Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
File: XWsFtN3mw5OZctoT9iIH8ibeeSo.mft (raw, json)
Hash identifier: va8BsrO8LTWQ2rfz/ic2CgwTzVen8RgLC/2X1NTJqRA=
Subject key identifier: 3E:9A:45:A2:10:28:49:DF:CD:D1:D7:BC:F0:F5:B0:1F:06:92:7F:15
Authority key identifier: 5D:6B:05:B4:DD:E6:C3:93:99:72:DA:13:F6:22:07:F2:26:DE:79:2A
Certificate issuer: /CN=5d6b05b4dde6c3939972da13f62207f226de792a
Certificate serial: 01A0C85862658440D4733FBF7ECE56915173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
Manifest number: E1
Signing time: Tue 22 Sep 2026 09:00:30 +0000
Manifest this update: Tue 22 Sep 2026 09:00:30 +0000
Manifest next update: Wed 23 Sep 2026 09:00:30 +0000
Files and hashes: 1: O9IV0RKhFtt8K6HCeqLoJ_BtvRs.roa (hash: Ws/iiURmVab3uVGnOVSnKwKNuJfPQAcJDFZkcNjz5Ks=)
2: XWsFtN3mw5OZctoT9iIH8ibeeSo.crl (hash: PcUSknO9j3qWvS+JZOPxkbmHq2BYY4hFkdjB20NDSNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:62:65:84:40:d4:73:3f:bf:7e:ce:56:91:51:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6b05b4dde6c3939972da13f62207f226de792a
Validity
Not Before: Sep 22 09:00:30 2026 GMT
Not After : Sep 23 09:00:30 2026 GMT
Subject: CN=3e9a45a2102849dfcdd1d7bcf0f5b01f06927f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a6:1d:50:9c:53:3c:fa:16:50:5e:72:da:05:
98:0c:08:63:ad:65:92:5b:d2:fe:a4:8b:51:2d:33:
dd:40:77:98:2a:0a:ba:d3:a6:94:b9:7c:72:ac:37:
b9:1f:51:9c:08:7c:99:b9:8e:86:ad:84:7d:6e:67:
18:e2:2e:8b:eb:1f:16:8a:b6:e1:cf:af:52:f7:dc:
4b:c9:11:9b:14:48:d9:8e:be:5d:b8:ed:eb:72:c3:
9e:10:67:5a:51:95:60:51:67:d6:be:d9:d4:82:d5:
d8:99:b1:32:41:4e:ec:25:83:2c:72:cd:5e:85:50:
02:4e:36:e5:1e:ad:fb:01:11:54:28:e7:a6:c8:32:
38:a8:6f:4f:7b:ce:86:2a:b7:a5:50:96:ff:e6:6a:
bb:f4:09:c1:7f:28:87:f6:84:36:24:47:d9:97:ef:
2e:8c:1e:f2:56:3a:90:63:98:30:d7:fe:01:7c:9a:
a3:6c:a9:2d:a9:6d:d7:d1:f3:da:4b:9f:3f:06:9c:
bf:89:df:60:dd:12:ff:e6:c5:2c:e8:f6:d7:d3:59:
05:d5:7e:f2:38:4e:ff:9d:1a:f7:0e:fb:77:de:af:
a3:c7:2b:18:11:97:0f:df:a9:49:ff:7e:d1:4f:0d:
15:0a:cd:b7:b3:c0:dc:e2:f3:7b:3c:8a:64:0d:bd:
f0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9A:45:A2:10:28:49:DF:CD:D1:D7:BC:F0:F5:B0:1F:06:92:7F:15
X509v3 Authority Key Identifier:
keyid:5D:6B:05:B4:DD:E6:C3:93:99:72:DA:13:F6:22:07:F2:26:DE:79:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:de:08:70:32:48:64:ce:79:0b:4f:de:e8:4e:e5:2b:81:84:
5d:b6:8f:7d:23:98:53:b6:3d:39:28:f5:1f:2c:28:b0:a4:85:
db:a1:a6:e2:7c:35:b9:f1:d3:6e:c0:1e:7a:c8:34:9f:4f:6c:
a6:14:5e:5c:c8:69:a9:a3:d8:48:56:fe:b9:52:63:d8:6a:e5:
ae:96:3e:cb:12:ca:bb:b6:22:21:60:14:cb:42:a1:3d:54:08:
38:cc:4a:5f:9d:fb:93:ba:ee:e1:69:a9:78:28:93:bc:d3:18:
e2:a4:b9:cc:92:df:e7:05:2c:bd:0c:0f:5d:68:df:ab:12:e0:
66:53:e8:6e:a2:0a:a3:a7:f7:2a:d1:ce:ad:f2:c9:ba:f3:1e:
9b:d6:c8:44:ea:56:c5:71:37:55:47:cc:bb:07:5e:05:4b:3c:
4e:2e:b1:60:b9:6a:f3:71:d6:e0:75:9c:19:79:7c:96:3e:9c:
9a:ae:1e:22:49:54:77:4c:7e:69:ba:fc:36:f0:32:36:13:52:
3d:3b:97:e3:b1:57:f8:c7:c2:1c:02:ea:70:a8:c0:04:d4:a8:
77:ac:44:39:fb:78:f5:e5:df:50:dc:7e:2d:6b:82:80:0a:70:
f8:fa:65:db:7b:46:fb:4d:d7:67:d4:8f:e6:ca:05:8e:d2:e1:
cb:5b:58:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:44:30 2026 by rpki-client