Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
File: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft (raw, json)
Hash identifier: V09BijN23CxgUE9J4FEvfuKE+eNa/o12nt23TNzCyns=
Subject key identifier: 36:E6:E5:DA:D6:7D:3C:7B:C0:18:D1:91:08:37:B0:57:12:93:2C:B0
Authority key identifier: 5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
Certificate issuer: /CN=5e774467e21849524943d2bd459010720f3e20e4
Certificate serial: 01A0CE919DB9C1EB76745C657620CBEE363D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
Manifest number: 157A
Signing time: Wed 23 Sep 2026 14:00:44 +0000
Manifest this update: Wed 23 Sep 2026 14:00:44 +0000
Manifest next update: Thu 24 Sep 2026 14:00:44 +0000
Files and hashes: 1: 46eH9Cj2ZoAvvZOdO1gLEixXty0.roa (hash: nutrSegvu5QxeGV6g/QuVOtrzFyb4Km/JeoI/dWaXRo=)
2: XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl (hash: rdd34Tp/u2xxSXSyoqhtXqZ4MmgktaW1oi6TGhxw0Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:9d:b9:c1:eb:76:74:5c:65:76:20:cb:ee:36:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e774467e21849524943d2bd459010720f3e20e4
Validity
Not Before: Sep 23 14:00:44 2026 GMT
Not After : Sep 24 14:00:44 2026 GMT
Subject: CN=36e6e5dad67d3c7bc018d1910837b05712932cb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:b4:66:5a:db:82:60:e2:56:cd:8e:b3:7e:c0:
21:3b:c5:b2:70:0d:ae:4a:8c:ca:69:08:e1:75:cd:
c3:9e:03:a8:98:54:5c:ed:ba:95:13:36:e5:69:c7:
f8:59:e1:6e:9e:48:ac:03:34:62:c5:af:e6:4f:5d:
2a:e2:69:c6:6a:c9:ca:8a:65:df:ef:b3:73:fa:19:
75:5f:3a:1b:bd:d0:53:85:43:81:3f:43:d4:fe:92:
6e:72:5c:18:d9:aa:ed:b0:98:bf:47:31:2d:5a:27:
bf:ee:29:94:1c:5e:51:cb:0c:3c:35:71:95:7b:4a:
a9:b9:46:55:a6:b5:9b:82:8a:81:f3:95:93:ff:25:
2a:29:22:3f:65:63:e0:e3:b6:05:19:96:2f:a5:a7:
bd:28:51:0e:a4:4d:96:83:6e:fc:89:ad:16:b5:ed:
7b:d9:85:86:20:2b:24:d2:f6:55:f2:8f:0c:92:61:
0f:4f:e9:33:0f:99:4a:8e:66:99:75:d7:20:b7:6e:
e1:8f:25:2f:76:46:ad:92:55:cd:d2:27:bb:bf:37:
80:9f:d9:dc:ef:06:74:53:d3:25:24:18:d0:79:f9:
68:c0:a6:de:0e:c7:ea:59:2b:3f:63:cd:10:fa:57:
03:ae:9e:c9:5a:02:80:81:64:29:c6:61:e7:6a:a7:
e6:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:E6:E5:DA:D6:7D:3C:7B:C0:18:D1:91:08:37:B0:57:12:93:2C:B0
X509v3 Authority Key Identifier:
keyid:5E:77:44:67:E2:18:49:52:49:43:D2:BD:45:90:10:72:0F:3E:20:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/20a22f-20fa-4d98-8b03-aa400532daeb/1/XndEZ-IYSVJJQ9K9RZAQcg8-IOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:80:2d:e6:ac:11:ff:6c:00:4a:94:97:38:88:70:10:75:f9:
23:05:0a:79:6b:fe:cb:f3:22:78:96:52:6a:a0:b2:9b:da:6f:
1c:81:68:d4:87:32:7b:b6:6c:6d:b1:be:0c:43:ce:85:92:bc:
7e:a5:62:e4:b6:b1:95:0a:2d:60:00:2e:63:97:b2:9e:ba:68:
d3:2f:2e:45:15:12:c2:e6:58:ad:42:ce:f1:3c:53:12:17:f2:
31:e1:34:fe:74:0b:4a:1a:62:0e:eb:79:d8:19:5b:e2:29:a5:
a0:27:83:7d:4b:61:aa:30:1b:eb:40:b7:4c:52:cc:63:1a:d7:
6d:4b:97:f8:90:36:df:ce:4e:03:5e:19:56:38:d4:7a:4c:0d:
83:3b:79:59:75:24:98:62:84:b3:19:63:c3:cb:62:aa:71:11:
f6:15:b6:1a:04:54:2f:8a:8e:0e:20:7f:01:0f:d4:b1:7d:61:
69:93:aa:f2:35:4d:52:21:c0:b3:5d:ab:78:79:b7:ae:a9:f1:
38:a9:35:ac:8c:ff:60:1d:04:53:4d:5b:89:2f:62:a6:81:fc:
42:2f:7e:4c:b9:08:27:1d:c7:f3:44:d7:93:16:d8:ca:91:17:
85:21:e2:2c:9d:63:01:ef:d9:53:3f:d9:22:05:66:8d:4a:0b:
5d:ae:27:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:19:26 2026 by rpki-client