Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: tOb+45hm0mka4dlYkEWZySsBb2JUO2fPIb+vsrIvTZw=
Subject key identifier: D3:0F:D4:C7:B0:4E:3C:DF:D2:60:75:8C:CF:B7:97:DE:2B:1D:C1:1F
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 01A0D124BD2A43DD3304C575B7D6AC8AAA8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 09F3
Signing time: Thu 24 Sep 2026 02:00:40 +0000
Manifest this update: Thu 24 Sep 2026 02:00:40 +0000
Manifest next update: Fri 25 Sep 2026 02:00:40 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: oZrCQFWxw0wE8DuiRsxXubVUqMkSpt05ZhHI5cps25M=)
2: xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa (hash: 4Tr8pcApL7OMPNYK6DHiqFf/BMOwe5lvOFY1rUx8z6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:24:bd:2a:43:dd:33:04:c5:75:b7:d6:ac:8a:aa:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Sep 24 02:00:40 2026 GMT
Not After : Sep 25 02:00:40 2026 GMT
Subject: CN=d30fd4c7b04e3cdfd260758ccfb797de2b1dc11f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fc:45:44:37:f1:f5:35:b8:38:39:ca:9e:d6:
a5:22:a6:55:8f:2a:19:75:07:ca:5e:e4:5c:e0:92:
9a:af:8b:1a:2c:41:b1:4d:b1:b1:06:b4:9a:d7:00:
7b:65:4e:0f:db:b2:19:3b:e7:cc:f1:c9:5e:04:ac:
78:8a:47:08:f8:fc:40:89:c8:56:62:52:06:2d:5c:
fa:47:69:62:5f:0d:8a:9b:3f:63:d9:6f:12:99:73:
76:d0:ed:1e:13:a9:3c:af:1f:87:2e:d6:48:fe:db:
a8:85:63:68:3c:09:99:bf:10:fd:bc:ac:b5:cb:dc:
b6:71:79:c7:84:70:9e:77:80:8f:7c:56:f6:c4:4c:
4a:39:6c:f4:93:a5:27:f7:b4:55:13:c5:66:4c:21:
23:55:d0:1b:04:95:06:3a:1a:3d:c8:b0:67:f9:cf:
a8:75:f4:f8:39:43:5e:d8:0c:c0:56:c5:ae:68:cf:
ee:70:fe:cf:0d:7d:81:01:ad:8f:8f:de:98:73:e6:
1b:8e:72:da:6d:88:4c:f4:71:78:fa:88:be:0b:b3:
f0:d8:69:55:68:73:3a:88:c6:fc:3e:d0:62:a8:de:
e3:d1:09:7d:01:49:25:26:d4:28:a7:03:e2:68:9a:
53:ff:d5:97:10:60:a0:2f:7c:d4:c0:58:0f:7a:08:
18:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:0F:D4:C7:B0:4E:3C:DF:D2:60:75:8C:CF:B7:97:DE:2B:1D:C1:1F
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f3:ca:0d:cc:8f:b6:1f:ea:7c:37:70:99:4b:27:53:1c:81:
bf:77:dd:26:27:54:18:42:41:41:54:5e:d9:d3:47:0c:d6:f2:
68:f6:17:1c:6b:38:2e:0d:f9:28:d9:d8:e3:ad:10:e4:e2:6d:
03:4f:3d:ca:08:93:08:e0:bf:9e:09:3a:6e:29:c0:cf:95:56:
40:15:4a:7a:3c:54:0d:71:5e:aa:88:fa:42:f6:bf:9d:f3:e4:
a0:f7:e6:67:70:16:5c:b8:11:5e:f5:2a:d2:47:db:37:e4:f0:
ef:d0:53:85:3a:d4:d8:b3:b4:9d:68:33:51:67:15:a8:fd:3e:
65:47:5d:1f:ba:78:b1:9b:86:44:84:f6:59:13:f3:bb:88:93:
18:1a:6f:f8:74:7a:3f:7e:fe:21:06:d2:2f:fe:ea:bf:2b:90:
4b:7f:19:21:97:39:86:40:3e:e0:ff:d4:b4:87:8c:56:6e:31:
d5:49:97:4c:fa:87:fe:c6:37:81:a1:07:bf:6a:16:6d:01:79:
02:ac:e8:bf:da:9d:b4:c7:db:fd:e0:9a:f4:bc:96:d3:d8:73:
3a:46:79:9d:5a:b4:f2:f1:67:ae:66:93:b4:13:e9:f8:db:26:
74:78:da:bd:63:01:bb:15:63:33:66:d0:cb:c0:c4:96:f8:96:
44:1d:33:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJL0qQ90zBMV1t9asiqqMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYTM4NmU5NzY1NmQ2NDhhYjUzODFiMjk2NjY0MTQwODFi
MDAwODQwHhcNMjYwOTI0MDIwMDQwWhcNMjYwOTI1MDIwMDQwWjAzMTEwLwYDVQQD
EyhkMzBmZDRjN2IwNGUzY2RmZDI2MDc1OGNjZmI3OTdkZTJiMWRjMTFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/xFRDfx9TW4ODnKntalIqZVjyoZ
dQfKXuRc4JKar4saLEGxTbGxBrSa1wB7ZU4P27IZO+fM8cleBKx4ikcI+PxAichW
YlIGLVz6R2liXw2Kmz9j2W8SmXN20O0eE6k8rx+HLtZI/tuohWNoPAmZvxD9vKy1
y9y2cXnHhHCed4CPfFb2xExKOWz0k6Un97RVE8VmTCEjVdAbBJUGOho9yLBn+c+o
dfT4OUNe2AzAVsWuaM/ucP7PDX2BAa2Pj96Yc+YbjnLabYhM9HF4+oi+C7Pw2GlV
aHM6iMb8PtBiqN7j0Ql9AUklJtQopwPiaJpT/9WXEGCgL3zUwFgPeggYgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMP1MewTjzf0mB1jM+3l94rHcEfMB8GA1UdIwQY
MBaAFF+jhul2VtZIq1OBspZmQUCBsACEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgt
OTUwY2UzOWE5NzdjLzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy81NTA1ZTAtMmU4YS00Yzc1LTgxMTgtOTUwY2UzOWE5Nzdj
LzEvWDZPRzZYWlcxa2lyVTRHeWxtWkJRSUd3QUlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE/PKDcyP
th/qfDdwmUsnUxyBv3fdJidUGEJBQVRe2dNHDNbyaPYXHGs4Lg35KNnY460Q5OJt
A089ygiTCOC/ngk6binAz5VWQBVKejxUDXFeqoj6Qva/nfPkoPfmZ3AWXLgRXvUq
0kfbN+Tw79BThTrU2LO0nWgzUWcVqP0+ZUddH7p4sZuGRIT2WRPzu4iTGBpv+HR6
P37+IQbSL/7qvyuQS38ZIZc5hkA+4P/UtIeMVm4x1UmXTPqH/sY3gaEHv2oWbQF5
Aqzov9qdtMfb/eCa9LyW09hzOkZ5nVq08vFnrmaTtBPp+NsmdHjavWMBuxVjM2bQ
y8DElviWRB0zwg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:03:00 2026 by rpki-client