Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
File: XYqf18UZJuIuqKozs7iDjpPovt0.mft (raw, json)
Hash identifier: tOZimQc+mVhcZcKsyf22/aYWTEMQTfokhJD2KcHR9QU=
Subject key identifier: A3:89:E2:64:1F:B4:0A:19:2E:2A:BA:3F:6D:C9:84:38:74:53:7F:95
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Certificate issuer: /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial: 01A0BF1EF31259B814DD8D15CD502A7D41FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
Manifest number: 1A66
Signing time: Sun 20 Sep 2026 14:01:11 +0000
Manifest this update: Sun 20 Sep 2026 14:01:11 +0000
Manifest next update: Mon 21 Sep 2026 14:01:11 +0000
Files and hashes: 1: OS8EDWL74n3CtFxmTxNOolYhsvA.roa (hash: yF17P4v/AdaI5VNNKOl9FtUJuOAbQSvTKgj5Ha/kk7s=)
2: RrlPj_5PMLmauOZbV-XxFE0jClU.roa (hash: +JGjuqCo+HgEGZGs0mkuqnIL4NPJWqKMaUK/A5KXgqw=)
3: XYqf18UZJuIuqKozs7iDjpPovt0.crl (hash: A9Pbxdp1faXAGzYt9SaYvs/ntDYE4vWpeALHmhRhNx8=)
4: dL_9twvmgLzMs895oA64iiDmIEY.roa (hash: LgJcVms5Pq7JFZ8+OO+s5X+XVI8uKF8XIm98bwsR7Lk=)
5: dqfLmPoWYDgnN63zfumMSmq4Qs4.asa (hash: VP2elBPNAsWST4m//JgRDzv1id8AdOzpooWBKdSTZ3M=)
6: m_016GliLd1us5Dyp3gWd_9XmZU.roa (hash: NGfX/rkS6vQZZNfEtGY8uwL12Vk9X/AaXVk/NGit2hQ=)
7: wEd_ihwz_Sc9Z7253Egu-wb4rYs.roa (hash: JaUYZqefug6H01TWJts1HEcFIA5lKpx4F7+av5F+33Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:1e:f3:12:59:b8:14:dd:8d:15:cd:50:2a:7d:41:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Validity
Not Before: Sep 20 14:01:11 2026 GMT
Not After : Sep 21 14:01:11 2026 GMT
Subject: CN=a389e2641fb40a192e2aba3f6dc9843874537f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:74:3f:c4:4d:c8:ae:8a:c3:f7:f9:78:66:39:
85:e7:f6:35:f0:10:ad:1e:3f:9e:18:46:87:d0:79:
d6:a4:f8:1d:f3:cb:e3:c4:f7:c8:bc:63:1b:ec:c7:
77:b4:d4:0d:12:80:97:a8:19:59:28:2f:37:81:fc:
35:22:32:3d:ec:60:28:66:37:72:68:62:b9:2a:bf:
b1:4d:a9:63:9b:1e:12:bf:b0:05:df:16:38:11:c9:
a2:9e:b1:e4:e5:89:77:c4:1a:c0:2e:0e:f9:39:f7:
e8:bd:fa:a5:07:f0:8f:37:f4:cf:bc:13:96:fe:ff:
0f:3b:dc:14:fa:f9:98:8c:f1:91:fd:82:f2:00:63:
6f:c0:cb:7c:48:a4:66:7e:4f:85:28:38:06:e7:de:
45:df:8b:d8:62:73:28:7a:56:97:ff:a4:97:92:01:
38:a3:7b:93:93:11:19:e7:41:09:98:5d:3c:02:f3:
a4:4f:fb:eb:64:92:d4:02:02:14:99:59:8c:74:1b:
13:34:94:3a:1e:e8:8f:1a:35:9e:44:79:9c:a3:b7:
6b:7a:a2:d5:a0:26:67:42:57:a6:11:38:51:b3:fb:
73:a9:58:c7:23:4a:f3:db:45:4b:f3:97:7b:8f:c1:
9d:9e:25:57:53:73:c3:f9:b6:28:e8:21:7a:32:89:
9a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:89:E2:64:1F:B4:0A:19:2E:2A:BA:3F:6D:C9:84:38:74:53:7F:95
X509v3 Authority Key Identifier:
keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:58:f3:67:55:42:86:0b:bb:f7:15:05:5c:06:51:92:98:da:
09:cc:47:1f:33:f9:33:9c:df:68:0c:f2:93:76:4b:3c:6d:c5:
56:36:1e:46:c5:12:c9:14:bc:53:ba:73:3d:2d:a1:e8:30:2f:
58:1b:f0:68:2a:b0:22:21:38:85:f0:c3:85:58:06:94:af:57:
95:88:da:7c:2e:2e:d3:52:dd:17:88:20:b8:e8:d1:69:4b:d6:
9a:50:c8:11:53:e3:ef:d7:d9:dd:bd:e2:0b:f4:21:bb:f2:5c:
86:5c:16:e5:f9:3e:94:90:ab:b2:7c:bb:0a:17:a1:b9:89:b0:
cb:fe:bf:0b:de:f2:c0:b9:1b:8c:2c:33:b6:16:36:1b:99:cd:
f9:d7:12:e1:b1:82:9d:39:66:d8:2e:5e:80:7e:d1:de:4e:80:
4f:d2:7b:a6:dc:95:22:e8:37:0d:f0:f2:1c:cd:b8:64:08:92:
03:f7:ff:88:c1:45:6f:11:43:52:66:8a:db:8b:77:03:ea:3f:
0b:33:a0:5c:2b:d8:12:57:12:09:23:88:29:23:86:98:14:7f:
28:32:dc:d6:2c:f5:46:12:4d:56:0f:ac:ba:45:01:ee:4e:2b:
ad:bb:95:73:96:44:6d:8d:57:94:c9:e4:35:c6:4b:49:b4:18:
f7:32:3f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 17:01:31 2026 by rpki-client