Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: 7K6nBA9BP3HmdIK1psroGMQYeKH1MfrnP83/d3PO1Yk=
Subject key identifier: E8:6D:F2:F5:45:6B:71:7C:6B:0C:1E:7C:4B:E5:C2:4E:EB:43:CF:AB
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 01A0E02A42C4432D0B842E4268E01561DADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 1A72
Signing time: Sun 27 Sep 2026 00:01:00 +0000
Manifest this update: Sun 27 Sep 2026 00:01:00 +0000
Manifest next update: Mon 28 Sep 2026 00:01:00 +0000
Files and hashes: 1: 0ZEt5hO5jk8I5B1ric3lV5QOPjY.roa (hash: 2SzUB4ARPZ7+BuiAiToaYolTUFVyZHL4/odctgbUciE=)
2: PX4jRvV2Is0w59EuWq6-Cko1_qM.roa (hash: o5zSrmvOazS6EGtXXnfbpDTf59xV6PS54zdbjnXbBvw=)
3: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: xSJiOFv/BQFwKzahNbtrzOYe4FgcSqNas6FhuSlqsa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:42:c4:43:2d:0b:84:2e:42:68:e0:15:61:da:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Sep 27 00:01:00 2026 GMT
Not After : Sep 28 00:01:00 2026 GMT
Subject: CN=e86df2f5456b717c6b0c1e7c4be5c24eeb43cfab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:1e:f6:c2:30:ca:07:37:73:16:3f:ee:ff:
40:2a:15:aa:da:ee:dd:8b:90:d4:34:f6:a9:f6:95:
d7:0e:42:19:80:45:69:2c:f1:75:5f:fa:d4:40:5b:
bb:8b:f9:15:f7:08:e9:c3:e4:ea:f0:d6:fe:42:88:
e3:1a:cf:b7:b6:f9:2e:a6:ae:23:bc:a5:71:b6:0c:
79:8b:8b:f9:35:1c:a7:9a:88:31:1f:f6:e0:d3:5a:
8a:4a:63:7b:cd:08:74:c5:f1:a3:71:ab:b8:ac:9d:
28:3b:db:d8:5e:c9:ab:e8:77:8e:86:01:db:dc:2f:
ee:9f:02:24:9b:4a:84:01:92:17:e2:a5:45:1d:06:
43:1c:ab:0c:8f:99:f8:81:db:eb:50:4f:80:9f:33:
86:cc:e0:a8:b5:e6:28:7f:72:86:d4:df:68:7c:bf:
a1:a5:16:a4:d7:ad:7c:7b:8a:59:5f:85:f5:79:c9:
f7:5b:c6:88:f5:34:ce:1d:ac:45:a9:d9:07:07:2e:
d6:43:97:5a:09:50:f3:c2:00:e3:b4:4d:4f:e2:71:
4f:4c:a4:a8:fa:ce:cb:79:a9:70:fc:a3:f1:6d:54:
4d:50:0e:4d:26:a6:90:17:bf:68:08:7d:ad:29:9b:
2f:d7:18:83:a1:ef:87:fb:e1:0d:30:18:42:32:3d:
b6:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:6D:F2:F5:45:6B:71:7C:6B:0C:1E:7C:4B:E5:C2:4E:EB:43:CF:AB
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:48:17:87:3d:b2:59:13:6f:f6:57:3a:52:d5:e8:8a:80:aa:
43:21:e3:ec:c7:be:aa:0f:bc:99:48:af:57:dd:f9:72:f9:34:
da:64:74:f2:30:bc:fc:c1:d1:65:09:52:67:1a:86:d2:4a:72:
35:f1:58:40:07:36:ad:ca:57:00:29:59:a7:fa:ed:98:41:c1:
f6:19:52:ac:73:35:7a:40:ed:d0:f0:f8:0a:58:bf:bb:8f:52:
95:05:34:5b:2f:d4:6c:20:02:16:a2:6c:6e:c6:78:de:9b:ee:
c3:a9:5c:4c:32:f7:f4:da:88:fa:0c:20:41:47:12:16:93:b2:
19:0f:ef:e1:e8:a4:f1:3c:89:7e:13:c8:35:d9:11:35:9e:be:
2b:a3:a7:fe:00:0a:ea:67:75:01:94:76:71:81:39:6e:f3:93:
54:aa:65:dc:29:a3:e8:dd:cf:2f:bd:39:99:db:4f:d2:f7:52:
9a:17:8e:29:f8:f1:42:1c:5d:51:51:00:e7:bf:52:09:37:ce:
28:54:ec:69:74:c6:f7:5d:a2:29:15:24:d8:bf:af:2a:30:f8:
04:84:e4:7b:b4:33:f3:3f:d7:fb:3d:7a:ec:aa:33:1d:b1:0f:
8d:42:ae:02:a8:9f:25:f0:0a:64:a2:99:7f:07:8e:78:65:91:
3c:be:ad:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:54:21 2026 by rpki-client