Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
File: XdDfAq2NzVImXb-cBfOBnyQy3_4.mft (raw, json)
Hash identifier: MSI+GV1j8TA+4z+gUDOBza76ZYkqsvvCyNp7wh0Oi10=
Subject key identifier: AE:1F:73:C5:D7:5F:E7:69:1A:3E:26:4F:5F:79:87:AF:7D:CF:5F:D6
Authority key identifier: 5D:D0:DF:02:AD:8D:CD:52:26:5D:BF:9C:05:F3:81:9F:24:32:DF:FE
Certificate issuer: /CN=5dd0df02ad8dcd52265dbf9c05f3819f2432dffe
Certificate serial: 01A0CA46F55AF2A42EA815281FD6CB4EFD76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
Manifest number: E2
Signing time: Tue 22 Sep 2026 18:00:42 +0000
Manifest this update: Tue 22 Sep 2026 18:00:42 +0000
Manifest next update: Wed 23 Sep 2026 18:00:42 +0000
Files and hashes: 1: 9gJWQkxGs5Qy5W0SDW1Rj7nGQoI.roa (hash: 4pm0cu3JawKPkvnVafLyIQWg1jaUXk/k+2XMfkJDsyU=)
2: XdDfAq2NzVImXb-cBfOBnyQy3_4.crl (hash: AZ3SAmBtifPcWDcwZQI5CDvNsSZ0zbi4IMR8je1PowY=)
3: jxsYluW7L-VesUMEEAjwwcE99j4.roa (hash: nwnLEM1dFL1lWHtpYNqY2hUoyqHLs3XF/ua5I+nhIX8=)
4: sJdr2Fb_Swcmno7YhJernLivV-4.roa (hash: UR6r+/nWVWtQENnrssjpLZJ3r+hXsPHUdwQ2sgMSnus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:f5:5a:f2:a4:2e:a8:15:28:1f:d6:cb:4e:fd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd0df02ad8dcd52265dbf9c05f3819f2432dffe
Validity
Not Before: Sep 22 18:00:42 2026 GMT
Not After : Sep 23 18:00:42 2026 GMT
Subject: CN=ae1f73c5d75fe7691a3e264f5f7987af7dcf5fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:09:7b:99:78:77:41:bc:f4:d2:a2:4b:73:cf:
ca:8f:1a:e8:87:a8:89:30:ca:ba:bf:3e:61:6f:c7:
f2:dc:92:66:f3:a3:4a:90:8e:af:c0:cc:06:0b:10:
60:8e:90:df:d0:19:e4:1f:c9:67:f2:e0:fa:b1:01:
1c:b8:c5:45:5c:21:c6:80:8f:de:72:a2:b1:2b:cb:
76:31:f2:65:67:2f:61:7a:18:d0:3e:d7:c5:52:50:
a5:72:d3:40:6b:f4:8e:7c:e3:3f:a7:21:16:c7:ee:
69:79:d4:bf:21:d1:dc:09:15:fd:66:55:42:37:88:
94:65:04:fa:bd:f6:18:44:aa:43:d2:a2:0f:d3:e4:
01:9f:00:78:22:2b:71:02:90:12:66:cc:10:fe:ef:
ca:35:93:06:a5:8d:8a:6e:b6:29:1b:5e:81:0e:b5:
38:9c:27:18:03:81:8f:79:0f:ea:65:ad:42:fa:72:
5c:ff:be:d8:e8:63:86:c2:7d:b4:c6:1a:a3:b1:36:
c3:fb:bd:90:62:f2:82:60:2e:ff:b0:52:a1:e4:68:
71:c7:70:61:0a:2b:ad:77:ca:76:38:07:b2:5c:27:
6c:d7:4e:d3:11:4e:5a:14:41:42:6e:4f:64:18:0d:
6a:51:a7:e9:56:61:be:02:36:51:f9:9d:19:07:d0:
2e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:1F:73:C5:D7:5F:E7:69:1A:3E:26:4F:5F:79:87:AF:7D:CF:5F:D6
X509v3 Authority Key Identifier:
keyid:5D:D0:DF:02:AD:8D:CD:52:26:5D:BF:9C:05:F3:81:9F:24:32:DF:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:75:e9:3f:a3:a5:82:09:68:99:5c:75:db:74:c9:ff:e3:de:
71:83:8d:ee:bf:1d:3e:9b:8e:bf:67:f4:a8:d5:88:5f:37:e1:
fc:a5:f6:1f:f7:55:d1:97:7c:d0:29:d1:f9:32:05:ea:08:03:
55:19:dd:5c:49:34:18:39:b1:fb:8e:45:98:d2:e9:d5:66:a6:
5d:e8:31:ed:23:b5:e8:25:07:4c:bd:98:43:bc:5e:62:e9:8c:
0c:64:95:d9:b0:52:0d:8a:cf:45:2a:50:b2:d8:8d:b3:a5:a3:
70:c7:18:72:cb:c6:9b:4f:eb:29:ee:7e:70:99:4f:41:bb:19:
2c:f7:12:b8:3d:18:0a:bc:e5:a3:87:05:4f:26:1d:18:cd:a4:
e6:99:3a:aa:95:c4:22:0d:ee:4c:19:ce:01:05:cd:f0:55:58:
eb:fb:c4:a2:ba:4c:6a:84:5f:79:47:ac:0f:eb:2b:f5:ee:c9:
ad:11:6e:11:1d:9b:b7:2a:c6:01:50:77:95:31:e5:fe:44:ad:
ab:51:3a:32:4a:3a:34:04:41:da:35:cb:1d:c7:d5:bb:d4:19:
4d:03:fd:b3:cd:da:8a:3d:49:66:be:64:b4:ba:a1:58:b6:3a:
39:78:86:81:02:37:6d:ef:ff:c6:ef:61:ad:f0:c1:07:5b:a5:
c1:df:02:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:13:41 2026 by rpki-client