Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier: zc2RfvrAb3avJzCjwGqe/a+RJzyzGe8z1EtUbrC6i9U=
Subject key identifier: 43:41:C0:53:7E:88:C0:A6:8E:B2:11:CB:E1:BD:63:D6:88:EA:2F:53
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial: 01A0D2A5D6ACEE51C2D82596BB8B200DF044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number: 063B
Signing time: Thu 24 Sep 2026 09:01:18 +0000
Manifest this update: Thu 24 Sep 2026 09:01:18 +0000
Manifest next update: Fri 25 Sep 2026 09:01:18 +0000
Files and hashes: 1: RKz3IJpK3tLGmxT3W9hM3i7PGMs.roa (hash: RoVqVK5DIJNCCPA2hRYkxQFyuiyebRh/F8G7DU407FU=)
2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: 7vrs+U2t+/bUuIjEB9oYIRoievN2wEP4wpPKA9hLKeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:a5:d6:ac:ee:51:c2:d8:25:96:bb:8b:20:0d:f0:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Validity
Not Before: Sep 24 09:01:18 2026 GMT
Not After : Sep 25 09:01:18 2026 GMT
Subject: CN=4341c0537e88c0a68eb211cbe1bd63d688ea2f53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:46:17:3e:c2:1a:bd:d1:76:ce:78:19:b1:0b:
2d:7b:22:17:f9:1a:46:f1:c0:8e:3c:2e:33:13:ac:
a8:74:87:51:82:b1:db:e5:d5:e2:13:f4:49:e2:a0:
75:b9:96:3c:24:87:eb:30:d1:19:29:b9:6a:3e:12:
54:53:a2:e0:8d:31:30:8c:6e:79:21:a4:02:a4:e7:
1a:01:59:2e:0f:5d:0e:03:df:72:1a:56:ed:f4:1a:
e0:0d:a3:d8:2d:0d:c1:b3:20:72:f5:16:89:ac:5a:
c8:18:b5:96:03:86:f6:62:a4:db:ed:ad:34:98:74:
59:dc:6b:32:6f:f5:dd:d0:cc:3c:da:27:d8:8d:3c:
d4:f8:4c:da:7f:47:5e:3a:5e:cf:f4:3e:a4:06:0d:
8d:21:57:dc:4f:94:5b:9f:c5:bc:78:b7:87:32:4b:
d8:cd:0b:83:af:d8:f8:38:80:bb:0e:8a:fa:41:44:
90:86:d2:fb:7a:af:05:7c:de:61:06:71:f5:85:e5:
fd:2c:0f:fa:16:62:e7:fc:08:8b:8a:a6:59:c6:12:
ea:98:b1:16:3d:12:ab:13:e0:c9:ab:ed:9e:bd:a5:
96:c3:48:95:cf:5e:23:a0:e7:c8:3c:3b:6a:43:be:
88:ad:09:a9:c0:4f:16:76:2e:ce:68:a0:c9:2c:d8:
62:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:41:C0:53:7E:88:C0:A6:8E:B2:11:CB:E1:BD:63:D6:88:EA:2F:53
X509v3 Authority Key Identifier:
keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:54:b7:e1:12:ea:96:0a:66:75:f8:eb:da:ff:5a:2b:7b:83:
95:58:8c:e6:1d:9f:92:01:c5:53:b5:14:b0:05:44:38:fb:41:
b2:e2:ad:7e:81:6f:17:4a:bc:84:33:71:5c:1f:68:09:82:81:
36:89:23:7c:b4:58:d9:76:48:53:78:a8:a6:b0:4e:ba:c9:20:
74:23:7b:13:3e:90:86:45:cd:43:a8:2f:74:fe:fb:8d:7b:76:
ff:ff:87:6c:c0:6a:29:6c:b1:33:b3:e9:a4:73:41:2d:1c:e9:
5d:3e:05:e4:ea:ba:c6:36:7d:b7:6c:4e:1a:11:cd:49:4d:90:
c6:e2:bf:19:91:0c:5f:7c:2a:65:56:07:44:a1:d6:d3:db:a3:
fe:3d:e6:66:f0:e2:b3:b5:b5:83:69:ae:ce:ed:22:cb:ad:6c:
17:cd:91:21:06:a2:5c:19:04:91:1c:e2:3e:6b:88:81:ec:21:
97:c8:16:cc:0a:86:5c:48:d8:05:f5:3a:54:fb:31:b6:1e:7d:
f1:2d:b2:e8:b3:1a:ed:b0:83:36:10:f8:14:15:61:3a:fe:61:
30:16:50:72:cc:e7:0c:c3:b7:3b:13:ad:3d:34:1f:de:f7:d1:
54:b7:f7:3a:08:91:dd:f1:7b:db:da:20:5f:9a:fe:be:7c:cb:
f0:6d:97:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:22:43 2026 by rpki-client