Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: ZF9f7OUJIyMpBxbVbj9pyOEIa1WpwIXW0BczrYcmsVs=
Subject key identifier: 7A:9F:DE:2A:E8:98:7A:77:A0:BA:70:ED:60:5E:1E:FC:FD:57:9B:0C
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 01A11CACD9D6D66BDCF450C9792AE55FB81D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 1A24
Signing time: Thu 08 Oct 2026 18:00:52 +0000
Manifest this update: Thu 08 Oct 2026 18:00:52 +0000
Manifest next update: Fri 09 Oct 2026 18:00:52 +0000
Files and hashes: 1: 1-JQqdOgGI5A2jgfNA9GBznLZL4o.roa (hash: 8aD9D5dY520w/e92POgprpQwJQRjt7y1yNeMs6zlp6Y=)
2: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: Okk0iLHDp/u4r1LUIJRLOBKVHsBWAKV0m3LJl8FNrg0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:ac:d9:d6:d6:6b:dc:f4:50:c9:79:2a:e5:5f:b8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Oct 8 18:00:52 2026 GMT
Not After : Oct 9 18:00:52 2026 GMT
Subject: CN=7a9fde2ae8987a77a0ba70ed605e1efcfd579b0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9a:78:3b:12:c1:9f:ab:78:1e:79:fa:8c:ec:
3c:c5:a4:fa:07:ca:50:33:a1:45:d3:a6:3f:2f:77:
48:ca:8e:3a:64:83:5d:09:87:07:86:13:73:1c:46:
34:e0:e4:47:25:de:8f:cd:4e:3b:5f:13:ea:1a:00:
40:5c:0d:0a:90:6b:fa:83:fc:98:fe:07:9d:30:1f:
0b:4b:e5:f3:c9:66:db:ba:94:ea:c8:bc:d2:28:57:
eb:76:f3:36:21:46:24:85:1a:2d:48:43:9a:0a:d9:
65:ef:d8:e0:0f:20:f4:b0:29:79:8e:3a:78:50:6f:
9f:5d:f6:bc:70:4c:09:22:55:fe:17:4f:ef:b1:b4:
0a:7a:5e:b0:77:d6:af:5c:c3:3d:3d:b9:e5:ef:c9:
1e:c9:9c:6e:2e:33:d9:c9:a8:fc:b3:bf:de:9c:fa:
bb:89:f0:7c:df:e7:eb:6d:f5:c0:60:2f:6a:f2:f5:
63:0c:5e:27:21:43:bb:ca:ff:22:52:68:ba:b1:81:
07:d1:66:3b:e2:79:de:c1:ae:7e:13:a1:bc:bd:33:
56:c4:e8:a7:e1:00:b1:7b:ab:1c:4b:cb:a9:c3:e4:
c7:fa:06:00:8a:03:a1:5e:22:bd:04:72:f8:47:cf:
b9:bc:e9:ca:c4:ed:42:b4:06:97:45:c8:fe:a6:d6:
f1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:9F:DE:2A:E8:98:7A:77:A0:BA:70:ED:60:5E:1E:FC:FD:57:9B:0C
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:fb:4a:68:0b:3e:06:80:0c:0c:b9:19:0a:a4:48:b7:35:fc:
de:ca:b8:74:b9:30:08:da:ec:b1:e9:12:24:e8:72:33:f0:77:
f5:f4:50:e3:81:1d:23:7b:7b:6a:91:6b:7f:f9:94:09:79:47:
38:89:03:aa:57:b2:be:01:f6:da:c5:34:81:81:ce:51:7b:9c:
96:ff:ce:97:2a:80:ee:25:ae:ac:01:c8:7a:6d:36:b5:a3:43:
c0:71:12:39:9f:f8:86:48:1d:b7:22:dd:9d:5b:11:04:39:f9:
a3:91:b2:94:bf:01:61:fb:d9:92:29:81:74:6b:05:28:dc:c4:
96:d4:4f:83:08:64:6b:63:db:d2:1c:8f:1a:34:d1:d7:e6:f1:
3b:3e:37:9d:9c:f1:aa:5a:03:53:0b:f5:1b:5e:69:3d:5e:76:
ff:17:72:f1:0f:8e:47:18:03:e8:b4:45:f2:86:08:24:06:49:
bb:43:da:23:a0:0a:2a:ab:87:20:ed:9e:05:7a:05:86:fb:0e:
14:79:f2:39:7b:80:42:4c:0d:fd:30:f2:f4:4e:e4:b3:86:5e:
c0:ae:17:02:e5:be:df:aa:5f:44:45:44:28:c8:35:08:74:fc:
a3:23:28:73:3b:fb:04:ac:9c:66:73:94:7e:42:e5:77:d5:67:
a8:c7:2c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 02:04:41 2026 by rpki-client