Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json)
Hash identifier: Z2mO8spP15uLO+7cKIglNHRQvaMD+4kGP7XWnbhGjcg=
Subject key identifier: 08:40:B8:20:45:A0:F9:F7:A7:6D:F7:AA:9F:F5:D8:6F:69:FB:B8:C4
Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Certificate serial: 01A0D1C99F5D7A87D6DFF44A0BFE58FD9A78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
Manifest number: 0985
Signing time: Thu 24 Sep 2026 05:00:46 +0000
Manifest this update: Thu 24 Sep 2026 05:00:46 +0000
Manifest next update: Fri 25 Sep 2026 05:00:46 +0000
Files and hashes: 1: OBYyhiA-o_Lu_Sii3K0csw4HB8Q.roa (hash: losaCS7PxxPceDw56uDFnzA7tz476/wdte0ltw/SmOk=)
2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: f7MiLBRJ3PBrbjXtAN1vDmPea2CGJ5LZiQToy5j3IZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:9f:5d:7a:87:d6:df:f4:4a:0b:fe:58:fd:9a:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Validity
Not Before: Sep 24 05:00:46 2026 GMT
Not After : Sep 25 05:00:46 2026 GMT
Subject: CN=0840b82045a0f9f7a76df7aa9ff5d86f69fbb8c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:07:f2:3a:25:ab:08:71:ee:24:83:17:e7:99:
51:79:50:ed:aa:5f:20:15:cc:af:f5:41:62:29:d3:
c7:54:4d:dc:5d:81:ff:f0:88:90:7a:04:b1:5e:e0:
e0:a2:09:a5:e5:16:51:f1:56:f1:dd:32:78:f0:e8:
3b:b6:05:fe:3a:3c:f3:72:31:63:4d:bc:59:72:53:
33:28:8e:46:ab:5a:d1:a6:2b:1b:19:2f:06:76:f7:
60:a4:4b:b1:ee:f7:34:e9:8f:62:3e:22:3f:49:1e:
52:34:a7:6f:6a:56:13:11:8d:99:91:56:bd:86:ca:
99:30:56:1e:42:59:ac:f0:2f:b1:c0:11:5c:cc:b9:
86:c6:35:7a:0e:a0:7b:81:b7:32:33:74:fb:b7:ae:
90:3e:27:a1:e6:40:48:d1:bf:77:b3:4d:f6:40:ee:
a6:29:75:58:8b:ad:61:20:dd:40:bf:d2:c2:71:44:
e4:f8:e8:05:7c:f2:e0:89:3c:4f:2e:5e:43:e4:39:
8c:b4:9d:07:e2:8b:45:9a:2a:42:ba:8c:fc:b9:1e:
29:b0:9a:d8:28:6b:10:59:85:4d:9f:c6:4c:2a:55:
48:95:9f:92:77:78:6c:09:c2:e1:2f:81:fe:bf:6f:
af:ca:cb:9c:b7:6d:49:a6:54:99:95:09:26:29:86:
16:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:40:B8:20:45:A0:F9:F7:A7:6D:F7:AA:9F:F5:D8:6F:69:FB:B8:C4
X509v3 Authority Key Identifier:
keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:54:4f:55:f6:15:88:3a:01:65:f0:8e:f9:b6:4c:3b:80:50:
23:c4:07:2b:a9:69:3a:3a:24:b8:d0:c1:f6:c2:1b:9c:4a:67:
2a:5f:f1:08:75:b4:f9:fd:1e:94:6c:8f:70:ca:56:1c:66:f6:
20:b8:2d:8e:e6:96:1c:28:90:37:b2:a9:0c:4d:a4:b0:d4:69:
8e:ee:6f:12:63:0c:45:11:a7:32:bf:b3:b6:59:23:30:d4:35:
95:66:3c:67:5a:fc:20:69:a3:0e:a0:00:00:d9:9e:80:58:b0:
61:ab:2d:ee:81:2f:fc:e6:c4:3b:dd:4f:ba:3e:c7:d1:1c:bd:
3d:7e:9f:ce:b3:87:7b:4c:4d:95:5b:fe:d7:d8:35:41:5a:64:
6f:36:35:37:19:61:29:da:85:3d:b7:e4:78:14:7b:a4:bc:ab:
2c:0b:39:89:f5:13:bd:43:df:e1:a8:b8:87:c3:27:f0:0b:8c:
a4:8a:d6:f4:c5:26:4c:4c:6e:84:78:98:23:09:ed:1d:76:88:
52:64:28:32:46:d5:57:fb:bd:b3:16:8f:46:12:13:b3:8e:7b:
f9:c0:8f:6f:2e:27:7b:4e:03:e4:51:ff:d7:a0:43:fe:7f:8c:
b5:ea:c0:5f:f1:47:7e:e4:39:57:bc:63:19:5d:bb:ae:ab:8d:
bb:20:c5:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:34:17 2026 by rpki-client