Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: J1p3RXbSj57+yNBvGyaVr32PPTgMeMGk3dzeA5eNUUE=
Subject key identifier: 71:92:23:2C:00:D9:70:DB:0C:FF:58:5B:7B:F3:2F:93:41:3B:64:8D
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 01A0F48D08283BF3109191ED00B52804530A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 1A81
Signing time: Wed 30 Sep 2026 23:01:18 +0000
Manifest this update: Wed 30 Sep 2026 23:01:18 +0000
Manifest next update: Thu 01 Oct 2026 23:01:18 +0000
Files and hashes: 1: D7RyDh7lTL4H2jBeI3MtODxeB2w.roa (hash: j4FPb00AEU8sTGz7vN2WFChjUdkqXvKYmGt4w0kqQbw=)
2: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: T/WhlWtVv9wRHq5X9iOBaFJogU/83kbth//wwfw2zB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f4:8d:08:28:3b:f3:10:91:91:ed:00:b5:28:04:53:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: Sep 30 23:01:18 2026 GMT
Not After : Oct 1 23:01:18 2026 GMT
Subject: CN=7192232c00d970db0cff585b7bf32f93413b648d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:2a:d3:5c:84:2c:21:7c:78:c6:f2:dd:b9:
f3:53:db:05:ed:9c:18:6a:35:48:5a:35:08:c8:79:
05:7b:45:7a:cc:46:b1:90:3f:08:49:4a:02:70:56:
34:4d:43:0f:96:32:ba:23:6f:b7:9e:5f:45:a1:8a:
c9:93:e2:de:6c:e0:7a:08:f2:40:be:18:56:64:fd:
a1:e4:4f:30:80:cd:a2:86:e2:0c:dc:9d:44:60:96:
bd:84:f8:6c:e4:f3:43:ec:02:d9:82:16:96:c2:09:
63:a0:cb:67:a3:59:3b:cc:f4:3c:34:96:ab:b8:4a:
2b:8c:48:e8:2d:0c:35:6d:37:55:7d:11:f3:cb:e7:
21:03:62:89:fc:15:5e:68:d4:59:72:ff:87:6d:47:
21:05:e7:22:0e:d1:cc:b8:e2:aa:c4:8b:93:1d:5c:
fb:97:d6:39:8f:f7:af:b8:39:de:e1:1b:8d:eb:fd:
67:81:e1:85:dd:f0:05:25:0e:66:6e:85:28:df:73:
ff:66:6c:56:6b:f4:dc:3a:e4:60:a1:27:47:2a:ff:
1c:83:2f:70:84:6c:fe:9e:2c:a2:6e:f0:4c:4c:b3:
a8:90:51:e1:2a:db:10:4f:a1:db:71:d1:db:f2:49:
31:85:cf:a5:63:35:fc:03:82:19:fd:0b:eb:84:b5:
87:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:92:23:2C:00:D9:70:DB:0C:FF:58:5B:7B:F3:2F:93:41:3B:64:8D
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:b0:8d:01:a1:75:ae:d4:2e:d6:d0:74:4c:93:f5:04:e6:3b:
71:91:69:d0:fc:db:fa:10:85:43:4e:af:0a:87:41:fa:43:31:
cc:28:a7:8c:c8:0b:9e:da:61:2a:df:a0:a5:11:63:4b:7e:50:
40:36:65:46:89:8f:36:a4:5b:cd:3d:9b:27:8b:bb:38:f3:97:
c6:03:0d:82:8e:1f:9b:42:ea:43:33:81:21:0c:e5:a9:52:38:
5c:ed:e8:be:22:a6:f7:f8:1d:a9:10:9a:9f:8e:de:1a:87:8d:
28:1f:0e:66:4d:86:0d:34:64:55:ad:a6:c7:29:e4:59:0e:6e:
dd:b9:1a:09:05:91:9b:9a:ca:8d:5f:eb:35:db:92:b2:84:0b:
ad:d4:ac:11:38:9a:a8:f1:c7:5c:15:0a:c2:e6:5d:b4:2e:ad:
a0:33:04:af:f2:6c:93:ea:7a:60:98:5e:3a:41:6d:81:db:3c:
b3:1d:ee:4f:15:99:3e:ab:f5:0a:e3:6f:19:b6:98:70:90:ef:
86:6c:8c:14:7f:4e:93:21:74:4d:12:db:ef:28:fe:87:3f:08:
76:14:55:8b:a7:e3:8b:5f:ce:b8:e8:2e:1c:e9:29:c4:54:24:
d9:27:65:c0:7d:39:52:53:43:51:56:5c:a2:0b:77:29:e1:7c:
b8:5d:4b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 03:36:53 2026 by rpki-client