Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: 2u3CdUxP2Z8h1ZeYcT58bp7KieJzXrMNQZAGTpMKWCg=
Subject key identifier: 74:D2:37:AA:95:6A:5E:75:2C:AE:37:80:D3:6C:38:5C:CD:1D:E0:8A
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 01A0E1E2B9505169FE7CD1392956F3EAAEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 105A
Signing time: Sun 27 Sep 2026 08:02:07 +0000
Manifest this update: Sun 27 Sep 2026 08:02:07 +0000
Manifest next update: Mon 28 Sep 2026 08:02:07 +0000
Files and hashes: 1: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: 4+ChKexlqi+PuSlopcQp0LBlQYTn6cimoaZM/sJbLmw=)
2: qvDZMPgKFD7gi5Q44AZYhiZ--Ig.roa (hash: cmgO04c2D3BrRGS4WvX7cY6GozgnK7NT0TwhEs+74Kg=)
3: uKoRxEv3mOldDEo6fDHAk9yg0S8.roa (hash: 4hEUcG83yfbcyvkKT/jDeEV25ZBIHXMO6CdGZ2yW5wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:e2:b9:50:51:69:fe:7c:d1:39:29:56:f3:ea:ae:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Sep 27 08:02:07 2026 GMT
Not After : Sep 28 08:02:07 2026 GMT
Subject: CN=74d237aa956a5e752cae3780d36c385ccd1de08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:93:17:2e:13:ba:57:2b:87:e5:da:86:8a:7e:
0b:f4:36:f9:b8:48:e5:38:36:f4:a4:8c:58:2d:15:
07:5b:aa:ad:f5:75:1f:99:b3:34:f8:cf:96:cb:6b:
c6:3c:6d:08:86:d5:11:21:f3:fc:9e:14:f4:3e:75:
22:3a:7a:87:dd:c4:91:0c:35:2c:3b:99:d7:ee:30:
78:38:a8:0b:f0:df:d0:57:c5:fa:ad:ce:57:84:0e:
09:c0:84:4d:42:03:61:2c:fd:49:b0:83:e9:4e:86:
b4:7d:7b:0c:d7:5f:82:63:e7:99:ba:9a:01:08:0d:
1b:97:b1:7c:eb:f3:39:9d:f0:7c:76:c4:29:2b:3e:
5b:24:73:e6:00:d8:27:e1:47:6e:00:b1:ed:9b:e4:
2a:11:8e:06:bc:45:04:3c:1d:82:49:3d:40:20:ef:
fb:ba:ab:00:d6:99:d9:4e:99:fd:3b:36:7d:61:d2:
33:f7:11:38:80:5d:b4:83:80:12:66:67:6d:fa:7d:
22:33:27:05:03:08:8c:42:fd:e4:3e:48:0e:71:51:
ff:00:e0:ec:03:71:ef:e1:f2:39:f4:e4:8a:02:8e:
ed:1c:01:62:32:56:a9:b7:44:3d:89:89:44:5b:43:
42:99:9e:1b:f9:c2:c2:51:12:02:78:9d:ba:ea:36:
ab:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D2:37:AA:95:6A:5E:75:2C:AE:37:80:D3:6C:38:5C:CD:1D:E0:8A
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:59:b2:42:35:46:d9:72:a8:45:81:35:9e:1d:20:17:d2:32:
92:ef:83:ef:be:3f:3a:ff:fc:f8:57:65:df:cc:05:30:6a:ef:
1d:ad:38:33:fd:32:c2:78:c8:00:75:72:92:1e:5c:a5:1b:13:
47:74:df:18:9c:c4:a2:a9:fa:99:a3:28:95:1e:aa:35:1c:a4:
49:70:e6:e6:37:80:06:13:d0:99:28:16:c8:9c:93:8d:89:de:
2e:fe:82:98:6f:13:72:bd:8a:7d:60:dd:23:73:3c:89:b7:e6:
ee:93:f3:fb:b9:a2:c9:fb:59:7d:e3:c5:d2:06:52:cc:a6:d2:
63:f8:37:e7:fa:c1:2d:04:5f:c6:56:59:10:a0:9e:51:af:87:
f4:e9:f3:bc:3c:20:c7:6a:d2:59:4b:e9:f1:62:ef:3f:4d:99:
2a:ac:59:b8:c8:84:21:27:50:99:c2:23:fe:44:6e:78:bd:41:
66:9f:8e:e1:21:b0:c8:aa:3d:7f:0e:63:04:fb:74:71:86:6c:
1a:97:9e:15:7c:30:2f:9a:b6:22:0b:55:0b:52:59:68:50:10:
00:9c:bc:ad:20:7a:ba:0f:af:43:63:94:3c:b3:46:28:a9:09:
42:7a:77:32:9d:ca:82:0f:26:c8:3d:b8:fb:10:cf:fb:f7:58:
01:0e:21:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:00:12 2026 by rpki-client