Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: 3jq4Sx76n2kdk2bN5o5NrtT5JiY/+gWGstBu1QHQ1p0=
Subject key identifier: 91:7B:47:01:51:B4:36:F2:1A:C3:AC:9A:92:F9:E9:D4:7A:2A:67:14
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 01A125B07540823D09FA412C41A9D6AED4F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 0E80
Signing time: Sat 10 Oct 2026 12:01:23 +0000
Manifest this update: Sat 10 Oct 2026 12:01:23 +0000
Manifest next update: Sun 11 Oct 2026 12:01:23 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: BOuV43Qt0ZxiNGGk0a3t8A4R5TSQRwnQHiUr7CAIXZg=)
2: YNrAk_rW-_hv_7y0q7L07WQbD3k.roa (hash: Q+lutWQbfqBQmTQcTTUR6g2UUXMHO1t1l0Opc14EpV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:b0:75:40:82:3d:09:fa:41:2c:41:a9:d6:ae:d4:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: Oct 10 12:01:23 2026 GMT
Not After : Oct 11 12:01:23 2026 GMT
Subject: CN=917b470151b436f21ac3ac9a92f9e9d47a2a6714
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9b:cb:fa:a4:cf:19:52:98:f3:23:62:2d:ee:
89:75:de:2f:44:55:6d:6c:cd:ec:1e:91:9d:87:39:
76:e6:dc:74:fe:74:4b:ae:1b:cb:55:a3:c7:ad:e3:
0a:40:88:8b:87:ff:78:2a:64:7e:ba:e7:e4:d9:20:
32:77:34:ff:06:52:7d:34:1a:a5:e7:3f:a4:9f:1c:
04:6f:63:7d:86:17:7b:02:fd:3c:66:b2:bf:34:a3:
a0:2c:72:f5:af:cc:5c:38:f1:18:a2:6f:21:48:14:
30:0b:c4:f4:7c:dd:50:1f:59:06:44:e7:a4:7d:3d:
5c:9a:3e:5e:20:0b:52:38:69:cd:1c:d0:22:9f:91:
bd:d2:9c:57:91:8c:13:e5:f8:c8:ec:82:a6:f9:60:
3b:52:86:58:4e:64:11:d3:b6:e1:9b:16:34:4a:a6:
ea:22:30:cb:75:2f:72:06:ab:26:93:4d:e5:bc:37:
36:5d:5e:f1:4e:bb:45:21:b7:6c:81:ff:4c:18:fc:
45:6d:22:74:3e:ba:85:57:49:3d:bf:80:f4:1e:03:
51:7a:ef:26:c7:90:0a:ad:3b:7e:a0:c8:98:82:a9:
f5:a3:09:db:33:43:57:ae:e3:95:97:61:a2:03:2f:
38:04:d3:45:39:86:2a:49:1c:d9:b0:be:ac:ae:40:
57:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7B:47:01:51:B4:36:F2:1A:C3:AC:9A:92:F9:E9:D4:7A:2A:67:14
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:1a:8d:b0:ea:cb:cf:04:28:e4:3f:1e:ab:72:08:d7:a7:1f:
26:4a:cd:eb:ec:a8:af:93:b1:78:d1:71:24:d0:48:86:96:77:
28:31:1e:26:e8:c3:54:14:54:9a:85:99:91:7f:95:5d:76:6c:
75:a4:c1:d8:64:eb:8c:6b:7d:7a:42:b5:b5:ac:34:5f:a3:43:
f3:0e:66:f4:42:a5:8e:e7:61:af:00:d5:6e:b2:67:85:9f:02:
37:5e:8f:92:53:0a:1b:3f:91:df:91:8a:e1:3a:82:89:4d:62:
bb:f3:25:21:4f:52:5e:94:3f:eb:50:06:ea:9f:12:12:96:1e:
83:c8:b8:ab:59:2b:4c:fa:c6:dc:84:56:48:86:af:25:73:20:
a2:87:48:9f:d7:42:ab:e5:1c:0c:ab:50:ec:b5:99:a7:79:89:
58:75:a2:5c:65:d9:4d:a4:32:fa:78:ec:ae:0e:49:1f:14:94:
a5:ff:7d:9f:5a:3b:da:4e:60:d7:d5:67:b5:66:3a:d8:d1:be:
d6:4e:a6:d2:44:c8:3c:c9:9e:8f:d0:2b:66:3c:5f:e6:b5:3d:
9b:2a:f3:14:02:e7:fd:34:74:87:c6:ea:b8:da:6c:67:18:7a:
75:f1:ca:31:43:27:7c:9a:bd:68:9c:fa:91:0d:3f:9d:28:c9:
83:60:b4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:47:00 2026 by rpki-client