
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
File: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft (raw, json)
Hash identifier: /m2RD9njniHHuhndmUXdiYlh0SABzetDsR2wVtHin9c=
Subject key identifier: 5E:C5:D4:58:EB:28:70:6B:12:E5:CC:0D:32:E4:75:1B:3D:DF:A8:64
Authority key identifier: 5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
Certificate issuer: /CN=5fab019d98b88c585d5f016204113c839ae067d1
Certificate serial: 01A0D34B2F31EB84A9E8FDA5DEDF621E1C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
Manifest number: 0893
Signing time: Thu 24 Sep 2026 12:01:54 +0000
Manifest this update: Thu 24 Sep 2026 12:01:54 +0000
Manifest next update: Fri 25 Sep 2026 12:01:54 +0000
Files and hashes: 1: X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl (hash: pVHJtzRnwomy8JzzYDbvAMDohLv/WQaGML//z9IZmGM=)
2: hZfrHQXQ9gJ1CBuZbvb4HTnn7x8.roa (hash: s7Q9n6FVyTwioyvvcuH0Je0WpF9fajbCSSnTwOxPywE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4b:2f:31:eb:84:a9:e8:fd:a5:de:df:62:1e:1c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fab019d98b88c585d5f016204113c839ae067d1
Validity
Not Before: Sep 24 12:01:54 2026 GMT
Not After : Sep 25 12:01:54 2026 GMT
Subject: CN=5ec5d458eb28706b12e5cc0d32e4751b3ddfa864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:c0:b9:8c:b7:d2:77:6e:7d:9f:b1:1b:0c:
6b:36:73:1c:5b:ba:90:cb:c0:5f:d0:10:16:e5:27:
95:50:9f:81:41:c7:d5:5c:57:26:57:d3:d1:ab:1c:
35:d4:0e:ce:75:35:f0:d1:ab:1f:4e:72:3c:53:eb:
b0:9d:55:9b:f4:3e:dc:a6:9c:0d:34:1c:c4:1e:5a:
c4:bd:1b:e3:1a:9e:49:f3:65:74:13:d8:13:95:e6:
e3:85:68:0d:4d:dd:38:58:68:a3:99:12:67:26:49:
05:a2:a0:0f:39:bf:1b:25:a9:cd:3b:70:93:50:ad:
f1:e0:94:48:38:ed:72:34:0a:a3:a5:8f:16:ab:19:
11:7c:9f:3c:2e:8e:40:cd:00:dc:ac:da:a2:b0:03:
4b:18:ab:a8:da:c7:96:34:a5:c0:6e:92:5d:70:4a:
2b:b4:86:0a:da:63:58:1b:7c:bc:e0:7d:0e:ee:32:
cd:90:ad:10:36:d2:cc:77:ff:f0:d0:25:45:9d:a9:
cd:90:4c:aa:34:d8:38:78:36:a8:9f:b9:32:77:e5:
20:ad:1f:7c:be:e4:ed:8a:f1:31:f8:f9:dc:65:5d:
cd:6f:99:a9:5a:fb:33:8c:ea:1c:92:45:00:49:98:
52:50:3c:0f:3f:33:55:fa:03:ed:21:2b:81:9f:bb:
de:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C5:D4:58:EB:28:70:6B:12:E5:CC:0D:32:E4:75:1B:3D:DF:A8:64
X509v3 Authority Key Identifier:
keyid:5F:AB:01:9D:98:B8:8C:58:5D:5F:01:62:04:11:3C:83:9A:E0:67:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb279c-bd1e-43bd-a497-c953a88bbfa3/1/X6sBnZi4jFhdXwFiBBE8g5rgZ9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:b4:86:47:cf:bd:30:7e:ee:ef:af:0d:98:3e:11:f1:fa:46:
22:01:fc:f4:48:62:f6:8e:fd:b8:9e:20:a8:64:9e:53:77:0f:
65:04:27:24:cc:82:83:24:ab:eb:d7:d9:02:17:02:92:4c:62:
4d:97:2e:d6:c7:72:47:bb:47:0f:a4:c1:b0:39:0c:7f:c2:4d:
31:4a:3e:79:a3:e1:78:23:d6:90:69:e2:d0:a6:fc:6e:ed:41:
26:71:c4:ea:43:ad:95:c9:e9:42:b9:c1:dc:1a:e5:eb:df:46:
26:34:a7:3d:46:59:f4:2f:79:f8:7f:57:f2:be:41:09:7a:d0:
66:65:e6:a0:95:d3:26:81:2c:bb:5e:bb:a5:c5:97:7a:12:0e:
4a:a9:70:43:10:39:c5:f9:62:37:ff:91:7e:89:78:98:9a:2d:
5d:68:e4:c4:54:6d:42:97:f8:e6:5e:62:5d:df:24:61:c5:cb:
69:4d:96:52:5f:74:ca:ed:0b:75:d4:a2:99:2a:60:87:ed:1a:
91:67:a6:6f:8c:de:35:e2:05:4c:13:7e:8a:56:98:68:7a:ec:
44:e4:14:f2:7a:78:4e:8f:f7:9e:fe:da:57:c1:ac:31:1e:28:
f6:c8:66:5d:a8:70:a1:44:37:e0:eb:d5:03:e1:87:bc:64:00:
58:0b:20:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:56:11 2026 by rpki-client