Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
File: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft (raw, json)
Hash identifier: 4yTiWakPQsirKRKhm+MhgLSurBXkV3DuNT7Rid7oKF4=
Subject key identifier: 40:7A:00:94:78:54:DA:A6:A9:34:30:CA:4B:6B:82:25:F7:02:67:7B
Authority key identifier: 5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
Certificate issuer: /CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Certificate serial: 01A0C858C3F13E25FAFED968C3E46C026379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
Manifest number: 09B8
Signing time: Tue 22 Sep 2026 09:00:55 +0000
Manifest this update: Tue 22 Sep 2026 09:00:55 +0000
Manifest next update: Wed 23 Sep 2026 09:00:55 +0000
Files and hashes: 1: XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl (hash: rDh0P+JFCkZhbly7tTfxz9J0O8bnfREsWuaRsNEVjFs=)
2: _z_wVcXFgGyo2KL2OVSqBhSh8xw.asa (hash: /1A8zlKWYmqlgxFi5Pz0OpVqaauhxn3c+pURid2tACQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 09:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:58:c3:f1:3e:25:fa:fe:d9:68:c3:e4:6c:02:63:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d15bda8ce987d7e4aab1c355178dca33e3b8ea4
Validity
Not Before: Sep 22 09:00:55 2026 GMT
Not After : Sep 23 09:00:55 2026 GMT
Subject: CN=407a00947854daa6a93430ca4b6b8225f702677b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:aa:68:bb:e5:6a:69:19:81:8b:85:cd:39:f3:
a1:54:94:6d:20:7b:e7:3f:1c:8f:99:3d:c9:8c:70:
60:e0:a5:d6:89:02:a6:3f:20:4b:40:9e:ae:2a:6f:
48:d3:38:7c:d8:8f:9c:c2:32:ee:9b:b1:6a:85:6c:
b8:e1:8a:0c:2e:02:8f:3f:bd:af:59:24:46:cf:61:
57:e6:34:b6:0e:33:35:c6:8b:22:ad:36:ff:9d:c5:
7a:83:32:0f:4d:b1:8a:27:be:87:4e:7b:87:c0:c0:
10:c1:3a:46:47:83:f3:c6:d1:ed:73:29:0f:d3:60:
b6:06:40:5c:24:93:36:09:33:f6:16:bb:9c:33:fd:
de:91:7c:67:23:56:fc:dc:8e:47:7e:f7:28:f5:98:
24:32:30:1d:fa:53:de:89:75:2c:08:33:be:90:5a:
8b:7d:2d:94:cc:09:89:54:83:ae:b1:3f:59:94:c3:
54:0b:ff:4e:e9:7d:7f:3e:b7:a2:7a:0f:cc:7d:cf:
90:2c:a4:72:a5:96:f3:18:0f:4c:11:92:4d:9c:ba:
2a:2b:0a:d3:c0:ab:ad:fd:f0:26:85:93:e4:87:d4:
f6:47:90:9e:cd:41:40:f5:76:49:89:a7:b8:89:2e:
b5:9e:09:a1:28:d1:96:ba:7d:50:f6:f7:37:c3:66:
87:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7A:00:94:78:54:DA:A6:A9:34:30:CA:4B:6B:82:25:F7:02:67:7B
X509v3 Authority Key Identifier:
keyid:5D:15:BD:A8:CE:98:7D:7E:4A:AB:1C:35:51:78:DC:A3:3E:3B:8E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/123926-104f-46d1-b33f-bba3c8cb0f7a/1/XRW9qM6YfX5Kqxw1UXjcoz47jqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:ef:ad:1f:76:c1:e8:a6:24:06:e4:d4:9b:50:13:4a:1b:01:
57:e2:a0:72:6e:46:fa:d5:10:61:33:de:bb:cd:e6:91:93:2e:
ea:e0:60:db:5b:e2:11:61:ad:b2:f6:eb:97:63:45:b0:a9:36:
f5:06:eb:fc:8a:c1:a4:d7:39:04:35:d6:35:23:97:ee:f0:1d:
6e:b9:82:d2:39:bc:13:6d:c9:74:ee:90:68:97:f2:80:12:85:
21:7c:d1:21:97:81:01:4a:b1:ba:1e:16:8a:0f:cc:4f:a1:bf:
7c:b7:c4:1c:64:f9:9b:2d:7d:ba:03:0b:da:48:c1:3e:39:c2:
41:d5:e2:7b:c7:11:1c:55:34:71:4c:85:9c:f2:e3:ed:af:a2:
37:ba:fb:04:af:e6:62:5d:10:a8:57:0c:ef:e7:e7:53:80:57:
cc:f9:07:73:4f:34:00:07:70:1e:00:43:3e:23:23:ea:ce:61:
21:7d:21:42:4b:ff:db:37:39:5d:7c:9b:f8:38:f4:77:4a:23:
b9:4f:3f:c9:53:1a:83:39:35:45:a0:08:29:02:c9:50:fd:27:
87:96:0b:a3:d2:09:f1:9f:80:2f:f9:77:57:3e:1a:63:4c:73:
35:8f:86:af:3d:2a:a9:6b:eb:3d:17:65:bb:60:c2:b2:64:6f:
7a:27:ec:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:09:34 2026 by rpki-client