Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
File: 500-XZlL7NPyWMQd858fY-xWPh0.mft (raw, json)
Hash identifier: +LItLD0nAswJZFOkO3Tkm7KfAENZFs8/bJerjDVpJwk=
Subject key identifier: 0E:A9:A9:C4:E8:BD:AB:3C:EC:CC:7B:77:0E:B2:D0:E4:88:AC:67:72
Authority key identifier: E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
Certificate issuer: /CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Certificate serial: 01A0C4EA06C4C8EC408F7F951C021FF533EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
Manifest number: 1410
Signing time: Mon 21 Sep 2026 17:01:06 +0000
Manifest this update: Mon 21 Sep 2026 17:01:06 +0000
Manifest next update: Tue 22 Sep 2026 17:01:06 +0000
Files and hashes: 1: 500-XZlL7NPyWMQd858fY-xWPh0.crl (hash: bhDlpaxLUd4XfhKMPk3t2ervUmlaE7tGn6/oD/kESe0=)
2: xJQkEE-myuee2xusX84h4jOXGkk.roa (hash: bgfimRITzgygmGvHr8W4DzraqoP9/oX3mukFAiSIHn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:ea:06:c4:c8:ec:40:8f:7f:95:1c:02:1f:f5:33:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Validity
Not Before: Sep 21 17:01:06 2026 GMT
Not After : Sep 22 17:01:06 2026 GMT
Subject: CN=0ea9a9c4e8bdab3ceccc7b770eb2d0e488ac6772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:3b:c2:d7:2f:b1:5e:51:6f:30:0c:1c:eb:22:
9c:e2:81:cf:71:91:73:ee:aa:7f:b9:61:25:12:e4:
c6:76:0b:0e:7d:bf:98:a7:06:37:f6:38:05:96:92:
cd:dc:5a:0c:7f:a2:3d:35:60:82:4a:8f:b5:a4:2b:
06:e1:36:4e:6c:d3:30:74:ec:fe:ad:73:2f:85:50:
e6:4c:eb:3a:21:8f:cc:f8:62:3b:9f:65:a2:6b:51:
b8:ce:44:c7:e2:92:ae:a9:5c:f2:91:24:85:5a:35:
db:23:f0:5e:dd:14:53:35:5a:5c:05:20:66:9c:6c:
a0:be:fd:f7:21:97:41:42:5c:86:a5:99:38:9c:b3:
a9:ed:59:8b:7d:82:83:96:41:d2:d7:28:ef:0f:35:
9d:dc:9d:8d:55:13:9c:0e:7e:dd:e4:e1:68:8b:5a:
7b:2a:c5:88:b2:65:b7:fa:c6:d8:be:ab:94:99:fd:
c8:8e:45:be:af:c5:50:40:e5:91:26:af:64:f9:f3:
51:19:75:19:e1:67:3d:75:14:88:9a:e7:ae:0d:59:
2f:6d:61:06:af:4a:79:45:a3:c6:88:fd:32:50:93:
f8:31:f5:fe:f1:5b:bd:27:dd:ec:1c:12:4e:9b:25:
32:e8:7d:e6:ee:8e:d8:79:46:ef:2c:00:92:13:29:
bf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:A9:A9:C4:E8:BD:AB:3C:EC:CC:7B:77:0E:B2:D0:E4:88:AC:67:72
X509v3 Authority Key Identifier:
keyid:E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:19:41:e0:1b:da:b7:96:a5:7c:cf:7a:6a:02:41:09:8b:8f:
ef:ec:63:4b:ac:aa:0f:06:81:eb:6a:eb:5f:4c:f9:6f:b1:26:
3f:ef:cb:aa:d0:30:31:e7:61:4d:4d:6f:4b:07:8c:44:2a:37:
3d:e9:91:da:0c:5b:68:9b:88:83:70:74:b4:d1:ec:be:65:f9:
a4:90:85:5c:21:6f:11:51:4b:88:f0:88:8d:db:91:f7:82:0f:
1e:52:00:ed:1a:42:46:2d:e6:10:5f:49:3f:71:22:19:35:d0:
e4:47:e9:b4:a8:7c:03:ea:f0:05:4d:44:1a:bc:32:a3:00:c5:
a0:54:c9:d4:af:e2:63:2f:9c:e9:f6:5f:1b:61:81:ae:3e:b6:
21:d1:5e:f9:ad:20:8f:4f:d7:25:d1:64:79:91:42:40:cd:3b:
8a:54:79:58:1d:c2:09:08:3a:f2:a9:ca:11:16:c7:6b:7e:6c:
02:bf:a4:04:5c:a6:19:45:21:10:ef:60:fe:07:3f:65:d3:04:
0f:2b:8e:f8:5c:e4:dd:ed:77:07:0c:67:a2:07:a7:f2:78:ae:
84:4c:f8:54:6c:0b:d9:16:9b:09:ce:e4:79:e2:c5:a0:a8:98:
55:8f:a1:ce:74:31:7f:7b:1e:c5:86:77:fe:95:91:e3:47:cd:
84:6a:fa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:53:25 2026 by rpki-client