Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
File: Xhd799BDVEHRrbFIoizv4dbcwPs.mft (raw, json)
Hash identifier: HSQ5FdgrVG+I8vj8qM8fbAZibcI38RdpaQs5gk5fOJA=
Subject key identifier: 64:4C:FE:58:40:18:CD:5A:5F:B2:A8:3E:00:A7:8D:A7:A2:23:5F:A3
Authority key identifier: 5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
Certificate issuer: /CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Certificate serial: 01A1242FA7D84620DEDF2965107DDB01EF9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
Manifest number: 01C9
Signing time: Sat 10 Oct 2026 05:01:05 +0000
Manifest this update: Sat 10 Oct 2026 05:01:05 +0000
Manifest next update: Sun 11 Oct 2026 05:01:05 +0000
Files and hashes: 1: TYV20I1tmXmrFyD5hD9FE4IPKWU.roa (hash: cuvSEP8hQjrQh4a+NJD6WQS8i4OZ31Rtmx8MtCDraCQ=)
2: Xhd799BDVEHRrbFIoizv4dbcwPs.crl (hash: cFFg9RlMIvyc/UDta2C8GQDbUPlneCnXmTQWIPEOtK0=)
3: s8rf2tML831KhZ_f-0fAXEJkgew.asa (hash: vKjVcHxuUGRJ3DxPFJJe7VWqTLEgv9kq3d3TeM8pLOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:2f:a7:d8:46:20:de:df:29:65:10:7d:db:01:ef:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Validity
Not Before: Oct 10 05:01:05 2026 GMT
Not After : Oct 11 05:01:05 2026 GMT
Subject: CN=644cfe584018cd5a5fb2a83e00a78da7a2235fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:89:a0:bb:7d:e8:7d:b2:b6:47:6f:d1:6e:14:
56:4a:25:c5:7c:54:72:84:d8:0f:71:93:52:a2:34:
32:f3:1d:10:42:a4:29:6e:9c:22:e6:26:67:b7:0d:
a1:86:e9:46:8b:42:cd:46:9b:fc:22:db:a1:48:ff:
74:a4:cb:14:f0:f6:59:a6:e3:a6:28:e0:bf:e5:fa:
7b:04:5f:af:1b:d9:7c:19:e6:33:c8:1b:11:52:5b:
0b:6f:0c:57:c6:63:a9:ed:58:51:20:5b:90:22:6a:
e7:66:e9:ad:7a:54:17:93:e4:c8:66:c5:ba:f6:6e:
5a:b6:90:ef:d2:c6:28:4c:00:fc:33:58:33:8c:5a:
47:81:e1:ce:7d:3a:74:05:99:10:80:f4:63:e2:9e:
31:1f:1d:de:3d:a9:67:42:d1:bf:09:f4:17:f8:30:
3b:77:70:8b:21:27:22:21:e1:b1:ab:0c:a6:f5:02:
2d:c5:1b:7c:53:e3:e8:3c:a9:e4:d5:82:86:a9:72:
5b:cd:5a:ab:2a:15:f5:0f:83:86:45:1e:36:7d:74:
38:2c:a0:43:9f:6f:f6:f8:66:d2:46:cc:33:41:a4:
05:4e:dc:e8:d4:01:48:1f:17:ea:c9:21:4a:5b:50:
8e:8a:22:82:16:bb:70:2a:1a:e6:35:a7:c5:23:0e:
b6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:4C:FE:58:40:18:CD:5A:5F:B2:A8:3E:00:A7:8D:A7:A2:23:5F:A3
X509v3 Authority Key Identifier:
keyid:5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ad:5e:16:ba:08:96:a1:3b:d9:28:59:78:84:39:d8:8e:5d:
68:05:70:85:df:45:e2:d0:8b:53:52:14:42:75:89:50:ec:84:
6a:fc:1e:a5:7f:68:7c:c2:87:66:83:e9:d2:8a:14:a6:14:7d:
d4:62:e0:54:a6:11:9c:f0:dc:75:db:b4:4a:da:18:84:24:d0:
25:55:7e:04:23:f4:a8:1f:db:57:d9:cf:48:c5:67:54:a7:b8:
31:18:59:75:ce:2d:bf:2d:29:18:67:33:df:75:a1:ee:8b:78:
d5:55:fb:cb:c4:06:7c:4b:d8:d6:9c:a8:e4:e1:89:74:14:28:
2a:09:bb:13:e6:be:eb:9a:7d:cf:9c:e5:9a:05:fd:cf:d6:09:
30:68:17:aa:ea:90:86:51:32:9c:c6:25:13:94:a2:88:98:f3:
4d:69:7c:94:f4:24:d2:60:78:9b:e1:8c:7b:61:f0:f1:f6:39:
7a:2e:31:ce:3e:1c:37:46:52:32:5e:06:e1:30:b6:1d:5e:53:
b9:5b:bb:b4:2a:23:79:c1:21:8e:c7:bc:45:d6:68:4d:70:39:
e3:a3:69:cb:04:56:b9:f1:a9:1a:f9:6f:c7:3f:2a:7c:d3:ba:
47:97:96:48:a0:76:8f:56:f0:62:7d:5f:21:8f:5e:51:78:f5:
fe:d2:be:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 13:57:35 2026 by rpki-client