Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: J9Fjfk1KQP/7iwaJmJ03neLU9nHCWxmNIJtb6MI9t6U=
Subject key identifier: 82:B4:CB:F3:85:0F:75:C0:C8:CF:D3:03:50:37:CF:E1:C3:00:D5:00
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 01A0C28CFBBC7C5461336B4BE6D38006AC9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 099A
Signing time: Mon 21 Sep 2026 06:00:14 +0000
Manifest this update: Mon 21 Sep 2026 06:00:14 +0000
Manifest next update: Tue 22 Sep 2026 06:00:14 +0000
Files and hashes: 1: O9do_tpuJS2IYg238tFeLgPwuLo.roa (hash: inPkQd2M/OOC4cE+kZAGV36qocuoxkiJ2VIdZgql1s8=)
2: OQMR_FkQfBmNWWsOByMgzVQchtc.roa (hash: E+VXuwQXys0IVzb1O36G+Zcgxr0/sBSG/vjRsxKVhO0=)
3: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: hcfQgc44YR4nkiOxt6n2q5AVo1LaNG9IPczK7G+xOk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8c:fb:bc:7c:54:61:33:6b:4b:e6:d3:80:06:ac:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Sep 21 06:00:14 2026 GMT
Not After : Sep 22 06:00:14 2026 GMT
Subject: CN=82b4cbf3850f75c0c8cfd3035037cfe1c300d500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cc:b3:06:2d:27:e9:4e:47:8e:12:af:6a:1f:
13:6a:c0:23:5d:4e:e2:64:da:a4:2f:28:8d:c8:da:
86:63:08:56:9c:20:e3:f5:23:a3:2f:b0:ee:c3:30:
db:76:b2:9c:32:0e:bc:ba:4d:b3:1e:ae:7c:ea:d8:
7f:68:d8:40:77:88:1b:dc:63:83:c3:b2:a7:1f:92:
2c:81:da:97:d4:45:56:35:04:1c:11:17:85:38:c3:
3e:a4:fd:d2:ae:72:b1:cf:8a:a1:d8:4f:bf:cb:a3:
0e:35:13:36:ec:a7:9d:47:b7:07:05:27:4a:15:2d:
ea:ce:24:06:d8:04:da:f1:c6:28:82:b3:fd:77:e3:
00:f2:00:9c:c1:bb:77:02:1f:e2:9d:55:3a:9d:12:
1d:88:b9:da:51:00:ce:91:51:b5:01:9e:12:68:a2:
bd:99:6b:86:05:a1:0b:81:bc:d1:54:55:d1:53:d2:
24:1d:23:b7:a6:cc:f5:fd:03:b8:99:05:78:8a:cd:
51:d5:37:75:71:1a:2c:c3:34:f5:f9:22:db:0b:5d:
fe:25:05:2e:bd:27:ef:be:4a:9a:47:4c:ca:4b:59:
80:88:3a:f3:95:42:1a:d6:ff:45:45:c5:82:b5:12:
a1:ae:0c:d5:ed:9e:26:b2:e4:c0:ee:a2:9f:61:0b:
72:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B4:CB:F3:85:0F:75:C0:C8:CF:D3:03:50:37:CF:E1:C3:00:D5:00
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:a1:05:71:e0:44:a0:01:05:d8:e5:1b:8f:47:30:37:40:54:
ee:74:40:7b:2f:95:25:cb:ee:d7:a7:e1:cc:0d:17:27:ce:f1:
9d:88:30:bf:a3:e6:03:32:01:3d:44:3a:02:c7:b2:ec:92:5c:
7f:21:3a:d9:f3:07:07:07:9b:bf:11:3a:20:12:a3:88:3d:e1:
b3:7e:7d:a5:4f:52:ed:34:02:a2:26:f6:78:e4:81:c0:80:ce:
41:ca:55:87:1d:99:53:ab:e6:3a:a0:75:32:b1:eb:35:ce:2e:
c2:39:f6:2c:32:ba:9a:61:2f:6d:b8:c3:5d:bf:eb:ec:2a:3b:
77:fe:73:57:b1:fe:52:82:c3:6a:a2:25:38:9c:5d:e0:6a:7a:
30:82:79:e9:2d:f0:a0:87:73:80:0b:25:6d:42:ef:d3:d0:ca:
e6:65:30:cd:b2:83:b0:ee:04:b1:7e:47:2d:29:fd:c9:ce:e3:
21:37:59:f8:a0:62:ec:01:73:7a:9c:28:30:7c:07:56:e6:f8:
bc:16:1a:ef:a2:0c:0d:e9:c9:8b:a2:7b:c8:45:ad:c1:9f:ef:
71:40:c2:26:63:86:a3:a2:d0:f8:62:6a:61:61:f0:71:e7:12:
d7:ea:79:11:1c:14:72:02:96:c4:da:b2:37:74:ee:1c:88:5f:
cc:24:e8:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:21:28 2026 by rpki-client