Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
File: Xquekv3YH0FBR5edBTHibe3SYqw.mft (raw, json)
Hash identifier: WZW5ewBZQrRFHfmqvTymqg+4q7wwNFOVCHu5wa8MmUg=
Subject key identifier: 5F:4A:D6:B8:19:BF:D5:AF:DB:23:D2:D9:05:AB:FC:D4:16:7F:19:D4
Authority key identifier: 5E:AB:9E:92:FD:D8:1F:41:41:47:97:9D:05:31:E2:6D:ED:D2:62:AC
Certificate issuer: /CN=5eab9e92fdd81f414147979d0531e26dedd262ac
Certificate serial: 01A0C7EA3F370CE6FC103580FFDD510B11AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 07:00:12 +0000
Manifest this update: Tue 22 Sep 2026 07:00:12 +0000
Manifest next update: Wed 23 Sep 2026 07:00:12 +0000
Files and hashes: 1: Xquekv3YH0FBR5edBTHibe3SYqw.crl (hash: g1/OY0BBmZyvPoJRRxJzbkzy+YVDA4BYn2ZODFyEc6c=)
2: wZfLh5WSFAXKinsiyS1145pWxAk.roa (hash: t/km2qU0O3WotdafAm5WAIJsGqYsS42YCnAubnFGkjY=)
3: yWSxVMHaA7K49CJJasfPgxf0K9U.roa (hash: Bq8kCXwpBRnHBgJBCumGdqGaVlW+LIt6xmOmyuq+Mck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:3f:37:0c:e6:fc:10:35:80:ff:dd:51:0b:11:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eab9e92fdd81f414147979d0531e26dedd262ac
Validity
Not Before: Sep 22 07:00:12 2026 GMT
Not After : Sep 23 07:00:12 2026 GMT
Subject: CN=5f4ad6b819bfd5afdb23d2d905abfcd4167f19d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ff:d4:99:21:97:a1:0c:a1:f4:6f:9b:51:bb:
7c:c3:06:a1:43:25:0f:c4:e1:d0:0b:cc:c6:14:ca:
5b:94:f1:0c:35:2d:62:cb:43:3e:3a:d9:0f:a4:7e:
f5:75:e3:8f:c0:e6:43:c9:75:37:35:a3:1f:fa:25:
13:40:cd:2e:d7:09:7c:35:99:ae:0c:85:70:dc:59:
c4:96:02:a9:cc:c4:43:f1:2b:fd:9a:21:39:be:f8:
8d:82:f7:f0:30:fe:70:61:3e:5e:24:7b:1c:3d:fb:
53:38:e1:8a:e6:03:39:e7:fb:67:46:9f:d1:18:bc:
dd:40:46:13:60:3c:3e:8c:fa:43:91:c5:03:e4:9f:
53:ea:de:2a:2d:dd:62:b0:00:4c:11:93:1d:26:ec:
26:72:f8:33:1d:e9:2d:0f:51:a0:64:ce:b4:0b:f5:
ef:47:86:e7:56:67:3f:36:60:fe:e5:6b:bf:50:5e:
8b:0d:f2:d3:7a:eb:6f:19:1f:e0:36:0d:51:ce:dd:
1f:40:28:1a:ee:17:47:a6:ce:cd:c1:8c:84:0b:29:
6b:9c:04:0d:9a:c2:f6:45:24:5d:dc:b1:39:d7:48:
53:d6:a1:2c:b9:33:f8:2b:6a:95:95:8b:6c:55:ed:
3e:af:a7:67:e3:aa:a9:ac:bf:6f:3d:19:af:56:92:
4e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4A:D6:B8:19:BF:D5:AF:DB:23:D2:D9:05:AB:FC:D4:16:7F:19:D4
X509v3 Authority Key Identifier:
keyid:5E:AB:9E:92:FD:D8:1F:41:41:47:97:9D:05:31:E2:6D:ED:D2:62:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:58:84:e1:7e:33:66:4e:90:38:28:97:e6:6f:05:63:11:b7:
ec:cf:7e:c7:d6:e4:cb:f1:03:29:0c:87:01:55:43:16:dc:66:
fb:6c:35:01:71:a0:2a:da:24:90:89:7f:d1:0a:06:df:7a:39:
97:c7:1d:0f:c5:e2:85:fe:c0:10:9c:87:67:a7:95:c2:44:47:
82:a9:8c:ef:19:7e:55:ca:f5:d6:a6:29:fc:92:5e:f8:16:e8:
5d:6a:c9:4b:55:36:ac:7e:36:ba:e8:28:41:93:b9:e8:3e:30:
1f:f8:14:ad:8b:28:90:cd:09:72:39:32:f3:b2:2c:90:9f:9a:
d5:e5:63:4d:e3:87:79:b0:ab:1f:37:cb:00:b4:1b:03:6a:da:
87:ef:b8:5f:85:74:e2:e2:95:7c:73:68:11:17:36:13:01:a2:
97:ee:75:f7:93:18:48:d8:f6:bd:e3:cc:c8:75:83:be:2b:b7:
c5:c5:6a:b8:e4:3c:1c:8b:8d:ca:b4:a5:9a:07:1c:a6:08:6b:
bf:ab:d2:6a:ca:56:f8:91:cd:d5:19:45:e4:61:51:1e:75:e2:
e2:ff:df:e5:0f:d5:6e:c5:9e:e1:19:a5:1b:a0:35:1b:34:42:
bb:42:e2:c6:92:bd:e3:8b:45:8a:d5:34:17:af:fe:f9:80:90:
51:7e:78:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 14:12:49 2026 by rpki-client