Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
File: xD5aLPbSgBXbyqKFDSATs2XkyTE.mft (raw, json)
Hash identifier: 0M2v6ctfGlbWWAHN9fQyQ5Dw74BErcU+UhOyGH9QuL4=
Subject key identifier: 22:46:F2:80:BA:20:B9:88:12:60:59:9F:9A:63:DD:C7:83:FD:B0:FD
Authority key identifier: C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
Certificate issuer: /CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Certificate serial: 01A0D34AE225E896C3C553AE919C081EAAC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
Manifest number: 0868
Signing time: Thu 24 Sep 2026 12:01:35 +0000
Manifest this update: Thu 24 Sep 2026 12:01:35 +0000
Manifest next update: Fri 25 Sep 2026 12:01:35 +0000
Files and hashes: 1: gW00o8n4Rs81BAgnMAtJNPDGHdU.roa (hash: SSNtGXPA/36/YiPMJlKvxQTbaar7XDaEXBXVj0gHR90=)
2: xD5aLPbSgBXbyqKFDSATs2XkyTE.crl (hash: pGXvbx31Nm5bWR/O8PkkZ4Unh8aC8DlUpefb05Kgj9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:e2:25:e8:96:c3:c5:53:ae:91:9c:08:1e:aa:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43e5a2cf6d28015dbcaa2850d2013b365e4c931
Validity
Not Before: Sep 24 12:01:35 2026 GMT
Not After : Sep 25 12:01:35 2026 GMT
Subject: CN=2246f280ba20b9881260599f9a63ddc783fdb0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:66:8d:5d:c0:f9:11:68:69:c1:d5:59:4e:e5:
63:a2:e1:dc:dc:f0:11:a2:be:18:6a:cd:2a:5e:fa:
ed:61:f6:da:51:2f:ed:ad:bc:35:99:31:90:84:07:
4c:1d:86:c8:c0:56:3a:1d:34:97:d1:a0:94:7b:95:
1c:14:b1:17:7a:c4:52:14:77:42:0d:69:67:e2:2f:
3c:8d:b9:b2:12:fa:04:f5:9b:36:34:91:19:06:0e:
55:65:06:a8:58:b2:3d:a6:7e:99:76:cc:a0:a5:6d:
8f:ee:7c:58:4d:1c:9b:c9:4f:3a:bf:ef:94:bc:ff:
fa:43:37:7b:5e:19:73:16:ee:98:af:82:e0:50:fc:
3a:fd:c6:c0:7a:39:47:13:ff:41:52:d1:e9:a6:0f:
f7:c5:e1:c4:0c:bd:63:c7:0c:fe:ad:df:c3:6a:07:
e2:e6:0d:d6:3d:81:0d:39:9b:df:5c:34:35:45:d3:
7c:18:99:47:9f:0e:13:4f:f3:3e:7a:cb:61:e7:ed:
30:be:fd:6a:35:64:03:43:22:f8:bf:8e:0a:ab:d3:
a7:80:f0:04:f5:ec:5b:aa:8b:e7:eb:cb:68:50:9c:
a3:87:a1:f8:bd:1b:27:77:66:24:7a:03:5d:7b:b7:
21:9f:5f:7c:d0:06:d2:d4:d7:a2:86:2e:29:69:c8:
45:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:46:F2:80:BA:20:B9:88:12:60:59:9F:9A:63:DD:C7:83:FD:B0:FD
X509v3 Authority Key Identifier:
keyid:C4:3E:5A:2C:F6:D2:80:15:DB:CA:A2:85:0D:20:13:B3:65:E4:C9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xD5aLPbSgBXbyqKFDSATs2XkyTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/02cf08-0db5-424e-8f51-8d6f7483e632/1/xD5aLPbSgBXbyqKFDSATs2XkyTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:70:80:7a:98:ff:46:5b:a1:e1:a5:7a:6a:cd:84:53:ba:fe:
c2:e4:bf:ad:42:71:6d:1f:34:65:f8:c0:41:7f:83:c5:86:29:
e6:0d:8e:3e:ac:3f:55:b4:e3:c4:f1:a3:56:f3:15:24:f6:29:
d4:0c:4f:a5:fe:13:a5:d7:ae:2f:09:12:44:22:e4:ab:2d:36:
c5:71:87:a7:75:ae:92:08:5f:64:f6:f8:ad:c8:d2:aa:3a:71:
ce:da:99:cf:3d:e4:1a:95:df:a5:04:0c:f2:c6:09:a8:6d:d2:
b3:d6:9e:5a:c1:e6:c7:9f:58:fa:b0:28:73:00:3e:d7:59:be:
61:dd:6b:0d:5b:7e:18:e7:63:b8:7b:07:c4:41:87:73:30:89:
66:e0:36:3e:01:11:e8:0a:db:1b:42:67:cb:bc:b4:18:37:66:
34:19:dc:5e:8a:39:18:57:8f:b2:a0:03:2a:ce:15:78:83:ed:
34:06:57:f0:85:b4:32:63:4f:1a:76:e7:6c:8d:2a:c7:3e:14:
8c:19:a8:ca:9e:e5:b0:2c:d9:b6:1c:98:ec:3c:66:c7:39:f3:
e7:22:6e:ca:21:50:4a:85:ee:1d:e4:88:1e:7a:d4:13:27:18:
8c:62:05:aa:5b:29:1e:56:44:39:0b:db:e7:f7:84:aa:93:a4:
60:79:e5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:14:12 2026 by rpki-client