Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: qvaAmveiELOqdbPjOVwQVObIksgpOgrrc32QCluyeTw=
Subject key identifier: EC:4D:A8:BB:68:04:E0:B8:15:C9:12:BC:A2:17:B7:70:85:2E:DF:5F
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 01A0F29EDD7AE66D46E6CB11809DB27A7D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 1A80
Signing time: Wed 30 Sep 2026 14:01:32 +0000
Manifest this update: Wed 30 Sep 2026 14:01:32 +0000
Manifest next update: Thu 01 Oct 2026 14:01:32 +0000
Files and hashes: 1: D7RyDh7lTL4H2jBeI3MtODxeB2w.roa (hash: j4FPb00AEU8sTGz7vN2WFChjUdkqXvKYmGt4w0kqQbw=)
2: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: IhlMJnBeYcisXa52nmAYe7HteCxBFM9+Zfvhsmwy25c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:9e:dd:7a:e6:6d:46:e6:cb:11:80:9d:b2:7a:7d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: Sep 30 14:01:32 2026 GMT
Not After : Oct 1 14:01:32 2026 GMT
Subject: CN=ec4da8bb6804e0b815c912bca217b770852edf5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:aa:8e:0d:ad:0d:37:66:a3:35:0c:d9:ea:ac:
e5:e8:d5:68:b6:eb:27:e5:bb:a3:aa:6c:ae:19:0d:
37:c3:66:6c:9e:75:cd:bd:50:b6:2c:3b:79:d5:d1:
1e:c7:17:a7:ef:8e:e3:f1:ba:f8:ef:b4:6e:5f:07:
fe:f5:aa:f2:44:24:58:09:bc:71:76:a5:ab:17:4e:
ce:08:f5:1e:37:db:b3:f8:20:56:7d:0f:0f:8b:b7:
0c:e4:88:e5:99:aa:7c:9f:42:7f:b9:11:fe:0e:fe:
85:e2:01:33:0c:df:61:21:99:cd:c0:af:3a:64:99:
f9:81:40:55:f1:16:11:3f:7f:46:47:ad:d1:f5:4d:
6d:98:72:55:88:15:de:c9:06:22:00:b9:c8:85:f1:
25:3c:5f:bc:d5:a1:85:e2:a8:f2:09:74:a9:18:8a:
a2:39:16:13:df:d1:25:e5:e7:12:ab:ff:ae:3b:1d:
60:c2:4d:4a:16:f7:54:36:d8:12:b6:f4:bf:d9:9d:
7a:a0:3a:02:95:69:3b:f9:02:60:f6:b4:c6:cc:6e:
4c:66:65:3a:40:0e:b3:bc:35:1b:c9:d0:99:61:85:
b2:e5:9c:2e:01:2d:23:d7:bf:3b:2d:53:3a:df:fb:
3f:83:8f:fa:80:2a:03:0d:87:9c:7c:59:de:fa:db:
8c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4D:A8:BB:68:04:E0:B8:15:C9:12:BC:A2:17:B7:70:85:2E:DF:5F
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:fb:67:a9:ed:0b:a3:ac:89:8e:61:6a:70:ee:4b:98:1d:cb:
9d:d4:18:91:c1:12:17:99:44:06:d4:ee:08:ce:77:15:91:93:
5f:11:53:33:f1:56:fd:31:6a:83:e1:49:99:53:33:77:3e:38:
ca:f4:cc:77:9f:06:ea:ea:e5:37:29:6d:94:82:3a:48:05:d6:
40:1b:e4:ea:c2:28:eb:4f:ea:80:88:07:1e:76:c2:71:6b:46:
d7:a2:50:f0:9a:8c:35:48:60:e5:65:cf:49:20:18:23:e1:07:
a0:b9:ae:23:d6:5b:a1:5f:b8:4d:40:74:8e:ac:70:ee:44:65:
10:5a:1f:78:5b:5e:3a:4c:95:59:df:f2:0f:1c:bf:1b:e4:af:
20:cf:49:b3:71:9a:db:4d:9a:b4:36:5a:1f:92:5a:71:f0:bb:
c4:d2:ea:b0:c6:de:ca:03:f8:3c:d1:52:7d:68:60:5c:ea:d6:
67:1e:23:a3:78:28:7f:74:02:01:fe:95:2b:0b:35:69:46:2f:
dc:ca:5d:f6:46:45:fb:f7:22:a1:06:60:9a:29:02:01:24:c1:
cb:25:64:2b:a1:ab:22:b8:fc:c1:ab:2e:f9:e9:46:8a:c9:98:
c2:53:f0:25:96:f5:1a:1d:c1:98:04:6c:1c:ce:3b:49:2a:15:
e8:b5:19:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 18:18:38 2026 by rpki-client