Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: wOZ6oM+7KsiYjPMJsZIZgWk8GatKqRC79piTjvJInR4=
Subject key identifier: 7C:18:F1:FC:24:32:B3:B4:36:98:C4:52:A4:9D:38:22:76:4C:08:A4
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 01A0CA47939CA5A8A24F03D2756F5228C347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 16A4
Signing time: Tue 22 Sep 2026 18:01:23 +0000
Manifest this update: Tue 22 Sep 2026 18:01:23 +0000
Manifest next update: Wed 23 Sep 2026 18:01:23 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: 1rUL005fsgtP72iAKUVvQC+Ye4DDC6IWQJ4UeUlrD3w=)
2: fDzIkCC4HQZF8d8gvy277WuuRYM.roa (hash: TzMFdxwnyUIL4oJ9MUVrNEjKX81ekLEZoq92hFxo3V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:93:9c:a5:a8:a2:4f:03:d2:75:6f:52:28:c3:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Sep 22 18:01:23 2026 GMT
Not After : Sep 23 18:01:23 2026 GMT
Subject: CN=7c18f1fc2432b3b43698c452a49d3822764c08a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f6:d2:45:8c:4e:db:53:b4:52:b4:21:6b:f2:
20:14:69:6d:e6:18:09:34:39:96:5b:c3:2c:d0:07:
e4:b4:78:68:47:52:d7:e9:80:e9:b9:ab:90:08:e9:
cc:76:09:86:e2:a2:a9:4c:cf:1b:ec:94:fd:4a:18:
80:f1:1e:eb:a3:67:a3:f3:e7:29:18:8f:a3:18:57:
9d:8a:04:d1:ae:ce:b4:2c:0a:51:99:d6:7e:4e:ca:
a4:1d:82:a2:06:d2:7f:d9:4c:c4:7c:f7:77:00:44:
67:9c:a7:50:e8:9f:5c:f4:82:0c:8e:04:99:0b:e7:
ce:81:ec:35:89:ae:c9:23:80:73:ed:da:58:a7:65:
d7:00:44:88:11:8d:0c:c9:9f:81:32:0c:f9:87:11:
cf:ce:c2:d9:1a:8f:0d:6d:a2:d3:03:21:30:ed:11:
33:af:81:cd:76:ca:1a:ee:db:aa:e6:81:e6:d5:bf:
0d:19:28:8e:5e:bb:9b:c6:d7:0f:97:20:cd:62:b8:
bd:76:8e:a3:24:9e:28:14:a5:38:64:4f:96:ec:2b:
4d:a4:e9:ca:fd:33:86:09:25:6d:ce:d2:07:65:32:
60:44:f7:36:89:68:0a:7d:84:87:04:d1:b5:d5:0f:
8f:9f:12:68:f1:d3:af:12:be:b4:cb:76:27:bf:dc:
c0:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:18:F1:FC:24:32:B3:B4:36:98:C4:52:A4:9D:38:22:76:4C:08:A4
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f8:4f:a6:f2:1f:38:9c:1e:89:64:e5:46:71:3d:8a:c4:80:
31:c0:24:7f:02:bc:b9:14:25:c4:b8:a5:09:a1:5e:c5:da:61:
a8:ab:73:c1:92:a7:a6:67:72:9d:ed:49:b5:e5:5f:fc:eb:37:
a2:69:bf:21:64:4e:a9:0e:57:95:a9:ce:f7:21:03:f6:23:1a:
58:f2:ed:7f:13:c3:0a:f3:10:e2:26:a4:a4:ea:bb:07:9f:f5:
2d:91:c0:59:57:85:71:da:0e:30:d3:e2:35:f6:e3:a3:41:5c:
a9:bc:77:a5:02:9b:d3:5e:e2:fb:60:ef:13:ba:b6:fb:84:2b:
82:10:9b:e7:ff:03:28:ad:97:3b:6a:ff:59:7e:7a:93:6c:f7:
05:ca:67:13:2f:6b:99:dc:eb:24:45:93:a1:8a:3a:0f:19:f8:
9a:54:dd:9a:02:5e:87:75:3f:2b:9f:76:cf:5c:e9:dd:ef:00:
ad:ef:7e:a5:02:e6:a7:ef:65:57:b7:9e:e0:c9:db:cd:79:72:
4b:97:8b:75:cf:53:2a:76:0b:3f:f2:09:52:2f:4a:87:de:34:
30:6f:4d:b0:d9:24:d4:69:e0:d7:4d:9e:45:ca:d6:fa:5c:18:
e5:7e:2b:91:2e:23:34:eb:bf:6d:8e:4e:f2:37:8e:3c:00:91:
c9:82:f0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:10:04 2026 by rpki-client