Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/X5uimb09E7x3mu-sPnMEfx8MOmo.mft
File: X5uimb09E7x3mu-sPnMEfx8MOmo.mft (raw, json)
Hash identifier: ydojHGAORtHpcRceIHomMelQAD+EubeNIqrnZkCGexA=
Subject key identifier: 0A:4A:EA:25:B6:A7:AC:A0:9B:1E:C6:94:5C:D3:C1:E8:17:19:60:F4
Authority key identifier: 5F:9B:A2:99:BD:3D:13:BC:77:9A:EF:AC:3E:73:04:7F:1F:0C:3A:6A
Certificate issuer: /CN=5f9ba299bd3d13bc779aefac3e73047f1f0c3a6a
Certificate serial: 01A0C10D4FFD82F10EEC4245011BDA22DDD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X5uimb09E7x3mu-sPnMEfx8MOmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/X5uimb09E7x3mu-sPnMEfx8MOmo.mft
Manifest number: 94
Signing time: Sun 20 Sep 2026 23:01:10 +0000
Manifest this update: Sun 20 Sep 2026 23:01:10 +0000
Manifest next update: Mon 21 Sep 2026 23:01:10 +0000
Files and hashes: 1: X5uimb09E7x3mu-sPnMEfx8MOmo.crl (hash: x7zwE7Te0Lvd6KYGmRBQ+kezseiUEujDtahYWPYdTcU=)
2: lDaCt5tAcVZ0NMtTwwYMOYiDTbk.asa (hash: VFkjui+AinLbKiSZ5GvaCWkxNTUM+2WMMthvcw4QXWw=)
3: zbSmOdUlXWqGGMqhANIis6d_wOE.roa (hash: w5vtLzzuZtJBW2cAGToEQeLfanqgHPMRHOTiGp/gUYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/X5uimb09E7x3mu-sPnMEfx8MOmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/X5uimb09E7x3mu-sPnMEfx8MOmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/X5uimb09E7x3mu-sPnMEfx8MOmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:0d:4f:fd:82:f1:0e:ec:42:45:01:1b:da:22:dd:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f9ba299bd3d13bc779aefac3e73047f1f0c3a6a
Validity
Not Before: Sep 20 23:01:10 2026 GMT
Not After : Sep 21 23:01:10 2026 GMT
Subject: CN=0a4aea25b6a7aca09b1ec6945cd3c1e8171960f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:2a:31:29:05:de:7c:d8:e5:7c:90:62:48:
85:53:67:9d:e5:9d:14:09:2e:f2:35:06:bd:bf:08:
b6:64:31:3b:87:7f:f3:cb:db:7b:38:48:d7:a4:d7:
c1:56:04:6d:cb:cf:ef:8e:e1:5c:8a:31:7b:6e:a9:
3b:52:2e:44:f6:5e:e0:2b:a1:fc:ca:15:bd:69:1b:
94:a4:d7:06:ed:08:65:cb:45:69:f6:f9:80:a0:81:
b5:99:f0:59:8d:ca:1e:64:e8:06:b0:3c:53:0a:1e:
48:8c:60:86:cb:04:15:bd:f7:6c:87:ce:ca:b0:0c:
df:cd:d2:4f:72:e2:6f:ac:61:eb:c0:74:96:0a:db:
5b:19:34:08:83:45:0b:0e:09:73:9a:1f:d1:ea:aa:
24:2c:ad:09:58:c0:39:4d:94:a3:e1:8f:72:4f:1d:
e6:98:3d:04:f5:ac:96:8d:32:d4:1b:39:74:a1:fd:
40:d4:d2:4c:4b:3e:87:60:ee:99:37:8f:f6:21:22:
91:c0:59:f7:b0:eb:0c:31:b3:1a:42:a4:7c:8c:35:
73:1a:45:ab:94:a6:17:06:06:ea:82:2b:4f:04:89:
65:f0:04:94:72:4c:ca:1e:20:90:74:8b:02:22:b3:
a1:80:52:48:8a:bc:c9:02:8c:e1:5b:61:c4:26:9c:
5b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4A:EA:25:B6:A7:AC:A0:9B:1E:C6:94:5C:D3:C1:E8:17:19:60:F4
X509v3 Authority Key Identifier:
keyid:5F:9B:A2:99:BD:3D:13:BC:77:9A:EF:AC:3E:73:04:7F:1F:0C:3A:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X5uimb09E7x3mu-sPnMEfx8MOmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/X5uimb09E7x3mu-sPnMEfx8MOmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e6d49c-7685-4475-b621-34698ff59b05/1/X5uimb09E7x3mu-sPnMEfx8MOmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:5b:e0:fa:e1:c6:17:ed:f2:95:f4:44:b2:9f:0f:01:b5:f5:
98:7e:83:b1:9c:ee:47:2a:57:ee:b4:52:ff:17:5c:3d:e3:67:
23:38:49:19:a7:ee:34:7e:21:52:b6:89:92:13:26:af:24:43:
5a:26:ab:d9:e7:73:6b:26:9b:03:dc:2a:65:41:b9:d8:96:42:
10:e2:8c:d5:55:5f:c6:9b:ca:2a:f0:28:6b:15:41:dc:2a:64:
35:6d:03:ea:03:98:cc:60:fd:87:e8:14:73:fd:58:1a:e8:7a:
22:6f:da:58:58:10:06:83:f9:eb:0e:19:02:57:a0:e7:e7:e1:
7e:03:b6:41:76:c2:51:8f:9a:cd:41:8a:a1:0e:5a:dd:ef:e2:
9b:e2:47:83:4e:f1:c4:16:3f:50:69:72:2b:a3:d5:bb:be:46:
40:1d:b0:4e:6a:4d:b4:7d:6d:1d:e9:2b:7c:7e:ac:f1:56:e8:
c2:48:b3:dc:06:c1:33:3e:ee:77:c4:65:96:68:4c:3a:8c:e5:
fc:61:25:52:e4:28:39:b3:81:fa:a4:0f:b8:72:3e:79:04:5d:
fb:4a:db:04:43:e5:42:2c:6e:92:c0:82:b0:a9:5c:07:25:c3:
f8:1c:dd:8f:8a:13:1f:1e:1c:2a:b1:d5:7c:e0:2c:c5:86:2e:
0d:81:31:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:06:38 2026 by rpki-client