Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
File: Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json)
Hash identifier: ef7Ox/3aG1Vy8XDnG+qHNP+OlrRxHuu4vPOApYb60AE=
Subject key identifier: 67:D1:B4:92:04:37:B1:93:7A:0A:FF:E8:DE:A9:AD:65:FB:1A:25:58
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial: 01A0E02ADF7F362353747A481C8295EA675C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
Manifest number: 0C38
Signing time: Sun 27 Sep 2026 00:01:41 +0000
Manifest this update: Sun 27 Sep 2026 00:01:41 +0000
Manifest next update: Mon 28 Sep 2026 00:01:41 +0000
Files and hashes: 1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: gxNJv5ptXk3hr1Bcc9V3ZnmmrhlodRacVUaeaWMyQis=)
2: ez3ZuiMIYx6XAooxqgacpm5fhZg.roa (hash: vk/HfV9yv0+3WHPw2z2Am2j60UpVLAvpD1nYGFaREig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:df:7f:36:23:53:74:7a:48:1c:82:95:ea:67:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Validity
Not Before: Sep 27 00:01:41 2026 GMT
Not After : Sep 28 00:01:41 2026 GMT
Subject: CN=67d1b4920437b1937a0affe8dea9ad65fb1a2558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:12:35:ba:a8:32:6f:b9:91:1b:15:39:bf:bd:
4e:f8:c1:d3:c4:52:f4:aa:62:a3:d8:5a:41:4d:c5:
cd:cf:f9:4f:c2:7a:48:18:00:3e:3f:de:1b:05:b8:
23:9c:c0:7d:3b:56:02:a1:f3:9b:36:fb:66:93:2e:
d3:89:62:7d:01:27:5a:35:70:bb:90:50:38:57:b1:
c3:a4:99:11:71:ab:15:37:7a:33:4f:e0:a7:8a:ec:
04:32:a0:db:dd:d7:97:f7:1d:ed:cc:03:13:b5:6d:
52:4b:5e:de:71:ea:3d:e5:92:e3:3d:9b:9a:96:9e:
66:2b:48:49:f5:6f:10:93:96:25:bd:f7:8f:d0:21:
c6:43:7d:33:3a:92:dd:27:73:da:87:ae:c3:92:a3:
6d:3e:7e:95:02:0e:c6:a5:6d:96:1e:61:9a:5a:12:
9e:32:d3:9f:57:8c:61:de:53:c0:d4:4f:14:01:e8:
7a:bd:22:30:72:82:e4:49:f4:ef:7b:5b:bf:76:85:
63:23:bb:3b:43:e7:5e:b4:ff:1b:78:e2:5a:39:9b:
f9:a6:63:48:48:6f:25:4a:e4:5b:96:83:9d:b4:77:
e5:57:87:a6:16:96:9b:5b:99:ed:8a:48:55:4c:0e:
b9:31:0d:40:64:af:12:9e:66:41:f5:f0:8f:2f:85:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D1:B4:92:04:37:B1:93:7A:0A:FF:E8:DE:A9:AD:65:FB:1A:25:58
X509v3 Authority Key Identifier:
keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:b3:70:ca:46:0e:06:cb:23:b0:7b:64:09:7e:5e:47:bd:b5:
08:5e:09:d8:3c:43:3d:4a:af:14:14:c9:0e:c5:8f:38:77:cd:
bd:f9:e9:9a:6d:f5:ec:f8:d3:18:0e:5e:40:c7:cb:f6:3e:90:
98:bc:ca:82:c0:0f:64:c1:d2:3d:6e:7d:bb:87:01:65:4b:8f:
23:9f:25:21:2c:7b:15:e7:99:e5:42:9d:ef:14:8c:b0:16:04:
18:22:66:54:2f:69:9c:07:c5:aa:cc:2a:2c:25:20:27:17:28:
1b:d1:3c:e8:53:fc:5b:e7:03:5d:d7:d1:95:ad:db:1f:bd:fd:
01:5f:94:cb:b6:fd:1b:7c:57:27:a3:bb:88:f9:86:45:3c:c2:
11:78:89:e5:ca:ea:7f:77:3a:7b:07:f2:bf:c7:20:63:e6:49:
4c:8c:b7:e8:17:8c:a3:b2:94:33:24:0c:fe:f1:15:09:f9:87:
15:f4:ca:b6:00:ae:17:bf:04:d1:62:5d:d0:ca:21:8f:cb:f7:
b1:2f:33:b4:ea:e4:18:24:2a:92:f9:01:c5:d7:2a:8b:84:91:
9e:94:64:af:db:3b:d7:ed:f7:5e:ff:73:e0:fe:c7:20:b2:37:
98:1f:9d:4a:0a:42:0c:38:28:69:2a:46:5c:99:b8:92:b6:21:
79:97:92:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:44:46 2026 by rpki-client