Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
File: XSP6gsR1KG22BxT2A2Gg8crCPSM.mft (raw, json)
Hash identifier: 9sqGOliWl75IXm9/rdgUF0tbQ4G0FtEBhdmxNGTIRxc=
Subject key identifier: 3C:A0:43:3C:4F:C5:35:61:44:E9:8C:81:FE:CD:34:09:24:98:2D:DA
Authority key identifier: 5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
Certificate issuer: /CN=5d23fa82c475286db60714f60361a0f1cac23d23
Certificate serial: 01A0C47C68FD1B3BB96C4FCE1D0FEE8D8016
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
Manifest number: 0214
Signing time: Mon 21 Sep 2026 15:01:22 +0000
Manifest this update: Mon 21 Sep 2026 15:01:22 +0000
Manifest next update: Tue 22 Sep 2026 15:01:22 +0000
Files and hashes: 1: 3Owi7w8XHfa2ETQQJKxPe5_2S3M.roa (hash: WxZPvj4Y/uFWaukPSMrNh1kQZIcODKf/xbXFTKHA6tE=)
2: XSP6gsR1KG22BxT2A2Gg8crCPSM.crl (hash: WSKUZyXjRcR+BvZVJNy98oqQDq6Lvk2VvLZrlb80JK8=)
3: kHjyu0leWmEWJz4dGZNRuqPpKu0.roa (hash: xSmyUIXwxdKC/wUH6aKgbqf7oSMgpHlsL1OZu9Jw99Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7c:68:fd:1b:3b:b9:6c:4f:ce:1d:0f:ee:8d:80:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d23fa82c475286db60714f60361a0f1cac23d23
Validity
Not Before: Sep 21 15:01:22 2026 GMT
Not After : Sep 22 15:01:22 2026 GMT
Subject: CN=3ca0433c4fc5356144e98c81fecd340924982dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ac:09:76:b5:91:a9:6b:6d:ff:d0:1a:02:b2:
cb:86:c9:e7:7e:83:31:9d:1d:65:19:f4:c5:b1:97:
16:ae:ec:46:73:e5:6b:06:9d:d6:e1:69:98:f9:68:
ab:9d:b6:b2:5b:06:c0:47:df:fd:d5:96:48:a0:82:
ee:4e:a8:94:3d:4e:7c:3a:59:6d:96:d6:92:0e:41:
f8:e9:df:3d:af:f1:fe:d4:05:64:3a:09:4f:e4:45:
6a:8c:3d:98:b8:b2:dc:c2:a9:3b:5d:a2:8b:11:9c:
09:89:4a:42:3d:84:8c:fb:22:6e:f0:df:a3:dd:cb:
98:4c:38:e2:b6:5c:e6:2f:84:4b:ec:6d:e4:e2:e7:
c9:3f:11:5f:af:ea:b1:38:23:1a:c0:e3:14:93:22:
fc:77:85:1b:0a:fc:38:d8:01:74:40:00:27:a9:d4:
f9:4b:49:17:47:fa:c7:7c:21:57:2a:16:22:67:cf:
71:3f:da:6d:79:0a:f1:27:1b:2f:78:98:9b:df:cd:
83:66:88:30:3d:ff:ed:3d:a4:aa:21:72:bd:65:1b:
73:0a:79:e0:10:9e:88:0f:f9:6c:dc:fd:ba:e0:c7:
65:4f:79:60:98:17:86:b8:df:cf:e5:c0:39:6a:53:
09:e8:87:8e:11:d9:f1:4b:d5:3c:a0:75:e2:72:41:
bf:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:A0:43:3C:4F:C5:35:61:44:E9:8C:81:FE:CD:34:09:24:98:2D:DA
X509v3 Authority Key Identifier:
keyid:5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ae:fa:e4:3c:c9:5d:38:98:fe:21:96:8c:68:be:84:c9:73:
de:ed:ea:1a:67:48:6a:cf:ae:da:08:d4:8b:55:6a:a0:f9:8d:
9d:b1:9a:3e:31:25:35:f4:a2:af:d4:56:96:ee:00:53:94:7f:
ba:51:50:f0:9f:98:83:16:d3:b0:69:18:de:5b:79:fe:2a:52:
2d:bc:f4:a2:58:57:c7:b4:09:14:73:c6:57:e4:22:5a:fc:e1:
fe:2b:e9:bf:65:ad:12:62:f1:d3:05:36:0c:02:d0:2d:5d:fa:
41:ee:73:37:b8:08:52:12:f1:60:7b:b0:15:9d:8c:9f:df:9c:
da:fe:99:d1:fd:8b:b6:e2:3f:4d:a7:3f:96:41:7d:94:e9:70:
a2:35:2e:69:7b:20:ca:28:e7:81:3d:b3:51:44:a9:c0:d6:58:
67:74:eb:ed:c2:2e:3b:50:dc:14:da:f6:26:e2:c7:80:44:56:
f5:1a:c4:f1:14:a9:cf:41:d8:99:49:b6:1e:50:92:84:3f:fd:
e0:90:73:29:60:e7:8f:69:a0:c2:79:d2:df:d4:3e:65:77:40:
3a:23:f9:3a:c8:e2:8c:fc:d8:0d:76:0f:9c:1c:59:79:06:cc:
c8:99:7c:68:16:4b:e6:e9:79:1e:90:35:ff:e2:bb:ff:97:c3:
0e:5a:45:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:21:27 2026 by rpki-client