Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
File: XGGrSm35u5XP3orwdmaKWVs0HeE.mft (raw, json)
Hash identifier: TR9pr4u2C+5JsYw+nFa9OqFoq3LG/+732WNvYnkb1Ts=
Subject key identifier: 10:D6:9E:81:68:D7:EE:2C:08:04:00:ED:21:46:3B:5E:9E:5A:61:50
Authority key identifier: 5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
Certificate issuer: /CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Certificate serial: 01A0C6A09938245B8E7FC4143D3D39C016A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
Manifest number: 074E
Signing time: Tue 22 Sep 2026 01:00:08 +0000
Manifest this update: Tue 22 Sep 2026 01:00:08 +0000
Manifest next update: Wed 23 Sep 2026 01:00:08 +0000
Files and hashes: 1: XGGrSm35u5XP3orwdmaKWVs0HeE.crl (hash: RkGdU0cBkfMXQV0JszhStL8Z9mBC4ECroPY3lqfObvA=)
2: d9ad6eSfGOCAtJCyfx5T80LXc84.roa (hash: l8TnxH7nYsbi9OkxC5kgX4fiX1lQ108inFjyeEj/BH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:00:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:a0:99:38:24:5b:8e:7f:c4:14:3d:3d:39:c0:16:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Validity
Not Before: Sep 22 01:00:08 2026 GMT
Not After : Sep 23 01:00:08 2026 GMT
Subject: CN=10d69e8168d7ee2c080400ed21463b5e9e5a6150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1f:b0:ad:07:a5:c7:b0:94:7b:27:f6:fc:fa:
20:31:16:6c:76:2f:22:7d:0c:54:e8:2a:51:cd:f6:
34:ae:06:1c:d3:9c:4f:77:e3:60:19:bb:8b:40:81:
6c:93:0e:7e:8c:42:a7:33:c0:cc:7f:b9:3d:24:59:
4c:1f:8f:ce:e5:1d:46:22:dc:af:14:30:1b:88:d2:
7e:e5:7b:6d:f9:d8:f9:38:b4:26:16:59:d9:4a:12:
4b:5b:0f:f7:41:10:9a:4b:84:73:87:fa:a8:73:2a:
b1:30:4a:6a:1d:b3:e1:16:d4:8e:b2:75:a6:36:6a:
21:d3:1f:83:e5:1f:93:05:c6:1e:e6:e7:61:df:28:
6e:6b:0b:1d:13:6e:f2:07:1c:4e:67:c7:68:e9:bc:
b8:7d:c1:af:a2:67:30:23:07:50:ec:25:d5:3f:a4:
11:89:30:05:d5:c8:ee:44:06:f6:3a:f1:6b:55:b0:
91:7a:6f:a4:37:07:83:dd:09:b0:bf:73:0e:e1:84:
6c:1c:25:e3:23:b0:ae:4b:f0:91:37:9b:9f:37:68:
35:5b:94:3d:44:55:6e:7c:3d:9e:95:80:23:62:ab:
f0:1b:89:ea:a3:f9:c2:e9:e9:f5:98:83:01:a0:66:
8b:f5:4c:16:1d:b3:e5:16:1d:af:09:6e:b2:2f:32:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D6:9E:81:68:D7:EE:2C:08:04:00:ED:21:46:3B:5E:9E:5A:61:50
X509v3 Authority Key Identifier:
keyid:5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:83:55:d3:d2:ae:23:b0:31:7a:16:7d:39:71:a4:c4:18:06:
75:f1:d1:28:66:d8:1e:9d:75:9d:e8:1a:d6:ec:dc:ec:24:70:
18:d7:ed:c8:0b:e8:86:8d:52:31:97:ba:b7:be:ca:84:3f:85:
56:fd:2b:56:66:57:6b:41:d1:d1:1d:dc:75:98:82:25:db:16:
03:db:85:42:e1:87:2b:a2:6e:c6:a6:d1:d8:00:6b:e4:2c:02:
6d:db:52:c9:9d:34:c7:0a:7f:83:61:40:68:5e:0b:f7:ca:b6:
88:77:f9:c4:e5:69:7b:ea:b6:5f:4f:5e:82:a3:6c:46:19:d2:
62:8a:b3:f0:e6:70:3e:2e:03:3d:41:c1:38:83:a1:a2:42:67:
04:c7:4e:6e:de:74:64:e6:20:fa:3e:9c:8a:a1:a9:9c:e3:54:
19:3c:79:57:b9:ac:e8:4e:43:d4:51:b9:4e:d9:03:8c:5a:b9:
ed:b0:8f:72:d0:58:9e:a8:71:02:b3:8a:19:4c:ba:98:e7:1a:
22:69:fc:11:4b:5e:0e:b3:70:56:1c:1d:15:92:68:71:ca:64:
92:14:65:ec:65:0c:9c:d6:f7:3d:7f:5a:72:22:86:a3:d2:26:
fb:b2:3e:f8:6e:07:21:fa:1e:56:65:0a:a4:a4:12:b4:70:c9:
af:54:7a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:57:54 2026 by rpki-client