Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
File: XX9jQBQHwcx5excDToE9IlT5dz4.mft (raw, json)
Hash identifier: sGnGHZU3h/yNks1HuqO0/c7kxmsnAXGqlaL/Ne/C6co=
Subject key identifier: FC:D1:AA:D2:1F:5F:58:39:E0:11:4C:DC:77:FD:35:7A:E5:A1:71:CD
Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Certificate issuer: /CN=5d7f63401407c1cc797b17034e813d2254f9773e
Certificate serial: 01A0C70E9D1E6EE7D7DF304D976FF4988214
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
Manifest number: 10FE
Signing time: Tue 22 Sep 2026 03:00:18 +0000
Manifest this update: Tue 22 Sep 2026 03:00:18 +0000
Manifest next update: Wed 23 Sep 2026 03:00:18 +0000
Files and hashes: 1: IJctrhezjfWjiA84ZaayWYeZh1k.roa (hash: VetyKsjNSyH6fNCp1k97xHgv6Vja8yJIQbMcO2qIjkU=)
2: XX9jQBQHwcx5excDToE9IlT5dz4.crl (hash: Fk/uTvy88QCMB3STv9xRITwgjldSOF73B1uPpVpFrOo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 03:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:0e:9d:1e:6e:e7:d7:df:30:4d:97:6f:f4:98:82:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e
Validity
Not Before: Sep 22 03:00:18 2026 GMT
Not After : Sep 23 03:00:18 2026 GMT
Subject: CN=fcd1aad21f5f5839e0114cdc77fd357ae5a171cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:67:01:66:ff:31:0c:b1:0d:51:91:25:de:ab:
c4:d4:32:b5:2a:c0:fa:ae:dc:f5:4e:57:1c:34:87:
51:ce:56:ea:46:21:21:ea:b4:a2:f6:66:38:87:22:
47:84:c3:f1:13:37:ce:db:e7:5f:99:56:ac:f8:a7:
93:c7:52:17:b3:53:09:30:9a:41:f5:47:51:a7:07:
ad:d3:d2:46:60:f5:e1:17:82:d6:40:8e:09:ba:5a:
b0:f8:0d:7e:2b:34:38:2a:4c:a3:6e:da:1b:b4:50:
5c:c5:1b:ac:44:43:38:ab:b7:1f:b4:1c:1e:70:85:
cd:be:6e:93:f8:8e:09:67:36:dc:ab:ca:6b:6b:f9:
80:b5:d2:1a:10:00:77:df:eb:8c:82:3a:6f:48:91:
61:7a:0c:4d:36:25:79:39:2b:be:09:17:04:0f:70:
a1:6e:6c:b7:c7:f1:ee:13:78:9a:93:83:92:3c:0b:
83:ed:1a:51:b2:be:01:86:97:94:13:5f:91:fc:98:
a9:36:23:9a:15:25:49:fa:ad:da:82:08:d6:90:82:
14:b5:5c:a4:5e:dd:19:82:23:9e:f1:51:82:c3:38:
25:c5:96:ec:f7:4d:57:1f:de:fc:4a:1b:d3:ea:aa:
56:87:7e:67:6c:7d:3b:84:59:1b:3a:eb:c0:26:0b:
07:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D1:AA:D2:1F:5F:58:39:E0:11:4C:DC:77:FD:35:7A:E5:A1:71:CD
X509v3 Authority Key Identifier:
keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:9d:f2:41:ac:b1:56:31:37:8c:f6:8a:3f:f0:b8:c8:4c:80:
f2:ef:54:94:35:95:61:ea:48:fe:7f:88:5d:dd:e9:50:e8:64:
10:fb:ed:9d:82:a7:8d:88:90:85:3d:66:8e:9f:35:c2:3a:1e:
53:b6:b1:1b:74:b1:d7:74:a3:9e:92:ba:86:e0:a0:03:49:9a:
7f:b6:c8:cb:ab:aa:a9:45:a3:14:18:f9:5d:a9:a0:3f:ef:94:
65:49:f2:f8:f6:9d:b4:10:cc:8b:97:d6:be:18:55:66:18:eb:
d1:07:38:75:39:fd:78:70:bf:35:48:16:0a:36:15:2b:8b:fc:
1e:fd:67:0b:ab:e3:1d:86:df:fa:34:e8:52:75:93:8c:b7:be:
48:2e:52:24:ed:ba:6b:05:ac:10:d0:81:ac:3a:0c:93:2d:28:
aa:21:b9:b1:77:bf:d4:7b:9f:38:3e:d0:f0:0f:de:8f:b4:c7:
60:a4:9e:34:4f:0c:69:60:e8:a9:66:51:2d:ff:73:da:1a:7e:
45:55:53:b7:e2:65:b7:ac:73:6b:cc:b7:61:12:2b:95:33:6f:
cf:4c:9a:a2:23:a7:70:3d:a8:c3:49:ab:61:49:2c:98:06:6e:
72:34:24:5c:6b:ed:e8:1b:4f:52:70:6f:77:88:f8:81:5d:77:
8e:35:d7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:10:58 2026 by rpki-client