Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: z9o62Jr45o2/71AsatsHpsAfZ8+QjXFtxOtR0sA49N8=
Subject key identifier: 2B:44:20:6C:0F:2F:B3:74:61:88:43:C1:39:18:05:86:89:44:74:DA
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 01A0C58EC3E3E1E88BBAFDD30DCB493D68AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 1AA4
Signing time: Mon 21 Sep 2026 20:01:02 +0000
Manifest this update: Mon 21 Sep 2026 20:01:02 +0000
Manifest next update: Tue 22 Sep 2026 20:01:02 +0000
Files and hashes: 1: A68FGxDlgvGi2ExLVyu1Rtus6jY.roa (hash: OAq7I962/haIw/8uA0XXyCPjF4pVghhaZk8tZjEL3zU=)
2: VKOQ1y_Uw5fzQd8b1Hdd3EKQAlM.roa (hash: 32JiiJLEtTayhYhvmHeuz5r0x6saNvGEu+svv9Ba2PA=)
3: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: wNQtEYw56bP5/ByMwtqM0mcWgAZRMGgqCVTw1nUEX8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:8e:c3:e3:e1:e8:8b:ba:fd:d3:0d:cb:49:3d:68:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Sep 21 20:01:02 2026 GMT
Not After : Sep 22 20:01:02 2026 GMT
Subject: CN=2b44206c0f2fb374618843c139180586894474da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:45:7d:47:72:ec:81:3c:09:aa:d1:b8:7c:66:
3f:2b:14:2d:60:20:2d:27:b3:89:33:6f:0b:79:61:
30:c3:98:43:b6:bb:a8:83:1d:c7:ee:7e:f2:9b:76:
ce:b7:e1:54:e9:dc:da:37:2f:00:34:d1:e8:5b:b8:
23:fe:0c:54:4a:ae:65:10:f2:67:bf:c3:c8:90:1f:
99:15:9f:7c:82:f7:32:90:34:01:57:a8:bd:d9:5d:
3a:59:99:f6:53:2b:2f:10:47:40:e5:04:98:87:a8:
86:82:c1:5f:f8:4b:e0:c8:bd:0b:e1:f6:6a:36:43:
28:fc:32:bb:7f:7b:8f:43:9f:73:8a:f7:08:b6:53:
9f:5c:e6:82:13:38:1f:08:32:5d:82:da:a7:7e:81:
a1:cb:5f:31:60:60:aa:b3:09:72:a3:ce:19:6d:75:
df:fa:e4:23:65:86:48:72:17:c5:3d:9f:1e:ad:55:
98:15:f4:6c:33:ea:c9:63:d8:5f:e6:f9:89:26:56:
97:6c:ae:f8:2b:5c:73:83:dc:a7:b7:36:87:a4:0c:
c5:5f:a1:13:c9:14:f3:bc:34:bf:71:dc:08:2c:83:
c3:c7:76:dd:e4:39:fe:8f:72:48:b3:30:f6:ff:fa:
96:c1:c5:83:6f:5f:5a:6f:af:3d:df:3e:76:36:12:
2a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:44:20:6C:0F:2F:B3:74:61:88:43:C1:39:18:05:86:89:44:74:DA
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:43:e4:17:5e:22:fe:3d:84:6e:ca:af:70:68:0c:bf:97:8c:
c0:2f:1c:1e:63:f0:e7:2e:3c:13:15:35:54:4a:2a:40:27:ad:
33:86:68:41:80:ab:32:5b:70:06:b0:e3:51:b7:af:49:bd:4e:
ab:b1:94:f9:1f:5b:3a:fc:58:41:3c:c5:ea:6b:7f:66:e1:ab:
45:88:7a:dc:ec:f5:e8:56:0e:3b:07:5d:c4:cc:4a:29:3d:1b:
a9:39:38:44:cc:11:7b:03:45:15:53:d2:cb:14:cf:80:d9:f1:
64:c3:c2:bd:fd:89:23:2a:11:41:67:be:2e:60:79:f9:09:82:
7a:f9:ff:43:c6:a2:24:98:97:50:e6:a8:7f:c6:57:36:e8:7c:
e8:a1:c6:8f:c2:cb:87:a2:9e:4b:9b:b1:3a:fa:7a:ba:3c:49:
4b:7b:5f:78:4b:f7:40:b1:cf:2e:a6:9c:4b:27:75:fa:af:cd:
7e:8a:8f:e3:78:57:94:27:d9:08:54:d2:3a:bf:fc:cb:92:d2:
09:ce:91:24:01:60:25:e8:b4:e2:1f:d4:0b:72:71:38:c0:d3:
33:e4:9d:4e:36:81:3b:d7:c0:a9:56:13:35:9f:82:c4:0c:cb:
66:a8:a7:ec:8a:bc:5c:3d:ff:17:97:a1:68:26:8d:4a:d9:54:
c0:28:e5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:50:58 2026 by rpki-client