Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
File: xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft (raw, json)
Hash identifier: 9H5wNMB3w3HVtmkZfgPIqmcpZfR9Fx19NYyysBFw8ys=
Subject key identifier: 98:96:94:CB:DC:60:B2:06:EC:A1:D1:E1:ED:1D:B0:6D:25:3C:8B:AE
Authority key identifier: C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
Certificate issuer: /CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Certificate serial: 01A0D07FA92ABE9DBE79384ECAA5FE4036D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
Manifest number: 0B64
Signing time: Wed 23 Sep 2026 23:00:22 +0000
Manifest this update: Wed 23 Sep 2026 23:00:22 +0000
Manifest next update: Thu 24 Sep 2026 23:00:22 +0000
Files and hashes: 1: DXdb0QbgjHMGHimqfVTZInAkH0I.roa (hash: zClF7sUyyb6keJxNkbEQRGoa69WKNSmQnfjqa4nnCv8=)
2: rDKGPxVegdVjKSh5RnICAFOVm5s.roa (hash: Xcgmgg/GuSeVcsd6rM/OBeKREsZ93Yvuqbvwr0v7xYc=)
3: xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl (hash: OfcJX55SlmSnWcEm6kVDDKCf9Zs0yLuNhJy5kMcERvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:a9:2a:be:9d:be:79:38:4e:ca:a5:fe:40:36:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4cc02f8fa74cf0da81e8ce2943ea7f9ed2a85f4
Validity
Not Before: Sep 23 23:00:22 2026 GMT
Not After : Sep 24 23:00:22 2026 GMT
Subject: CN=989694cbdc60b206eca1d1e1ed1db06d253c8bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:d6:4e:68:9a:d6:1a:e2:f3:30:20:fc:4e:
3d:64:e0:19:d3:e5:f4:38:e2:81:f2:28:d5:f2:ae:
0d:a6:55:c5:5f:4f:d5:16:ba:57:8b:a5:cb:0c:be:
59:b2:96:31:3c:66:2d:ae:5e:3f:7a:06:f9:19:5e:
27:07:9d:9f:bc:e2:ef:8b:a7:d7:37:4c:4b:b8:05:
35:e5:e3:b9:01:9c:b7:7d:a6:1f:39:92:ee:18:09:
fc:6f:a7:10:cd:6f:4a:ad:67:e0:9d:78:ba:72:1f:
8e:ea:0f:fd:7c:1b:ce:ce:5a:1c:f1:30:9b:ec:c6:
9a:1f:3f:ab:38:23:a8:a8:ae:1d:b1:bb:d1:02:03:
27:02:34:52:ee:ce:96:bb:eb:56:f4:d2:4e:1a:d6:
52:7d:e3:e5:be:c6:99:f3:43:a4:8b:2b:e6:77:14:
ac:aa:d8:5b:8e:b7:88:81:75:ed:77:f6:70:42:85:
dc:57:9b:99:e3:7b:f5:9e:bb:d3:fd:8e:1a:6c:f9:
b0:2a:d0:e0:eb:79:c2:27:6c:8e:5f:c6:1a:12:69:
e9:f8:15:a3:22:47:63:87:36:5e:02:d9:73:fb:4d:
41:48:58:ba:ee:95:e8:1e:24:d1:20:2f:9f:60:0a:
31:65:81:99:5e:2e:6c:69:36:6b:f2:df:f8:31:19:
0c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:96:94:CB:DC:60:B2:06:EC:A1:D1:E1:ED:1D:B0:6D:25:3C:8B:AE
X509v3 Authority Key Identifier:
keyid:C4:CC:02:F8:FA:74:CF:0D:A8:1E:8C:E2:94:3E:A7:F9:ED:2A:85:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xMwC-Pp0zw2oHozilD6n-e0qhfQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e348f1-bb70-4b34-be12-219e79d84e43/1/xMwC-Pp0zw2oHozilD6n-e0qhfQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:48:87:de:a9:d5:fd:77:ff:5f:22:c1:c1:b8:e0:b1:c7:b6:
a3:69:ff:24:70:06:b6:e1:ba:85:cb:7e:ee:16:ae:93:cd:a4:
70:9c:6a:4e:5b:53:fc:4b:7c:7e:4a:28:16:20:00:01:4b:6c:
0c:bf:4a:ea:1f:53:89:75:0c:e5:84:6b:5b:2f:b5:f7:01:49:
bb:6d:d0:ca:68:9f:2e:44:28:c1:0c:25:fe:c6:1d:a6:f1:af:
19:ea:6d:eb:2e:80:9c:6c:0e:8c:d3:b1:c9:a5:22:21:3a:0b:
b7:3f:bf:af:4d:c2:92:25:b2:4b:b2:2d:c0:ec:cb:bb:3f:2c:
4c:7d:21:1a:af:48:53:02:54:3c:4c:7c:01:12:8b:25:41:cf:
92:7b:c7:03:9d:01:9d:ce:60:d4:98:08:cb:2f:62:79:f9:3b:
38:e7:d8:fa:b3:60:0e:ad:13:01:39:2d:64:6d:8c:e7:18:5d:
03:f9:ae:65:df:eb:43:ea:50:e0:5b:b5:ca:b2:af:1b:34:ea:
df:01:2b:c2:72:d6:29:c6:bf:ce:ca:d0:36:1e:2d:d0:51:a5:
a2:0a:05:5d:cf:65:e6:d5:7d:2b:7d:41:cd:63:18:e9:3e:7a:
a5:6d:0b:ea:a8:04:3e:e9:4d:7b:8a:cd:0c:3a:d8:d9:6d:c7:
26:ae:e2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:01:36 2026 by rpki-client