Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
File: XwImpwTPYg6yAA8n56kZznMJkb4.mft (raw, json)
Hash identifier: /KhoQ0DPbbfv8NUVzYSNOevgTWDxZwjErCx1yIA10+E=
Subject key identifier: 53:22:68:35:53:0C:C2:E2:BF:65:D2:5B:BF:A0:36:C1:65:34:CD:8F
Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be
Certificate serial: 01A0C25600C696BF3BDEEF54DC893F024BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
Manifest number: 12C3
Signing time: Mon 21 Sep 2026 05:00:11 +0000
Manifest this update: Mon 21 Sep 2026 05:00:11 +0000
Manifest next update: Tue 22 Sep 2026 05:00:11 +0000
Files and hashes: 1: FZ2f92Yx1P8FuW9L83SaK0nZGI4.roa (hash: SOp6FmNQwKe5awPkwCN8XsDRwjQMyGX3OeocNtPC8cc=)
2: Huv8_F7CU0_Jslnzwh9x9lhwpc0.roa (hash: que/wANCXPBVboi+Ao6/Mhrzm4uO58lF/bE0KnuyKBc=)
3: TyZ-EN3ZikEP3O1aIGeCGjgK3LI.roa (hash: rGtYPfugPBoAr+vznSLu3abrcQ5ZUu7nfMCulcJMbYg=)
4: XwImpwTPYg6yAA8n56kZznMJkb4.crl (hash: uSoGjs+6FKA7OD2rl4amgAXZ/8KFfTQUQlXTA/IKd2o=)
5: YcTggkw1dIIwon9zpxmI36qcgzY.roa (hash: hJIPq4cJhvmtr5AA2Y+pzfZ+vAbq2fL2IZZMCvtTNqY=)
6: qGL8RTzpNc9QMzJ4mB1cjE85xJ4.roa (hash: ABpLHA3uxkTxF69tefDioKBR4SIb/ghL74K+XaKX/Ag=)
7: wDhMGJ9NzXfEad9sT6Le_xs3iaE.roa (hash: zPKoEOiN3uariB64Rf296KkD/lWfDnDeFg2GGweepII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:00:c6:96:bf:3b:de:ef:54:dc:89:3f:02:4b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be
Validity
Not Before: Sep 21 05:00:11 2026 GMT
Not After : Sep 22 05:00:11 2026 GMT
Subject: CN=53226835530cc2e2bf65d25bbfa036c16534cd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a8:cb:34:e8:fd:f0:cd:f4:85:38:15:bc:cb:
f2:ca:89:53:d6:8e:4d:07:3f:36:f2:f0:01:86:f3:
d6:1e:e0:5e:e5:88:da:75:c1:09:0b:11:52:7d:24:
07:fd:0e:b7:be:6d:e3:db:63:04:b9:a3:11:0e:9f:
92:e3:43:18:d2:01:fa:7f:d6:c6:b0:45:7f:7a:40:
e3:7b:6c:72:07:10:a0:51:fc:18:36:93:a4:89:11:
d5:0f:73:24:d8:c4:43:3c:1f:b8:53:c9:d8:e6:80:
da:bb:2d:aa:bf:f5:19:70:ea:ad:27:38:da:44:db:
07:a3:84:82:32:e1:c2:f6:26:60:90:f0:ae:7b:7a:
9c:58:30:d6:63:62:35:67:01:e1:eb:03:81:a6:aa:
14:c5:bd:46:32:06:d1:54:ab:2d:0f:82:ba:c0:4e:
7b:0b:36:42:12:e1:c9:28:d9:b9:f2:33:c2:3f:09:
91:70:fa:86:58:3c:11:20:1e:9d:dc:dd:f6:1f:24:
59:0e:77:c8:e5:d1:eb:25:f2:91:fc:33:77:0e:bb:
be:50:95:8b:2b:f9:d1:90:7d:38:39:6b:d4:64:c6:
7b:57:65:58:33:1e:5b:29:a4:9a:f4:e0:bb:bd:e9:
be:6d:64:5f:7b:a4:02:92:26:b4:a9:8f:f2:1f:61:
6f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:22:68:35:53:0C:C2:E2:BF:65:D2:5B:BF:A0:36:C1:65:34:CD:8F
X509v3 Authority Key Identifier:
keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:e1:bc:43:e2:61:90:33:5a:ee:61:76:83:8e:35:23:e4:25:
72:1c:77:91:33:ab:bd:e4:df:10:b0:f7:d5:16:f5:31:4c:b2:
d6:80:16:3a:82:f3:a8:d4:1d:83:e9:c8:81:cb:be:57:e9:86:
98:a9:98:59:cf:b7:88:9b:dd:15:d2:bd:1d:dd:d2:c2:9d:92:
37:30:4e:44:57:34:47:1c:0b:a0:9c:94:04:b3:1b:84:cf:1e:
2f:61:7d:fb:84:fe:cf:75:ba:03:04:f0:03:40:b4:63:40:86:
74:97:3e:ea:73:e2:ae:ae:37:c3:bb:4e:63:ad:90:be:35:08:
b3:6a:61:f3:c9:1e:dc:43:ae:65:70:e8:65:2f:c1:8e:20:56:
8b:b9:c8:9f:91:a0:eb:bd:c8:6d:b1:0e:8f:9a:e7:3d:c1:0e:
06:71:91:1d:bd:58:df:60:00:a2:06:10:3d:40:54:51:2b:df:
8b:7b:1d:b3:7d:7c:2b:6d:57:35:5b:16:fd:ad:d7:75:0c:81:
4f:c3:01:26:14:4e:d5:83:ae:30:68:43:da:c5:59:8e:63:e6:
dc:1a:5b:88:52:a2:c2:a5:dd:61:f6:97:a2:83:38:41:46:03:
eb:37:68:12:4c:1c:92:38:15:f1:ec:7b:95:e4:3f:f5:2a:8b:
9d:78:f9:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 17:00:37 2026 by rpki-client