Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier: F9kO+iQiiYfzHYrTps+9lemyQ1FBGglhzAUPwFJEvBU=
Subject key identifier: 0C:BD:2D:D3:7D:AE:3C:AE:9D:E8:E4:A5:D6:69:2C:94:06:8F:E7:82
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial: 01A0D6F09C9E64D83DB9C757D6DF2272E8F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number: 094D
Signing time: Fri 25 Sep 2026 05:01:27 +0000
Manifest this update: Fri 25 Sep 2026 05:01:27 +0000
Manifest next update: Sat 26 Sep 2026 05:01:27 +0000
Files and hashes: 1: TYmQbCMoT4fS2qLD8XTST39V7ao.roa (hash: AGtO8iqNaCFj7ECH8S64l5TD2JUqi3IXF+NQdgnWnfk=)
2: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: C8BSG9xjIu57//5wqNNEMx4hbiDqXj2S+Quwx9a7ehU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 05:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:9c:9e:64:d8:3d:b9:c7:57:d6:df:22:72:e8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Validity
Not Before: Sep 25 05:01:27 2026 GMT
Not After : Sep 26 05:01:27 2026 GMT
Subject: CN=0cbd2dd37dae3cae9de8e4a5d6692c94068fe782
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d9:5b:4d:1f:04:8c:35:86:85:90:e6:b7:8a:
7a:83:7f:38:2c:6f:24:8c:bd:16:e6:72:ec:68:54:
6b:29:e6:c6:2d:ae:0f:9e:ff:10:7f:cf:a8:15:e6:
aa:17:02:2d:18:a1:06:cd:d9:01:ab:c1:11:b7:5a:
92:2a:6b:5b:c9:29:19:39:e4:be:96:4f:e0:5f:c6:
ae:62:2f:ef:3b:cf:6e:11:b6:08:f1:e1:21:6a:41:
5f:96:7c:cd:8e:ac:2a:76:a4:a3:9d:14:ad:09:2d:
18:24:ef:e7:94:66:3a:9f:7e:f7:63:2e:ec:d7:81:
a2:a8:3f:aa:c3:2a:4c:df:d2:72:0e:02:05:6a:cf:
7f:fd:2d:e1:17:c3:0b:b7:89:a1:41:69:57:9d:bb:
05:c6:f5:9f:8c:de:4a:98:f0:6d:ec:42:ea:b5:6e:
4f:0b:9f:52:d1:82:47:7a:58:5b:c9:7f:83:e4:ee:
a8:d8:45:05:7f:8e:e2:0f:a5:81:d9:54:05:84:d0:
53:db:2b:df:e0:ee:24:76:ae:b5:bf:9b:23:42:1f:
75:a4:74:b5:5e:ec:2a:87:49:06:20:f3:d2:a4:2c:
45:cd:42:64:58:22:28:0d:63:f5:36:3f:3c:d9:b9:
ba:84:0b:41:9a:fc:2c:0d:26:a8:01:96:f5:5b:d7:
1b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:BD:2D:D3:7D:AE:3C:AE:9D:E8:E4:A5:D6:69:2C:94:06:8F:E7:82
X509v3 Authority Key Identifier:
keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:4d:a3:63:4f:8f:d2:c5:0a:ee:ef:4f:0b:89:58:74:e6:3b:
75:e4:63:f6:f4:b4:34:40:c9:48:85:fb:25:ea:5f:ea:68:1d:
96:13:b5:0b:0d:2c:9a:97:bc:c6:53:71:6d:db:4b:49:b2:12:
6e:e9:b8:49:b9:43:f0:d0:8c:ef:b3:d5:1d:6b:45:f5:63:e6:
48:52:52:12:be:12:a3:a2:02:66:1c:ab:53:f8:e9:e3:d8:92:
6a:36:4c:0a:1b:be:59:31:be:97:5f:50:cc:43:d4:ff:08:2c:
50:48:a5:40:03:5a:54:04:8f:d6:10:31:34:c5:78:98:eb:d4:
c1:b9:0e:65:66:b2:fc:51:4b:fe:c8:53:ad:d1:ae:4b:0a:17:
9f:8d:50:51:cb:34:df:cb:13:bc:1f:73:9e:03:2a:b7:9c:17:
7d:00:53:d2:59:08:eb:b1:85:92:fb:cb:61:20:18:35:41:5d:
45:53:44:93:cc:0f:b6:3e:04:97:ea:60:ca:41:0d:14:f8:64:
46:68:3b:79:e6:02:54:f7:81:26:56:a7:1d:5c:ba:95:b4:54:
c6:91:86:2e:9b:7b:8a:c8:82:7d:16:de:b5:28:37:3d:91:22:
6e:93:a3:e3:56:d9:ea:39:da:1a:6a:af:77:ca:94:bb:7b:95:
1a:68:8d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:26:53 2026 by rpki-client