Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
File: XhP-KBZzV0iLUE_qxGll0U23upw.mft (raw, json)
Hash identifier: MJRaMVB+P1exW5e5DtQWd7x+SRHj0P6tSRvh8guzlGQ=
Subject key identifier: 44:9B:25:73:E2:C4:F2:B5:07:90:CB:B9:43:56:AE:05:AC:4F:4D:2E
Authority key identifier: 5E:13:FE:28:16:73:57:48:8B:50:4F:EA:C4:69:65:D1:4D:B7:BA:9C
Certificate issuer: /CN=5e13fe28167357488b504feac46965d14db7ba9c
Certificate serial: 01A0C28D60F3289FB0BFB6C66BBAE6A56CE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
Manifest number: DE
Signing time: Mon 21 Sep 2026 06:00:40 +0000
Manifest this update: Mon 21 Sep 2026 06:00:40 +0000
Manifest next update: Tue 22 Sep 2026 06:00:40 +0000
Files and hashes: 1: OsWqV5kxvLO3zxITMBJcQ1-SzWo.roa (hash: JSe4ZxDgFulyfZ8DBgoN9opn6yDV2vfR5CfVXcGr6vA=)
2: XhP-KBZzV0iLUE_qxGll0U23upw.crl (hash: 9tCtxmVkQQhtCsRY39DXWz9+Lr4WebQmhMJdY/wmNgM=)
3: eZbZTXWIEfvwIX9vrH3W1UJ6wb4.roa (hash: UarGyxZlxuTDN6MQKGhHWE7FjSFEv7rUD+yerIHdN7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:60:f3:28:9f:b0:bf:b6:c6:6b:ba:e6:a5:6c:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e13fe28167357488b504feac46965d14db7ba9c
Validity
Not Before: Sep 21 06:00:40 2026 GMT
Not After : Sep 22 06:00:40 2026 GMT
Subject: CN=449b2573e2c4f2b50790cbb94356ae05ac4f4d2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:15:96:65:e3:29:53:d6:4f:8b:bb:9c:ea:89:
2c:31:65:a4:d1:f9:9b:e9:2f:eb:5d:a8:f1:bc:2b:
2b:e2:74:c3:54:ea:bb:62:ae:e5:a4:c3:ee:2d:e7:
75:b6:3b:1f:54:48:8a:5b:28:5c:03:37:f1:0d:09:
b6:bb:82:9f:93:44:4d:97:07:2e:bc:42:10:2e:90:
f2:86:09:17:6f:23:b3:a8:e2:8e:01:fa:6d:98:e5:
88:33:49:eb:8d:fe:56:6a:8d:0a:56:e4:d8:67:c1:
7f:33:e6:20:cf:99:02:ea:b0:de:22:6f:9c:93:7d:
75:e4:b5:45:eb:24:7e:52:0f:ff:ea:52:50:2a:3d:
93:32:93:e1:c2:ba:27:a5:b6:95:e6:44:2b:76:f9:
0d:a9:34:ad:95:02:6d:58:01:af:c8:ed:c9:18:f8:
00:94:36:83:58:fd:56:2a:6a:a3:fd:56:e7:c4:ff:
be:f1:3a:5d:ba:53:5d:f4:d8:21:80:36:63:dc:38:
5a:89:60:7b:c2:21:a4:3e:6c:99:15:09:8b:13:f1:
f2:4d:d0:2a:0a:26:9d:28:0c:92:f0:f2:0b:13:ca:
7c:88:ea:12:aa:69:bd:6e:60:1c:11:75:3f:a4:75:
61:6c:8f:e4:d3:32:71:b9:d0:4d:ce:69:31:66:0f:
dc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:9B:25:73:E2:C4:F2:B5:07:90:CB:B9:43:56:AE:05:AC:4F:4D:2E
X509v3 Authority Key Identifier:
keyid:5E:13:FE:28:16:73:57:48:8B:50:4F:EA:C4:69:65:D1:4D:B7:BA:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XhP-KBZzV0iLUE_qxGll0U23upw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/d2cd06-dc04-4e65-88c1-dcab1e52accb/1/XhP-KBZzV0iLUE_qxGll0U23upw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:da:81:03:6c:94:6c:7f:8c:92:e6:e0:47:94:92:1c:e7:7c:
0d:56:a3:b8:a0:75:c2:27:57:7f:2d:80:45:b6:1b:8c:95:d6:
7e:ae:c0:71:68:f1:ee:b1:71:80:42:1a:4f:fa:57:d1:46:05:
3d:19:79:df:9c:c2:86:95:42:ae:9d:ed:32:06:e8:a4:54:2c:
ea:41:2e:30:d2:11:03:3f:db:7c:31:28:37:ce:16:b4:5f:aa:
cb:df:03:10:fc:3d:9f:6e:f6:10:99:bd:46:7f:74:70:e9:b3:
31:59:06:34:e0:56:99:f6:32:22:b8:7c:d6:b2:8f:85:39:0f:
18:35:36:fd:3d:15:84:5b:43:f1:85:42:29:01:39:a8:5c:7d:
5f:68:9b:a5:90:a2:92:fd:2a:84:a3:09:b1:9e:a4:1a:2d:01:
97:38:21:71:c3:48:c1:7e:37:1d:a7:b3:cb:7e:fb:ec:1d:ac:
91:b7:e2:0f:f2:31:2f:92:7a:6a:7c:5a:fc:56:52:69:c6:12:
2f:a1:ac:68:a2:6c:a1:05:64:fc:35:69:f5:ed:af:8a:bd:7e:
9c:98:32:2e:53:76:2d:5d:9c:2e:19:17:47:66:62:01:47:27:
87:9d:bc:85:61:df:fc:fc:4e:3e:54:b7:f5:9e:4f:65:b5:84:
c6:a0:c5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:39:53 2026 by rpki-client