Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: sis8ATqt4hn8zeci5MkTYZvkB1VI3lt+l/JH8Zj3Zok=
Subject key identifier: 49:08:EA:83:E4:0D:32:02:61:D2:C1:78:F9:75:04:AC:C6:2D:1B:FA
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 01A0C8592930EC9264636B28E02A5D0C6DA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0D32
Signing time: Tue 22 Sep 2026 09:01:21 +0000
Manifest this update: Tue 22 Sep 2026 09:01:21 +0000
Manifest next update: Wed 23 Sep 2026 09:01:21 +0000
Files and hashes: 1: MXmi4elQgkZloOXKc5KxZJXFILw.roa (hash: 4eGKiA6fp/86boDwfJeXXyGqjfCWRwxGmH0ShZjDAuQ=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: Kqie5O58mRtZF9ZQ/Rb+EA67InkfUD1WI/1i11rAXUc=)
3: taZbUsGibT55ZZu6Th_Go_ILjiU.roa (hash: d/WlzB5v4feaToE5n6krRnONbSIkTydQjlb9UBErHJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:59:29:30:ec:92:64:63:6b:28:e0:2a:5d:0c:6d:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Sep 22 09:01:21 2026 GMT
Not After : Sep 23 09:01:21 2026 GMT
Subject: CN=4908ea83e40d320261d2c178f97504acc62d1bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:48:df:57:83:3e:17:71:dd:2c:03:d8:bf:d7:
51:51:c0:a3:86:73:4b:84:9a:25:a9:60:44:a0:6c:
df:f6:d2:73:22:fa:cd:68:ac:6a:db:9d:61:fd:a2:
eb:53:ee:36:5f:ff:89:ed:64:44:65:32:6d:22:c0:
82:78:45:a0:f4:4a:00:02:03:02:bc:9e:20:b9:cb:
c5:2a:b4:0d:bd:4b:31:33:de:52:1f:b0:23:58:ee:
84:1e:ed:d6:af:5f:82:b5:c5:80:60:bb:e3:a1:8a:
5d:53:a1:28:0d:f0:17:3c:30:dd:4a:f0:11:87:06:
86:46:3c:3f:29:ef:4d:c1:f0:dc:22:65:36:28:7a:
7a:c5:dc:49:2d:4f:62:83:23:76:a9:6e:3c:8f:ca:
22:c9:33:6a:6e:c3:b8:bd:74:38:b8:d1:08:6d:49:
a9:cb:72:e2:21:95:7a:51:7e:68:e7:ae:d0:a6:14:
42:83:66:7b:16:06:cb:25:52:d1:33:18:a4:5c:e9:
fa:d4:6c:e3:94:c0:88:27:22:b1:7e:98:7a:c7:04:
f4:16:33:13:e4:61:5f:3e:b7:74:4c:76:50:0c:76:
1b:bb:9b:5a:0c:0e:29:ac:ff:fc:c4:59:b2:16:e2:
cf:77:63:96:77:d6:4f:d7:a3:f4:58:8e:49:c2:14:
ed:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:08:EA:83:E4:0D:32:02:61:D2:C1:78:F9:75:04:AC:C6:2D:1B:FA
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:2b:55:a0:b0:e5:f7:94:18:10:38:76:75:ca:87:fb:71:5e:
de:6d:2b:7f:ef:72:7f:4f:47:1c:da:7c:62:36:f8:6e:51:53:
7d:24:f7:c5:0a:6e:3a:b2:7a:39:a5:78:ee:b5:d9:39:a5:44:
63:64:3c:dc:65:6d:b5:c7:ea:70:c5:d6:94:01:f1:68:ea:11:
56:76:36:0e:67:5e:3c:4d:b6:7c:c2:7f:d1:fe:f4:6d:e6:35:
7f:ce:db:ac:05:43:ac:75:1c:70:e3:b7:65:0f:32:a0:0a:3f:
e5:18:bb:08:4b:5c:e7:89:ee:54:18:3d:8c:81:70:0c:94:c0:
9a:57:48:af:26:45:9d:43:02:8f:a0:46:81:db:2f:22:9a:f6:
11:12:12:8e:b2:3e:12:91:e0:46:4e:0f:5b:44:15:70:b1:af:
67:cb:55:44:91:57:c2:ab:a4:db:c4:5b:74:18:ca:41:33:89:
a8:ad:67:af:77:8e:b5:ca:43:2b:57:77:c1:98:bb:f1:8e:93:
66:06:a5:29:2e:33:61:1f:f7:dc:dc:aa:cd:62:c9:06:3d:00:
59:71:e0:af:cb:b6:ef:a5:01:16:3a:4c:dd:89:3b:4b:f8:2d:
1f:4d:5b:ef:02:12:2d:09:0b:8e:80:2a:a8:3a:8d:a3:3d:22:
48:a8:0c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:56:38 2026 by rpki-client