Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
File: XM3soXHkIseck4wnMqkNSKjFPAY.mft (raw, json)
Hash identifier: b80PFlT+2m2gJYxyne6rOQzKTurl1VwIuSBqNa3jvIQ=
Subject key identifier: 61:21:CE:68:C0:ED:33:85:33:7B:AF:54:19:96:8F:DF:8C:3D:64:9A
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 01A0C256814958F3AC60F0C7D156A38ADFE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
Manifest number: 1A75
Signing time: Mon 21 Sep 2026 05:00:44 +0000
Manifest this update: Mon 21 Sep 2026 05:00:44 +0000
Manifest next update: Tue 22 Sep 2026 05:00:44 +0000
Files and hashes: 1: 3LD6WIAhD_aIwcAd82VY9zFCI7I.roa (hash: 8HYsxXGY/mwoE0plHWwgkDJBrIUo/WJsQuXAN4HGlQY=)
2: Vcrxz5upkyAccEnWWkm1jKbiHCU.roa (hash: DF9acpeNSt3QcU3RLTkyAoSPyBTgnqf4yVUPlH/IEUw=)
3: XM3soXHkIseck4wnMqkNSKjFPAY.crl (hash: ve+UdwyZvhuljNTTc0auQl0Xr1g9IbEehJbA08GdPR0=)
4: d61QkjArffvt5fKMvIXWF8nIPcE.roa (hash: n77B2cSkql2uFL2mgGTUwbPJJQCN8pumVVKiMumdlmQ=)
5: vEmqZz7TyOIZcMFGWq5sr0qWa9c.roa (hash: rxEx9pdbLlzRrifCSn69fPPljhSEaN1XwXY/F5cFM9M=)
6: x9IxkDkzEkDokkzWh7NpXLA6pSU.roa (hash: HHdD49yqs88lPuXMSPj56CT2/FilbQVuZopBY9/6oH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:81:49:58:f3:ac:60:f0:c7:d1:56:a3:8a:df:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Sep 21 05:00:44 2026 GMT
Not After : Sep 22 05:00:44 2026 GMT
Subject: CN=6121ce68c0ed3385337baf5419968fdf8c3d649a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e7:a4:05:6e:19:cb:61:2d:13:4d:2d:2c:ec:
ea:13:91:52:8a:54:f8:ed:7a:7e:ff:38:80:e3:00:
71:6c:5a:d4:eb:34:cd:b3:55:f4:07:07:b0:3b:20:
97:53:9c:2a:90:de:4c:be:f9:95:5a:0f:c9:63:8b:
a9:4b:01:df:24:bd:d8:bc:2c:60:15:5c:9d:91:db:
be:ad:81:06:12:24:73:7e:5c:ae:82:49:5a:4a:ab:
99:ed:f9:6d:0a:67:48:7f:bb:4a:32:44:47:4a:c4:
41:1d:19:a2:b4:75:de:d0:82:df:40:6e:81:44:73:
87:42:c2:24:a6:56:b8:b8:37:78:bf:51:29:6e:c1:
f6:fb:fb:a7:4d:53:dd:5e:4b:51:23:24:06:4f:8c:
de:33:6c:41:a7:bb:70:34:66:f2:e1:6d:52:64:bd:
92:48:8d:f3:c1:be:28:b0:ba:03:10:3e:a3:6b:90:
d4:17:9d:9f:ca:28:09:9f:1b:73:47:f0:17:ca:a6:
de:89:fd:2f:73:85:db:1b:07:e4:8e:20:c2:25:eb:
ff:5f:80:6a:90:cf:47:90:bf:17:ca:c2:92:65:67:
cc:fa:44:c0:60:ce:b8:ea:09:7a:86:f5:22:45:52:
63:c8:8f:ba:49:06:12:4a:20:a0:09:3f:67:8e:bd:
dd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:21:CE:68:C0:ED:33:85:33:7B:AF:54:19:96:8F:DF:8C:3D:64:9A
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:f5:2b:cb:9a:dc:77:8b:ec:1c:1a:d0:59:96:85:bd:30:0d:
14:9e:71:83:c4:37:e3:f4:94:55:c3:c7:17:ea:8c:14:dd:5d:
1a:63:54:c8:d0:aa:ef:de:0a:d5:53:df:52:8e:09:fa:c3:bd:
74:c5:9c:f7:f5:77:e6:3f:c9:9b:11:78:29:45:62:13:fc:51:
69:58:52:aa:d8:99:f9:ac:7a:5e:1a:bb:ff:3c:4f:4a:0f:ef:
9a:07:35:08:50:67:e6:99:c0:eb:2c:6f:e2:64:c6:3f:4f:f5:
e6:02:c8:00:59:8d:04:0b:4e:bb:90:a0:ca:c3:bf:9c:ae:26:
85:76:cf:d6:05:0d:2b:e6:60:74:7e:97:e2:59:e4:02:84:40:
c1:5f:90:8f:0e:ce:31:56:27:05:13:54:b2:f3:c2:be:13:11:
99:53:2f:e9:b6:a4:c8:48:6c:e9:03:50:2f:d5:d5:7e:2b:ff:
1a:90:4e:bc:fe:99:c5:34:e4:9d:c2:98:82:49:64:c3:89:80:
73:a3:09:f5:8e:cb:6c:c0:38:1e:23:2d:b9:ed:b9:81:76:cd:
70:c7:e6:d9:71:d5:40:8b:06:45:71:b5:d9:27:96:09:65:2e:
d6:56:e7:82:aa:0e:5a:54:bb:2b:66:ba:be:92:ab:ec:5a:25:
22:7f:5c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:22:25 2026 by rpki-client