Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
File: XwjcECGKxtt5QwrnxEUVWQQX1gU.mft (raw, json)
Hash identifier: TmZSCQ1picEza8WcWjFF5B8+CyxKedCg+aqeAiskwQU=
Subject key identifier: DF:19:21:CC:6A:87:9A:C2:7C:09:11:CE:3B:E3:14:3C:BD:8D:52:3E
Authority key identifier: 5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
Certificate issuer: /CN=5f08dc10218ac6db79430ae7c44515590417d605
Certificate serial: 01A0C858B7DA256A2C085850A38062459368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
Manifest number: 0948
Signing time: Tue 22 Sep 2026 09:00:52 +0000
Manifest this update: Tue 22 Sep 2026 09:00:52 +0000
Manifest next update: Wed 23 Sep 2026 09:00:52 +0000
Files and hashes: 1: 7VD9FedHhDKp3jdPS8TH2m8uSuc.roa (hash: xZcVVNzE+1lnqo21oPoTvLeW+I9A4gbqd0xRQIvFm5Q=)
2: SIDQ9sVBzRAafOCm9UYDrXMxlh8.roa (hash: kvIxSm7iZMTEjZ77jOpCtNSAajMjFLsT+5gwQRQ5+oM=)
3: XwjcECGKxtt5QwrnxEUVWQQX1gU.crl (hash: lbarxTID2RF5W+mclM9l2ZHuFZPYK1DgRTYjpHShuuo=)
4: e5Gl5Joy_TfTtgIDa-b4kbpMbIk.roa (hash: hOVgr+6lYpOL/o328s3O436QYBTqR+tWUhnoy8x9gK8=)
5: kiz7IlKh-UDi6rS-liSvr-XLZj0.roa (hash: fYE3W6s3a7j6dTVOVi+YslQybRuhNmifh/ujnuOCMOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:b7:da:25:6a:2c:08:58:50:a3:80:62:45:93:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f08dc10218ac6db79430ae7c44515590417d605
Validity
Not Before: Sep 22 09:00:52 2026 GMT
Not After : Sep 23 09:00:52 2026 GMT
Subject: CN=df1921cc6a879ac27c0911ce3be3143cbd8d523e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:6d:4c:20:7b:14:4c:a0:76:c2:61:eb:34:
49:a8:55:87:a0:31:0e:21:c1:df:d3:94:fa:7c:8f:
3b:f0:8d:48:04:0a:a8:46:4d:0e:9b:bd:9d:01:e4:
db:a0:53:b1:42:73:5b:74:63:29:03:c0:d0:07:c0:
f4:86:6a:36:37:12:40:0e:91:93:20:e7:59:f3:60:
da:bd:ff:cb:e0:8c:1d:d5:d3:a1:90:02:63:6e:84:
f0:af:f7:b9:3f:5e:e8:ab:96:2c:93:e1:ab:36:13:
1a:45:63:f8:ac:b2:8b:85:aa:14:db:6c:73:55:71:
87:5e:cf:68:f7:17:ab:d1:ed:c3:18:fa:ab:40:51:
cf:bc:a3:e7:86:2d:10:27:3e:7e:38:9f:d8:34:5c:
09:ed:80:6e:99:c9:b8:6f:4a:49:8b:b6:4a:01:3a:
ce:43:09:b2:8d:7d:2f:bb:f1:4f:f3:5b:3d:c9:6c:
66:eb:a9:90:19:fe:4f:9a:50:5d:1d:44:bd:11:8b:
39:22:0a:e5:35:23:39:16:ee:40:2a:2d:0e:40:ae:
14:ad:3b:0c:fc:b1:4f:34:e2:5d:a4:12:5b:6a:be:
52:44:87:5e:4f:e6:b3:f0:70:94:0e:5f:43:3b:21:
ef:a0:45:19:dd:84:ac:53:17:76:29:c4:a6:5b:79:
0d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:19:21:CC:6A:87:9A:C2:7C:09:11:CE:3B:E3:14:3C:BD:8D:52:3E
X509v3 Authority Key Identifier:
keyid:5F:08:DC:10:21:8A:C6:DB:79:43:0A:E7:C4:45:15:59:04:17:D6:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwjcECGKxtt5QwrnxEUVWQQX1gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/d81745-658d-4a74-92f7-5d3a421a0f10/1/XwjcECGKxtt5QwrnxEUVWQQX1gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:4a:14:0a:4b:bf:04:3d:6f:f2:48:90:16:93:16:e5:fe:ac:
62:61:5c:0d:58:c6:05:80:1c:8f:74:65:cb:58:de:32:f7:54:
98:68:2b:83:43:bb:dd:42:e5:73:a7:32:b9:86:d5:8f:b1:b6:
99:e9:f3:b0:a1:35:74:fd:64:06:b9:c0:70:17:a4:24:56:c0:
1a:1d:43:5b:53:8a:bb:17:e0:19:df:82:3d:5b:ef:2b:29:c1:
9f:9b:a0:c4:2a:8b:f1:4e:7b:2e:a0:47:bb:24:2b:d6:3a:1e:
f5:30:80:fd:6c:d0:cf:d3:99:d2:5e:2f:af:a4:a0:3a:79:cc:
c6:77:f3:4e:5c:cb:04:c9:1c:ef:6b:4c:51:88:aa:a2:10:09:
b8:10:e1:aa:ec:3d:e2:91:aa:2a:2f:f6:75:48:63:63:ec:fd:
66:35:e7:0f:92:fe:77:c7:de:a5:9c:a3:09:f2:81:4e:b0:a7:
a8:72:0b:83:58:9e:e5:f1:52:8c:9e:79:45:bf:bd:76:71:40:
73:bf:05:de:0f:fc:28:e0:e2:97:24:19:07:51:5f:14:d5:f4:
50:fd:23:34:42:ec:ad:35:39:94:95:1c:0e:eb:4e:2b:ed:f8:
88:d4:26:6a:7c:97:ba:cc:ec:25:71:5c:5e:ad:d3:2b:55:28:
27:66:4b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:13:27 2026 by rpki-client