Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: cwVjg6y5i+ljc3+RvILC0Gq/W9g3FTZJK6zjzzVpSpI=
Subject key identifier: 40:B9:B6:A9:6E:BE:17:92:05:6D:ED:F6:16:31:DB:C5:E0:46:82:42
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 01A0E06137257ECD8ED02A4771E164815A16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 01:01:02 +0000
Manifest this update: Sun 27 Sep 2026 01:01:02 +0000
Manifest next update: Mon 28 Sep 2026 01:01:02 +0000
Files and hashes: 1: O0e9J99nDHDBcPP1W09ssXrN96E.roa (hash: aQvYlglowNCiS102CJiAb4sYyaW4lZND2gALby9zlgw=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: FbK/Wv3Aa4oFHehidzg9zrLVpz42rTQVYUhOsbL1bAo=)
3: x58D33wXY03IBALkfNVEewlOjxI.roa (hash: l4BRaOtR+rQZWBsP3tk/LVs3kvHtYkV6QExE7KMTpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:37:25:7e:cd:8e:d0:2a:47:71:e1:64:81:5a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Sep 27 01:01:02 2026 GMT
Not After : Sep 28 01:01:02 2026 GMT
Subject: CN=40b9b6a96ebe1792056dedf61631dbc5e0468242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:be:d7:7b:21:34:b9:5b:e9:1e:16:5e:80:90:
47:05:28:1c:af:84:37:ea:5c:8b:c9:5e:56:5f:36:
08:21:28:60:85:3e:4f:fa:7c:b2:ed:75:bd:7d:99:
0c:a5:27:07:21:95:bf:71:f4:5a:a1:78:48:c2:11:
9d:c4:83:bb:b3:17:94:8a:f2:aa:a8:60:da:cd:db:
1e:4b:4c:4a:07:43:b5:cf:f5:6e:ad:35:b5:15:df:
61:6e:fb:35:62:b5:ab:4c:8b:e5:6a:7b:28:d3:12:
40:1b:f5:38:50:39:f7:88:59:fe:61:bd:e4:a8:35:
bb:09:ba:70:68:54:1b:35:f7:4c:7f:a4:e7:b0:53:
4f:4e:5a:e8:81:00:ac:95:2e:4a:c0:ac:ca:10:77:
08:c7:a4:cf:5f:c4:c3:1d:6c:91:fb:21:dd:36:40:
74:bd:78:f3:78:ba:b8:5e:5b:2e:b2:3e:42:4d:3b:
ef:f8:7e:3c:39:09:c7:fd:3d:15:76:f8:29:bf:8e:
43:7c:d8:a7:58:0a:4e:2b:c8:aa:fd:6f:75:ca:91:
db:d7:f2:0f:dd:81:42:b2:d0:fe:f7:13:8d:46:45:
14:6a:e4:f1:f6:4d:f3:7e:68:55:88:4a:8d:b3:81:
21:2a:0b:56:b8:5f:a4:da:b4:49:8c:34:eb:64:19:
9f:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B9:B6:A9:6E:BE:17:92:05:6D:ED:F6:16:31:DB:C5:E0:46:82:42
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:bb:44:8a:df:e4:0f:f1:63:d1:92:2d:d3:48:d1:35:00:bd:
fd:8c:e3:97:1a:16:ee:26:79:9f:b1:64:a9:b3:5a:99:2e:fe:
df:a7:e0:39:d9:d6:61:f2:07:25:66:20:61:2a:49:8e:7b:c8:
ab:1d:ed:bd:5a:d6:b3:3e:86:0c:a3:7b:f7:14:9f:35:b8:cb:
cc:c6:ed:6a:2f:8b:e5:2a:34:37:69:9e:4d:ba:8d:48:14:be:
a9:39:d1:5b:40:6d:d7:1e:e5:9a:41:c9:d2:dd:ae:0b:7e:d2:
30:29:f8:82:35:62:d0:34:e8:a5:35:42:f2:16:37:08:7f:b4:
d4:03:5b:83:6d:a5:94:ee:ef:48:a4:54:4b:05:5e:7b:3f:f5:
cf:97:b8:91:f6:f9:f3:f4:14:5c:d4:91:f9:78:68:44:a6:a3:
50:a4:22:1c:56:68:1c:2e:2d:37:3e:a1:4f:dd:b8:40:be:97:
68:8f:27:35:40:ea:7d:28:42:df:af:fc:4a:5f:bf:c7:74:30:
1c:e3:1a:ab:0d:f6:7a:3f:45:a6:29:b1:4c:8c:ea:51:d9:17:
3d:82:e3:44:3e:48:62:47:5a:49:07:d9:44:a4:a4:43:d7:b5:
be:34:ea:9a:94:72:6d:cd:fe:7e:99:ac:56:e4:cb:a6:97:91:
69:39:42:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:40:03 2026 by rpki-client