Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
File: XLtvfRHev55LqLH2nDg7j8PErhI.mft (raw, json)
Hash identifier: XPiWXu4QNlTwuKwrpDtzB3Z9KJZFL4qF941sBLrss7I=
Subject key identifier: 56:FC:8A:5E:7F:BE:79:0F:5B:B6:3E:97:31:BC:2F:50:83:34:75:FA
Authority key identifier: 5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
Certificate issuer: /CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Certificate serial: 01A0DBA93ED0154D326E4E555D035146FFCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
Manifest number: 0E97
Signing time: Sat 26 Sep 2026 03:01:37 +0000
Manifest this update: Sat 26 Sep 2026 03:01:37 +0000
Manifest next update: Sun 27 Sep 2026 03:01:37 +0000
Files and hashes: 1: XLtvfRHev55LqLH2nDg7j8PErhI.crl (hash: f8aQe7ZQoJryYhVph8/YPtALpkrcJWqACShQbeH0Qxc=)
2: eO46gXXoSZwATk8MoN76YPpN1jQ.roa (hash: F/WomuEJ+uQlAxaPHkR6qqNqSNUL0B0LVxqFRNytneU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:3e:d0:15:4d:32:6e:4e:55:5d:03:51:46:ff:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbb6f7d11debf9e4ba8b1f69c383b8fc3c4ae12
Validity
Not Before: Sep 26 03:01:37 2026 GMT
Not After : Sep 27 03:01:37 2026 GMT
Subject: CN=56fc8a5e7fbe790f5bb63e9731bc2f50833475fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:4a:24:3d:80:d7:0c:6b:f9:86:dc:92:41:ae:
75:90:08:a6:4e:95:b1:09:fd:e6:eb:e2:34:24:91:
f4:44:65:85:c0:e4:40:43:ad:8b:ff:38:0b:6b:03:
01:8f:32:b3:ee:ca:0e:36:40:62:8a:25:d7:53:4a:
23:31:e9:aa:72:3e:fd:89:cc:a5:a6:c5:e5:4e:97:
7c:c9:74:3c:1b:57:ef:9c:31:cc:ba:87:2f:d5:01:
88:b3:11:5f:b4:37:25:bb:60:f9:dd:c5:74:f5:b7:
1c:22:82:d6:4c:c0:ad:73:ea:74:c6:4a:76:37:33:
6a:96:f8:9a:e4:0c:39:fa:51:55:c9:b8:51:78:94:
99:5b:0e:7c:bb:1a:d6:dc:35:22:0d:c7:33:ff:a5:
8e:10:b5:e7:eb:ce:cf:58:35:c5:f6:ca:02:15:26:
55:cb:54:27:a2:34:72:fd:bd:2d:79:26:ed:50:b2:
ed:f9:09:df:bd:84:d5:03:9c:d5:77:39:74:03:11:
6a:33:41:8d:e3:d6:2a:99:92:bd:ae:08:68:9f:bf:
a2:ea:fc:f9:11:8b:cd:70:0e:c3:ae:a5:db:5e:82:
c1:a0:f7:f6:29:94:47:c0:c4:66:67:10:11:c9:0c:
69:d6:e8:a9:16:b6:ae:89:50:96:d3:0f:c7:87:42:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:FC:8A:5E:7F:BE:79:0F:5B:B6:3E:97:31:BC:2F:50:83:34:75:FA
X509v3 Authority Key Identifier:
keyid:5C:BB:6F:7D:11:DE:BF:9E:4B:A8:B1:F6:9C:38:3B:8F:C3:C4:AE:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLtvfRHev55LqLH2nDg7j8PErhI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ca8125-5477-4222-b055-bbeb4550d9e6/1/XLtvfRHev55LqLH2nDg7j8PErhI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b5:b6:d7:ee:46:26:e1:e8:5e:9a:ed:68:12:15:7c:1b:8a:
a2:93:07:01:b0:0a:1f:55:22:58:b2:76:87:15:b9:69:da:9c:
cb:59:39:9d:92:9c:68:c0:57:bd:10:dd:57:07:44:0b:73:65:
4a:5f:16:39:50:94:08:6d:3f:7e:ae:a7:01:ca:97:9b:9e:8b:
a7:c9:b5:a9:7b:ea:c7:db:76:ff:79:b2:11:c9:34:10:48:dd:
9e:7e:ef:e4:1c:3d:e4:8f:68:10:38:8c:c2:2f:24:c5:80:e1:
72:24:da:32:e2:12:7f:80:2b:f6:a8:17:4d:ad:5c:a0:90:d4:
35:4c:af:f5:51:4e:cb:d7:de:4a:a3:5c:53:60:7b:70:a3:92:
47:4a:d0:cd:f0:45:21:87:05:67:ce:77:7b:74:eb:a6:37:47:
12:db:9d:47:16:f9:76:5f:f5:bb:cd:b3:8a:38:5d:19:76:90:
5a:bc:ca:77:8b:ee:98:6e:09:41:42:d8:50:d5:ad:da:69:35:
3f:bd:42:fc:56:e5:96:3c:26:49:49:d5:63:40:e5:e4:94:8a:
4f:d3:68:86:ed:d9:e9:d1:cd:ae:03:93:34:ae:c7:16:86:49:
34:5d:43:08:5c:c7:ea:b1:1f:7b:13:f0:6b:d9:a7:e4:cd:f3:
57:10:5a:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:12:03 2026 by rpki-client