Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: Pa5icxvIXCTwvxTO4wkYPBKr1mBjwutbHU/2l/zW7lQ=
Subject key identifier: 04:13:67:A0:7E:7E:24:B8:61:A6:76:D2:BA:6A:DE:2F:02:3D:B9:08
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 01A0D5A7009702605DA90C66327AB78604CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 1A79
Signing time: Thu 24 Sep 2026 23:01:26 +0000
Manifest this update: Thu 24 Sep 2026 23:01:26 +0000
Manifest next update: Fri 25 Sep 2026 23:01:26 +0000
Files and hashes: 1: L40pPH6TicBG2s3pYm_kCH0QuH8.roa (hash: T9wzscjITMGr1trkfg1j7FXPyni8Fc+OiviUYZ5c/0E=)
2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: jle0vit6HthWJpTED6EOj6ACE0WzgmpmL9Jbn7oN4dM=)
3: dNdisfulIUnUQz_6DtHf4gSxOPM.roa (hash: O/ns0/vObEAUXbqvm9Js2Oj4M7X/gux1gfco1hQ75Rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:00:97:02:60:5d:a9:0c:66:32:7a:b7:86:04:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: Sep 24 23:01:26 2026 GMT
Not After : Sep 25 23:01:26 2026 GMT
Subject: CN=041367a07e7e24b861a676d2ba6ade2f023db908
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:1f:c8:d1:f7:03:23:c6:c1:04:d7:0e:64:
6c:54:f2:f7:bc:71:4a:85:76:83:b8:83:43:13:7c:
33:e8:71:58:c5:98:46:cc:d4:7b:be:dc:ef:46:7e:
74:75:32:73:11:6c:6a:0a:90:63:80:5a:cd:83:e4:
75:f0:da:73:e4:44:75:80:c3:65:ac:4c:e3:cd:d5:
22:66:0c:16:cd:54:eb:9a:a0:7a:97:60:90:93:25:
02:54:c7:84:be:7f:be:fd:1b:44:53:94:55:96:86:
58:d7:ba:17:ef:ee:bf:6b:2b:37:e2:8e:74:2e:1e:
d2:15:39:0b:cb:cf:44:ec:75:34:fd:5b:5a:f5:df:
27:ea:a4:fb:1d:67:01:07:08:0a:b6:fa:39:e0:d8:
8b:f1:0d:a6:d7:10:27:8b:63:94:ec:0d:81:8c:88:
74:a5:c3:13:c5:30:a1:ff:59:72:a5:42:26:6a:71:
57:39:7f:45:17:ae:09:72:8d:22:6f:a0:82:a0:3a:
af:cb:b2:55:68:ae:ab:69:f1:43:05:1f:23:b4:fa:
4e:44:12:e8:7c:e9:11:30:6c:79:50:2e:50:17:a4:
d4:fa:4c:c0:0e:3a:e9:34:25:24:6f:20:77:1a:ad:
cb:e4:74:16:6e:2d:d6:a0:4a:5a:e9:51:71:35:d7:
b4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:13:67:A0:7E:7E:24:B8:61:A6:76:D2:BA:6A:DE:2F:02:3D:B9:08
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:62:3f:49:96:a3:dc:74:56:fd:51:e3:b5:64:83:cb:69:47:
ad:b9:1e:d5:78:7b:37:9e:73:5e:f1:d3:dc:85:90:53:a6:10:
be:cc:33:c4:46:0a:ce:71:d4:c4:49:0e:04:ea:77:f3:4a:eb:
27:71:ed:57:de:ef:17:02:76:54:ac:86:a4:b3:8e:23:6f:68:
e6:30:05:99:39:29:2b:e9:18:ed:59:89:ac:83:5a:58:b4:82:
4b:37:d1:84:f1:1d:e6:e5:bf:cc:e8:91:73:a9:ee:35:db:b0:
50:54:c2:57:51:51:a6:00:89:1f:27:16:0c:58:50:eb:de:27:
6e:3f:63:87:62:2f:89:4c:5c:cc:df:f9:e8:84:ec:a5:41:a8:
be:3e:a3:47:be:e0:e0:99:5b:b4:43:89:07:12:c1:60:fb:5d:
0c:b7:63:b0:b5:18:b6:e4:24:d0:3c:b6:3d:74:53:5e:4d:30:
42:95:83:dd:6a:85:6b:dc:c0:9a:2d:d6:a9:7c:ea:87:43:1b:
d4:c8:79:57:a2:3b:01:df:ba:89:ab:c6:00:db:da:4b:e7:ca:
94:5d:44:59:b7:95:58:c4:06:ad:73:3c:42:32:3f:a0:8f:44:
3c:35:aa:36:e0:fc:2a:0b:31:1d:fe:17:dc:19:56:a5:0e:3f:
fc:d5:d8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:21:45 2026 by rpki-client