Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
File: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft (raw, json)
Hash identifier: 6NV4/vyJZrQzgfqJcWVAu8u6ybFwDWVAh5NAX8cT/10=
Subject key identifier: 85:ED:82:C9:90:53:09:AD:AA:05:2B:E0:63:AF:C1:F1:E3:BC:F3:84
Authority key identifier: 5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
Certificate issuer: /CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Certificate serial: 01A0E8F65C35EB22F8C832F72DD6BD0A88D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
Manifest number: 0290
Signing time: Mon 28 Sep 2026 17:00:54 +0000
Manifest this update: Mon 28 Sep 2026 17:00:54 +0000
Manifest next update: Tue 29 Sep 2026 17:00:54 +0000
Files and hashes: 1: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl (hash: L5DlUo4oIZ/GyT7m5X6tnkysG7IAqbmNihPkY+NCkMU=)
2: sILmqECvPUOwIkOHOOhRTao7v74.roa (hash: llFUAC/mu2lwxUsJ40bzdjW3ddWww0AROSXO714SrqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:f6:5c:35:eb:22:f8:c8:32:f7:2d:d6:bd:0a:88:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Validity
Not Before: Sep 28 17:00:54 2026 GMT
Not After : Sep 29 17:00:54 2026 GMT
Subject: CN=85ed82c9905309adaa052be063afc1f1e3bcf384
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:46:ec:c2:44:7f:5a:2c:52:5d:38:4d:bf:de:
b3:64:2a:94:c5:39:f4:63:b8:fc:d5:40:31:eb:da:
c8:c0:53:7e:8d:e3:a3:b2:0c:db:94:32:4b:fa:0c:
5c:33:13:1c:a1:e1:16:44:e0:8b:98:24:68:10:cb:
41:e6:2e:e6:19:c4:d7:bc:ef:81:48:7c:ed:ef:e3:
7b:fd:ec:a4:83:f0:cd:64:ed:f9:93:ba:93:5d:f9:
b1:69:c5:65:f4:cd:4c:c0:2a:8b:d2:bf:49:27:b7:
b2:11:a8:02:5b:9c:f2:e1:28:ed:88:a0:a2:b6:24:
ef:63:23:aa:34:d2:97:f5:86:f3:68:2b:ff:d0:76:
4c:02:f2:04:9f:56:ef:65:ac:e2:c2:ea:ba:3f:ac:
f5:0d:cd:0b:09:2b:a7:ae:d3:67:0b:3d:a5:ee:84:
7b:ec:00:0c:af:73:37:59:d5:89:f0:e5:8b:be:77:
85:bc:aa:f0:50:2f:a7:29:59:43:fe:43:24:b5:c1:
70:41:fd:e8:76:aa:fb:2f:87:2c:ef:da:53:da:49:
af:7b:aa:34:6c:a6:99:da:e8:a5:c6:0d:94:22:f4:
fc:bb:d7:c4:b0:0f:a8:f1:52:19:f4:4e:25:a5:14:
6f:6b:a9:6a:dc:da:00:39:43:13:d0:d2:6c:42:21:
26:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:ED:82:C9:90:53:09:AD:AA:05:2B:E0:63:AF:C1:F1:E3:BC:F3:84
X509v3 Authority Key Identifier:
keyid:5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:7b:34:04:2c:cb:ef:44:3f:7a:39:91:18:c6:ad:99:69:53:
18:1c:dd:3e:62:de:23:f3:31:fb:77:4c:e1:75:ed:90:3a:01:
ef:6a:53:c8:5b:44:79:84:b9:bb:a4:98:6a:e5:9a:a5:75:08:
d0:4b:bb:6b:b4:d4:ca:67:f9:f1:1a:ff:0e:4f:ef:4a:79:1c:
5a:d7:27:fc:cf:cd:89:24:ad:1c:ae:00:19:e4:48:42:4d:d0:
85:44:19:8d:3c:58:11:02:18:e2:ff:43:71:a8:24:44:28:c6:
c0:7f:29:ff:64:b0:43:4c:f9:4d:40:a1:a9:6e:ad:93:e1:fe:
a3:72:69:ee:86:f9:57:a6:06:8e:49:ed:e7:b2:60:46:ec:5e:
4b:00:67:7b:40:7c:79:54:0e:ed:e6:90:a6:40:56:e5:16:5e:
b2:56:a1:f5:a3:26:ff:65:bf:e6:0c:04:2e:d0:f1:a2:2a:74:
81:24:a1:be:5c:3b:1a:f6:f2:de:94:49:69:23:bd:8a:84:ef:
e7:5e:fb:97:1c:eb:1f:e8:4a:fb:08:d8:d3:dc:29:9c:13:eb:
96:12:9f:e4:75:ae:07:67:d6:e9:b8:cc:22:c0:30:40:02:ef:
17:1e:bb:3a:78:91:37:3e:92:f8:93:2b:b2:a2:4b:2f:96:e1:
f5:df:08:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:48:56 2026 by rpki-client