Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
File: XAAsRHm7TJbiI0OZznH1YDRSmdA.mft (raw, json)
Hash identifier: b2tTNtmgJFbG+j5MoGlVhzBB47TSZoCDOOoHz/MsNb0=
Subject key identifier: 5E:82:30:19:C3:23:08:B5:63:0D:75:38:84:7B:E7:C2:3C:8C:C6:34
Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
Certificate issuer: /CN=5c002c4479bb4c96e2234399ce71f560345299d0
Certificate serial: 01A0EB530088ECD54A7D2DEFA00D976776F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
Manifest number: 0D0E
Signing time: Tue 29 Sep 2026 04:01:20 +0000
Manifest this update: Tue 29 Sep 2026 04:01:20 +0000
Manifest next update: Wed 30 Sep 2026 04:01:20 +0000
Files and hashes: 1: TxbDZ92_D1JcE6gFaCzsdbEg8Dw.roa (hash: w4shAAAl4BC6mnnYlahv1hVwM6Z+ODkO+q4aaMk3Of8=)
2: XAAsRHm7TJbiI0OZznH1YDRSmdA.crl (hash: hPSiR+8+pbyaN2uhowysVqcWMSOsAKF0HsMWSnwEeIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:00:88:ec:d5:4a:7d:2d:ef:a0:0d:97:67:76:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0
Validity
Not Before: Sep 29 04:01:20 2026 GMT
Not After : Sep 30 04:01:20 2026 GMT
Subject: CN=5e823019c32308b5630d7538847be7c23c8cc634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:e0:1e:1c:52:91:1c:28:96:35:13:96:01:
3a:7c:aa:ae:a3:2a:7a:98:24:7a:24:f3:a3:da:fa:
a4:7e:3b:38:20:1d:5e:1e:2f:bc:41:1e:32:59:be:
c7:ae:c5:cb:7c:29:bb:ca:25:2f:46:6f:45:cd:aa:
0a:ed:ca:38:5e:3f:3c:97:c6:2e:ed:da:4f:96:e2:
f5:ce:61:d2:4d:84:be:22:59:af:3a:82:32:3b:5b:
77:3a:89:e7:49:73:25:59:13:15:78:a0:9f:e1:07:
ea:a0:db:6c:71:c2:7c:97:2f:31:01:f4:32:3e:5c:
d8:3b:9b:8c:a9:8b:d0:9a:6e:8c:9a:74:74:49:a8:
23:42:86:e9:ad:d4:24:43:9c:12:6c:83:db:9a:34:
0f:7f:3d:e6:35:b4:b8:84:62:15:14:52:e6:a5:7e:
4b:e3:18:c6:61:61:11:23:9c:8e:32:74:93:07:67:
28:36:2c:c1:00:c0:82:a8:9a:3d:6c:ac:b6:b7:58:
65:6d:e4:ca:2c:3c:7f:fe:22:35:8a:4a:e0:89:d9:
99:a5:b5:f0:da:dc:9e:0b:47:46:03:b6:55:95:38:
b0:4f:10:ad:ed:31:d0:b7:ae:08:90:0c:31:cf:5b:
07:2c:21:19:48:01:8b:6f:96:8e:c8:28:a7:9d:a0:
58:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:82:30:19:C3:23:08:B5:63:0D:75:38:84:7B:E7:C2:3C:8C:C6:34
X509v3 Authority Key Identifier:
keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:fc:bf:53:8c:a1:77:09:70:7a:ce:4b:93:70:41:7f:ab:ca:
9d:55:8d:a6:f6:d7:5a:af:88:86:03:f8:a3:7a:11:e5:66:c2:
19:f8:e8:d0:ba:02:d7:2d:c8:fa:4c:cc:61:21:f6:52:16:ba:
3b:27:d0:28:5c:f0:de:cf:e1:8e:cd:3b:6b:3d:8c:53:fc:c8:
69:0c:28:8c:e3:c6:df:96:21:d4:0d:44:34:1f:21:e5:cc:35:
8c:bb:57:e2:9a:dc:ac:a9:41:a7:eb:c1:24:72:01:39:77:18:
77:bd:af:92:5e:89:9e:04:e0:3e:32:37:c5:b5:eb:b1:35:3a:
c4:f9:b2:d6:61:64:06:c4:0d:75:65:9c:0b:5d:0f:58:85:56:
b7:37:09:80:a2:8f:30:d0:a7:7c:bf:49:03:91:4f:dc:60:82:
b9:ac:24:59:ec:14:14:61:9c:58:89:47:26:92:0b:0d:d5:51:
f5:30:cd:4d:50:f8:f9:40:a5:2b:02:d0:50:93:9d:4f:96:fd:
11:10:b8:30:23:f4:05:fc:33:9d:38:4a:bf:6c:b2:ea:cb:64:
af:de:b0:47:bf:fe:49:a3:13:c0:0e:c7:9a:2f:10:8f:92:86:
03:b6:e7:58:f0:61:7d:0b:2d:2b:30:3f:f7:24:04:92:dc:79:
a3:d4:45:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:36:56 2026 by rpki-client