Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: /EhBw2+P7Md8uDM4wx0+ubCS0pIdHOG1zF3gTHSC+dU=
Subject key identifier: 9B:DF:C7:8B:A1:E4:72:47:3E:25:D1:F9:2F:02:1D:C0:2B:A2:63:E9
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 01A0CE91D2D1D6AD78E52AFF3858D2A4D655
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 0DD8
Signing time: Wed 23 Sep 2026 14:00:58 +0000
Manifest this update: Wed 23 Sep 2026 14:00:58 +0000
Manifest next update: Thu 24 Sep 2026 14:00:58 +0000
Files and hashes: 1: OvbRlSnTXlATqx6AnWYr1toDU7w.roa (hash: Q7J38waQ9GMMd+3BefTKWI7xIc5v9QQp9c12zI1W6yo=)
2: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: ejpv+RirHmKjh44kpU0luUbDWS4PmYGRZri+ThRassI=)
3: ka4LXP3r8o1mdLFuGzD128vQb8c.roa (hash: b2UoUARxm+G737EGkLibfrOXAzwN80OkLpiAV/fDR/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:91:d2:d1:d6:ad:78:e5:2a:ff:38:58:d2:a4:d6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Sep 23 14:00:58 2026 GMT
Not After : Sep 24 14:00:58 2026 GMT
Subject: CN=9bdfc78ba1e472473e25d1f92f021dc02ba263e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d3:ef:30:50:ed:e5:38:48:cb:98:30:3b:7b:
63:82:09:52:3a:a2:22:c7:57:81:fc:71:84:dc:db:
ad:d7:8b:f7:fc:d1:32:d8:5e:f5:c5:23:ea:99:f2:
c5:45:20:eb:36:53:a1:82:0c:3e:da:36:0f:b5:3e:
c6:a0:c7:bd:24:27:c5:66:6b:4d:68:38:6b:8a:be:
42:11:2a:7a:3a:e1:9d:ac:0a:68:75:3d:17:da:0a:
d4:95:36:01:4d:59:de:97:7b:d4:2b:00:2b:b1:68:
32:dc:e3:ce:ea:6f:c5:8e:80:df:5c:2e:c2:5c:c1:
c2:87:04:db:b6:c8:c1:d4:a0:b2:91:6a:0d:8b:e6:
e9:4a:47:45:05:e2:a1:9b:f9:cb:90:c1:b4:cc:ca:
9c:90:3e:ac:a7:54:22:5a:a1:89:6e:ba:56:a5:bc:
97:a4:b7:1c:2f:f4:2d:15:2f:6a:5f:02:ca:40:99:
a9:bd:37:e0:b2:39:a5:df:f5:38:00:46:af:f6:97:
0b:5c:62:be:2f:74:a5:f0:e9:6f:21:7a:2b:43:7c:
36:7b:aa:2b:19:22:5d:96:0c:e5:be:c4:99:b3:3f:
ca:85:dd:e7:ee:3a:ba:ce:c3:3a:a0:e5:70:5b:0b:
b5:13:26:ee:4c:ed:25:13:20:ae:0a:18:b3:8e:ac:
bf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DF:C7:8B:A1:E4:72:47:3E:25:D1:F9:2F:02:1D:C0:2B:A2:63:E9
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:48:c1:44:1c:83:9f:7f:28:ac:c6:2a:ed:3a:1f:e5:1e:ce:
d6:33:c6:2d:fe:2a:18:9d:40:af:db:b3:dc:96:71:9d:3e:1d:
02:bc:5e:5a:d4:83:c2:54:6f:4d:08:6c:ee:1b:c2:80:82:a1:
83:36:53:20:ab:45:a3:2d:a5:e3:e9:39:d8:42:a4:0d:18:98:
f9:09:25:cc:42:80:9e:2b:4f:91:80:a7:13:5c:28:13:4e:dd:
33:38:c7:c4:9c:96:66:fb:53:d9:20:ac:54:2b:1c:2c:18:6d:
b6:a2:58:80:b7:16:fc:09:ea:0e:35:1e:b9:e8:9d:c1:05:74:
2d:00:20:db:9c:72:dd:28:56:10:c7:af:3a:a5:ae:14:a3:40:
f0:1c:35:67:4b:7c:14:85:e2:0b:07:da:29:33:52:5f:00:0b:
7c:2d:28:dd:f9:55:f4:7a:07:3e:02:07:8d:9a:68:b6:3f:f3:
15:4f:d5:c2:21:6d:5a:dc:11:c8:5d:a1:b2:90:44:cb:ce:22:
f0:6b:e8:01:43:46:96:b0:c2:61:2b:cb:97:9f:dc:27:e1:2b:
d4:22:76:00:ff:ba:e3:c2:2f:c3:23:60:95:3d:7c:47:f8:3a:
5c:5d:47:fd:60:90:1f:a6:f9:29:d8:e0:ed:83:3e:ec:f9:61:
3e:2f:3e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:49:32 2026 by rpki-client