04:b3:5e:27:2b:9f:8a:68:aa:c5:11:
77:75:bd:8a:bf:cc:e0:7d:b8:6d:a1:28:c1:ff:2b:af:44:93:
08:82:e1:b0:08:11:96:ef:ed:f4:cb:b4:df:32:b0:34:07:26:
71:6c:97:95:b3:6e:35:36:8e:0e:fb:3d:40:ee:cc:31:e3:40:
04:3a:8c:f4:c9:13:da:c7:10:6f:2d:4c:a9:24:24:97:19:9e:
36:5b:3d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 05:42:19 2026 by rpki-client