Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
File: XM97P9h86bzpn5ALZBmdYGvxYGk.mft (raw, json)
Hash identifier: 1xAxkB5BbDEqAnkMXl9Eo3NmZnn4lZsqbI1SCOvwRTU=
Subject key identifier: 9B:B2:82:B0:3A:DB:3A:EC:02:F0:5A:3A:36:75:F0:B2:1D:96:B1:71
Authority key identifier: 5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
Certificate issuer: /CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Certificate serial: 01A0E1740057A640C639FCD6FEA1F5C8AF92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
Manifest number: 1A07
Signing time: Sun 27 Sep 2026 06:01:10 +0000
Manifest this update: Sun 27 Sep 2026 06:01:10 +0000
Manifest next update: Mon 28 Sep 2026 06:01:10 +0000
Files and hashes: 1: KhLnM9UHZFCOQul_YnhOlrlNWQg.roa (hash: F9XQk4xPu6hZHYNZKH9uTFT9zpakfltc+2j9WkGLNVk=)
2: XM97P9h86bzpn5ALZBmdYGvxYGk.crl (hash: PTKVzAXsuhlaJ9LHm97rsSMZ6sE43DmWm0nV41bj3D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:00:57:a6:40:c6:39:fc:d6:fe:a1:f5:c8:af:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccf7b3fd87ce9bce99f900b64199d606bf16069
Validity
Not Before: Sep 27 06:01:10 2026 GMT
Not After : Sep 28 06:01:10 2026 GMT
Subject: CN=9bb282b03adb3aec02f05a3a3675f0b21d96b171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:95:5f:a6:f6:cf:6a:d6:a3:e2:aa:b3:2b:51:
af:fd:77:33:6e:71:6f:10:e6:04:28:c7:ed:83:0d:
42:77:c1:59:19:d2:e9:fe:a4:58:ec:1b:f9:bf:e8:
06:74:a2:71:63:09:90:a0:5e:ed:af:e2:cb:7e:46:
df:3d:29:d9:20:b8:cf:15:ed:33:d2:25:ff:28:bb:
c4:a7:27:be:a0:69:20:dc:de:97:ff:ba:2e:94:1c:
e0:db:fd:6d:bf:c7:88:d9:19:d0:f5:15:1e:40:8f:
d7:71:30:ad:2e:43:b2:c9:71:53:60:a0:2d:93:b6:
36:cb:fa:94:e1:62:c0:2f:8e:b5:3b:15:1f:d9:f4:
ae:9f:fe:32:00:5b:71:3f:23:38:6c:18:05:da:13:
db:37:ac:69:6e:41:ff:b1:71:9a:43:4f:c8:1b:fb:
d7:bf:2f:6e:70:28:76:ae:f8:02:a3:fd:a9:a8:5d:
f6:e1:c2:3a:d3:4d:d5:7f:05:df:81:b7:85:fe:a2:
02:11:a7:74:c4:64:78:7b:2b:5c:46:b0:df:d8:d8:
7b:e5:ae:d0:dd:7f:66:46:47:54:44:b5:b9:f9:4d:
fd:7a:29:23:96:22:cf:29:19:e4:09:a0:2c:87:fd:
53:b9:bb:47:8a:05:47:99:30:e6:ed:67:cf:7e:f8:
e5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B2:82:B0:3A:DB:3A:EC:02:F0:5A:3A:36:75:F0:B2:1D:96:B1:71
X509v3 Authority Key Identifier:
keyid:5C:CF:7B:3F:D8:7C:E9:BC:E9:9F:90:0B:64:19:9D:60:6B:F1:60:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM97P9h86bzpn5ALZBmdYGvxYGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/54debb-d0b6-44d1-8e58-8cf9e6f8ab45/1/XM97P9h86bzpn5ALZBmdYGvxYGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b2:ce:2c:06:72:fa:41:e2:71:96:ca:b9:58:4c:1a:72:73:
5d:0f:1e:a4:81:83:89:a6:68:83:6d:5d:10:78:72:ed:78:24:
f1:2f:4a:43:1b:98:3f:76:a9:f2:aa:01:38:1d:7e:c5:08:95:
a4:88:69:e6:cf:f9:97:f6:4c:e1:ad:71:9d:88:e2:56:55:9b:
de:92:01:71:b6:e3:29:d6:45:b8:04:83:20:8f:25:73:31:f3:
c5:73:c0:97:d5:97:fb:32:b1:93:60:48:be:75:d9:23:4c:5f:
2b:ac:63:34:9c:6a:bd:72:03:88:18:35:50:4e:84:0d:09:7a:
5e:c6:ff:eb:a0:cc:21:25:2c:a1:c4:6f:93:03:a7:d6:89:4c:
8d:28:c8:e0:86:7f:de:04:cf:46:70:3a:b5:0c:49:b5:32:c3:
f5:fc:df:67:06:ec:1d:6a:3f:ab:9d:fd:1d:00:40:f5:9c:43:
d7:f6:61:51:ef:db:e4:fc:ed:4c:7b:ae:cf:10:fb:46:cf:d3:
4e:4a:4a:23:a0:55:47:a9:e4:01:bc:54:31:f8:b9:ae:e3:b3:
a5:2d:14:78:9b:b3:b6:ec:04:be:1f:36:38:98:1c:f9:6d:8c:
90:07:f3:bc:be:79:76:d9:6e:d9:58:f7:ec:2f:25:91:b2:8a:
5f:72:7c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:29:52 2026 by rpki-client