Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
File: xcgmUInL3eamxXnNd2tfgMD4rdQ.mft (raw, json)
Hash identifier: 9s0yQd8GYw6CUyANgSfTPLcHvtBRwUECPiRfYRbzuBE=
Subject key identifier: 71:13:A5:F1:A9:90:41:E3:0F:56:3D:B4:36:A1:24:17:E8:C5:45:2E
Authority key identifier: C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
Certificate issuer: /CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Certificate serial: 01A0D012849F8FF4DC4A36339A3F192D1784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
Manifest number: 0583
Signing time: Wed 23 Sep 2026 21:01:09 +0000
Manifest this update: Wed 23 Sep 2026 21:01:09 +0000
Manifest next update: Thu 24 Sep 2026 21:01:09 +0000
Files and hashes: 1: m7FhPhHs11a2vSve5xnlsfFohsw.roa (hash: hMpM0IenW1hqeUpQGO4ux70XpFaz54EzPiQ0jMGVOds=)
2: xcgmUInL3eamxXnNd2tfgMD4rdQ.crl (hash: FRF7YwzIpE9t2fPuXNWQNEdPz7H2UhdSAX4Ogg5fvsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:84:9f:8f:f4:dc:4a:36:33:9a:3f:19:2d:17:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Validity
Not Before: Sep 23 21:01:09 2026 GMT
Not After : Sep 24 21:01:09 2026 GMT
Subject: CN=7113a5f1a99041e30f563db436a12417e8c5452e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:c8:72:66:28:33:1f:9d:aa:89:93:bd:ee:
b2:05:e1:23:c3:c6:e8:89:f7:40:3d:80:3f:6b:6d:
ad:64:4b:90:ad:d1:f9:05:27:68:a4:d7:20:85:26:
40:1b:bf:ac:83:fc:19:09:5f:dc:0b:33:93:92:61:
a6:46:2c:ff:95:df:a3:04:c2:75:50:62:d4:ce:11:
29:07:75:cf:e1:f9:7b:70:41:a6:30:8a:28:0a:7c:
8b:0c:02:3f:69:9a:16:46:30:8d:21:cb:e7:1c:2e:
9a:45:3d:07:12:5d:e7:dd:e5:a9:77:8d:ba:76:a6:
5f:17:f3:9e:a4:da:3d:6f:16:01:de:f3:97:22:7b:
15:71:38:a7:3b:51:ce:89:99:88:ee:be:3c:c7:c5:
31:8c:b3:16:96:a8:f0:50:33:5a:73:23:2b:c8:54:
67:30:d9:81:e1:e4:62:02:91:8b:05:a8:ef:c1:86:
75:74:99:49:b1:71:16:95:a4:ce:06:36:0e:6c:94:
ed:a0:f7:23:fa:a9:7b:d5:b3:94:af:af:e6:42:ce:
96:25:e8:8e:26:4a:56:8b:3b:a3:0d:ca:30:54:3f:
6e:ed:9d:18:93:a2:8c:8c:e8:2d:09:a6:47:06:44:
56:8d:4d:e2:ae:14:59:d4:cb:1e:5f:3a:9e:2c:50:
43:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:13:A5:F1:A9:90:41:E3:0F:56:3D:B4:36:A1:24:17:E8:C5:45:2E
X509v3 Authority Key Identifier:
keyid:C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:23:30:9f:99:60:94:d5:60:bb:37:ff:73:7a:5d:69:76:9e:
08:ef:ca:f4:15:73:b9:2f:43:0b:ac:ff:71:fa:22:64:cf:40:
43:39:8f:54:e1:5b:53:6e:03:ba:de:16:8a:c3:06:7c:b6:37:
b0:b1:36:13:9a:0d:b9:7c:33:9a:73:c9:69:2c:88:7d:0c:4e:
3f:74:c5:6f:09:a7:f8:2f:18:6d:a2:79:26:e2:5f:dc:a7:52:
72:32:a3:ce:37:4d:2c:94:77:c3:2e:59:02:f4:d2:ad:16:3a:
f4:8d:38:d2:e2:a6:28:f2:67:6c:af:d3:14:75:e3:87:02:ba:
9b:a5:34:b2:e9:96:74:0a:a5:39:85:3d:b2:de:bc:95:23:99:
a8:2c:05:37:a1:ca:4e:c0:af:15:5c:ea:5b:91:22:7d:71:f4:
4e:47:c2:78:8a:3f:89:fc:f7:7f:3c:11:c3:66:ec:76:be:03:
4a:2e:c6:f2:a0:4c:77:9b:61:00:4c:1e:e2:78:75:09:c9:81:
71:2d:ef:f0:c7:22:b4:50:68:97:dc:5e:95:79:fe:49:39:0b:
1a:e1:50:00:8f:e4:cc:50:4f:77:da:c7:02:6a:f7:88:0c:5b:
6c:10:f5:77:b6:46:6a:77:fe:f0:86:94:86:01:fb:03:74:75:
09:48:82:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:43:55 2026 by rpki-client