Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
File: XlFUwaEL4eJaptT4rvpGrTH5uW4.mft (raw, json)
Hash identifier: WG1GttWz+bUEL8FWALswkGYKcqzIQAtpqZpCW6UGvzM=
Subject key identifier: 50:90:58:3B:A1:D5:9D:A1:FD:72:AD:B2:49:0A:DC:71:97:AD:CE:93
Authority key identifier: 5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
Certificate issuer: /CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Certificate serial: 01A0C40D9BD67CD08DD1DD22B09FC18C8448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
Manifest number: 0236
Signing time: Mon 21 Sep 2026 13:00:21 +0000
Manifest this update: Mon 21 Sep 2026 13:00:21 +0000
Manifest next update: Tue 22 Sep 2026 13:00:21 +0000
Files and hashes: 1: XlFUwaEL4eJaptT4rvpGrTH5uW4.crl (hash: BmOWzujxgf6NMlgXY7FKbJuo5TbgCi6yAKOr3UPkWcY=)
2: y9CLGthskm4bnZl6iRpadOOvcw0.asa (hash: 4oKFMMI1txxJcbOTwatF9YPUQxB0wLl2gg3DiiRkr5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0d:9b:d6:7c:d0:8d:d1:dd:22:b0:9f:c1:8c:84:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Validity
Not Before: Sep 21 13:00:21 2026 GMT
Not After : Sep 22 13:00:21 2026 GMT
Subject: CN=5090583ba1d59da1fd72adb2490adc7197adce93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:1a:b4:03:3a:57:91:1d:4c:17:26:54:a5:33:
8c:75:db:4c:ae:14:1e:90:54:b5:32:7d:89:35:6d:
a7:ac:2a:41:c8:67:cd:06:07:dd:67:aa:ed:fa:76:
10:2a:e2:cb:d1:a6:7b:4b:0c:41:72:8c:80:47:d3:
b9:37:76:e5:ea:73:96:ed:2d:57:f7:08:43:80:c3:
38:60:f9:be:4d:85:fd:9a:33:84:16:22:75:0b:9c:
a8:11:e6:6d:26:bf:5e:d1:fc:93:e7:12:a8:3a:39:
3e:db:e0:a1:36:93:b7:88:0e:79:3d:7d:b9:02:60:
8b:77:d0:21:43:1b:c0:24:68:8f:01:f8:58:94:6e:
21:54:cb:b5:c6:7a:d4:25:3a:5f:4a:5d:d2:1f:b3:
3a:97:85:a4:66:5c:d6:3c:b0:db:c9:82:a9:93:64:
00:a2:b5:d6:7a:c6:a4:04:e5:cc:d6:67:66:33:6b:
a6:d5:24:0e:01:2a:e1:89:00:06:23:36:1a:ef:94:
c9:ab:91:f2:27:2c:13:5b:96:45:ca:5e:02:51:e4:
4a:e6:6d:6b:59:85:b5:4f:83:68:af:39:69:0c:32:
81:11:89:4b:13:6c:5d:15:cb:63:04:e0:92:fb:b9:
7e:1c:bc:d8:ef:48:6f:fd:cc:91:61:bd:0d:3a:49:
7c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:90:58:3B:A1:D5:9D:A1:FD:72:AD:B2:49:0A:DC:71:97:AD:CE:93
X509v3 Authority Key Identifier:
keyid:5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:c3:b2:97:ab:a5:a6:cf:ed:f8:a4:0f:8b:f4:09:bf:e9:5d:
6f:58:fe:bd:9d:a0:b5:20:ac:49:18:aa:f3:1a:fb:d2:41:61:
3e:a3:7e:0a:2b:7c:81:64:db:cc:19:51:8d:e0:93:5f:89:fd:
3d:d2:99:77:f5:0d:dc:db:ac:43:31:47:7b:04:d0:9c:8b:83:
76:8d:c0:32:f9:c0:3b:48:f4:73:c1:54:e9:4e:37:f5:cf:42:
76:ea:b0:76:24:69:59:5d:19:4e:ad:6a:c3:d2:c2:c7:da:7d:
e9:4f:cf:1f:88:08:2d:ff:26:cb:1e:9e:d0:b1:79:3e:d7:77:
68:08:f2:03:0a:48:06:9f:57:8c:01:70:54:5e:c5:c4:b9:1a:
b5:72:58:de:92:e5:44:11:b2:2e:02:26:f1:ea:e0:45:1d:27:
42:7c:13:b2:84:38:fc:02:85:d7:20:d8:aa:32:d9:59:15:32:
50:d1:8f:e1:15:cb:cb:b2:67:41:79:39:e6:f5:0f:1b:a3:da:
e9:08:d1:6b:f6:40:1a:84:6e:33:92:19:a2:d9:cd:70:c1:0f:
b4:79:80:88:5b:2d:de:5c:d3:71:33:f3:04:f9:4c:59:2f:81:
47:b7:97:65:6c:d7:cd:18:ba:2f:e2:d7:a9:f7:c1:ac:91:19:
65:c6:e2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:52:20 2026 by rpki-client