Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: TmDvl0Cn2gCwO4kjzD1lgQcWhZ31vXm+j8585Chxz90=
Subject key identifier: C6:B3:51:89:19:DC:92:95:0D:77:8F:B7:0D:0A:09:06:FE:31:DA:B7
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 01A0BCF949FF7B327EAF8814384E4F87669B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0DF8
Signing time: Sun 20 Sep 2026 04:00:48 +0000
Manifest this update: Sun 20 Sep 2026 04:00:48 +0000
Manifest next update: Mon 21 Sep 2026 04:00:48 +0000
Files and hashes: 1: EmJaWy9ErTq18djeUNfT6TYwXlA.roa (hash: 4n7tztgrwrUxD6WI3OMeFvCbZPJYYWR7ZCZusKoAv2Y=)
2: I-K9nqaL8isdaQPATdz15jV472A.roa (hash: IzWVmalHZuVa9srOGb7K8LfnsGA4gkEh+RLBEqMh0oM=)
3: RcwVn60BAjXaSKd54kN8HvE9mEI.roa (hash: HMzOnWY8MpFn7ebVHAu3c09I2xVaAKGb1gijWHIVX6I=)
4: VMEOZBTbdat5Ej2FDGSSyvWxON4.roa (hash: il5PH5NsJiNfZtmLceTZARbKmqNBVyPmTfnq15PGTB8=)
5: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: hHp0xukDiQT7d+UMwfW5+LDsqXaOnk1FbCMkiE4OXCA=)
6: lIxTSYsNmmcqNIHLrqXgnkuovB4.roa (hash: KyCy7f0RC+Gah0kPcXWSGeJFDqftrveXwrbOBQUq7gE=)
7: n6hUs8ScD2JiUwNfl89-e_tCc6w.roa (hash: /7fv2sWCDJbqb4l7iyEbmK73ArodpdBZ+jyH4nyo2WE=)
8: roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa (hash: HW4LBYiaQzfwjk4eYDYDeite6KGRHXlfiOHLKtkmNeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:f9:49:ff:7b:32:7e:af:88:14:38:4e:4f:87:66:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Sep 20 04:00:48 2026 GMT
Not After : Sep 21 04:00:48 2026 GMT
Subject: CN=c6b3518919dc92950d778fb70d0a0906fe31dab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fa:b3:17:bc:88:17:1c:41:e1:ed:bd:03:77:
ca:87:dd:95:11:43:d6:92:21:7b:a3:9f:cc:ba:d1:
52:54:66:ec:80:1c:6c:6e:b4:13:1d:ab:da:73:be:
57:da:da:c0:67:30:21:d0:b8:f5:76:49:92:48:38:
96:02:d2:3a:f0:95:36:5c:f3:75:e3:91:35:e1:bf:
46:bd:fd:9a:c6:14:07:81:e6:96:0c:4a:35:b8:69:
d8:5e:ce:1e:c0:cc:1b:20:97:10:26:a8:59:7e:2c:
5b:b5:2b:0d:b6:52:b2:22:58:86:9e:a7:8c:43:a9:
38:a0:3f:ea:1c:ac:ad:92:89:b8:f0:18:de:01:1b:
cd:97:99:dd:08:fb:ec:19:05:dc:e7:6d:b8:c2:ae:
33:57:fd:f8:5c:7b:ab:5e:62:11:ff:56:33:6b:07:
8a:85:51:1c:73:1e:3d:28:27:d9:5e:bf:34:7f:16:
07:56:75:c2:ef:b3:c3:0c:3d:98:08:ca:3f:dc:62:
d1:a1:41:3d:1a:13:93:63:12:c1:6c:c7:7d:83:70:
6c:af:e6:b4:d5:b0:09:4f:ee:d8:1a:5a:c3:11:0e:
5a:5d:1d:1a:e2:6b:b7:72:ec:e3:85:29:af:11:d1:
4a:63:8a:9c:22:26:98:06:02:b5:34:c3:b7:44:b1:
b8:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B3:51:89:19:DC:92:95:0D:77:8F:B7:0D:0A:09:06:FE:31:DA:B7
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8b:bf:e0:cf:89:89:4a:36:0e:29:e3:47:6f:7b:77:28:11:
b2:73:0a:2f:6e:c5:af:29:20:ac:66:9f:7a:16:f8:5e:96:2e:
3e:83:70:ad:cb:7a:21:95:8c:13:4c:65:22:2a:90:86:12:eb:
1a:46:e9:c2:2f:31:43:a5:fb:51:ce:51:5b:88:df:f2:e6:f5:
1c:28:1b:3e:80:da:d9:78:f8:ea:bf:5a:0a:26:5e:c8:bb:d8:
04:ff:2c:e7:9c:29:ba:b5:46:a9:bd:2b:03:e4:1b:9c:a8:d9:
f4:de:2a:57:c8:9b:38:90:e7:bf:c9:60:73:84:57:c3:a3:86:
91:c6:bf:86:14:f5:1c:f4:a3:f6:44:89:59:7b:87:d5:5a:61:
f1:14:eb:e4:df:c1:46:70:34:c6:d0:fe:8b:74:3b:ad:96:99:
d1:38:56:84:7f:4a:b4:73:53:33:77:f3:d9:5e:5c:3e:48:ad:
a7:2a:7c:6b:60:58:93:53:66:ab:6e:3d:ce:d1:7c:2b:d1:15:
84:ad:18:48:a6:58:89:07:26:43:73:1f:52:6f:d2:2e:6b:28:
6b:ce:a9:19:57:fe:23:5c:6b:3b:99:61:1d:e8:04:e5:95:8b:
e2:e7:22:f2:8b:85:01:c6:91:85:99:a3:83:a9:8a:de:09:d3:
d7:4c:70:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:44:49 2026 by rpki-client