
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
File: Xo0HtF99gxJMn4wPrAO-wCRos34.mft (raw, json)
Hash identifier: 6z6z3Z9w9Y3Ec0GEQz1PMqqqg3/0j0vzq4zWu9doxqM=
Subject key identifier: BF:A1:44:5D:5B:48:02:0A:15:41:C9:8F:87:F1:25:AA:41:A0:9D:E2
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 01A0D0EDB8EA7130862764FA5FE4319B3860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
Manifest number: 1A8A
Signing time: Thu 24 Sep 2026 01:00:35 +0000
Manifest this update: Thu 24 Sep 2026 01:00:35 +0000
Manifest next update: Fri 25 Sep 2026 01:00:35 +0000
Files and hashes: 1: 5Hw5SCG7_OPw7F7WvcmHt1ubypc.roa (hash: SMRdVTfHclZq4V+gvOodEyeG5zAH5sDMph36bqmt3rk=)
2: AtV2hA3YXGqznUtgR3uB6bOY8lI.roa (hash: E9jIH1WdWmHG5Hqaca5c+6ilzJbhu15ZC+JxJ/GcG+0=)
3: STKH0GmYkagldfyopz-70YJ69EQ.roa (hash: h88I+byL++CNYEweLeezPhZiJJxRIwysZUnB4MEC57E=)
4: WQ55TI7O_Y3_x9hkYSvF2UvokSE.roa (hash: TZOmAdpezSY7WR8DK0sxR8J5sP9pIOwu7JtZmeFi+dA=)
5: Xo0HtF99gxJMn4wPrAO-wCRos34.crl (hash: Qmm0bB/J/+7axG3lwhpPzJmH+3OAm1BIp+/mXyoyBsc=)
6: gvzfKPjwNxS-AsBIh7ZgA5tTa0Q.roa (hash: j8wlfHeXoBqn/3pP04ScQRvLSMC6Ag5BftKcYosNfBM=)
7: hgl809tjaX7Gbv4DItgm3ScJV_4.roa (hash: 1spmr6hLWhe0MEAFi9Vr2mFMBf7qQUqSQroJeyohJqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:ed:b8:ea:71:30:86:27:64:fa:5f:e4:31:9b:38:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Sep 24 01:00:35 2026 GMT
Not After : Sep 25 01:00:35 2026 GMT
Subject: CN=bfa1445d5b48020a1541c98f87f125aa41a09de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f7:14:99:6a:2b:6f:8a:76:cd:92:ec:03:54:
9c:ed:dd:36:38:56:b8:ed:ae:51:fd:c6:e5:dd:aa:
17:0d:98:a2:45:2c:c5:03:4a:0d:45:76:ae:9c:a4:
71:b8:c7:20:53:ab:ff:d2:b8:0b:50:0c:e1:f8:0b:
78:d1:c6:16:5a:8a:d6:89:06:6a:fe:a9:3f:4a:dc:
15:fa:57:39:c9:8d:11:76:85:4e:91:eb:9f:a5:90:
b1:f8:03:d0:bd:e3:ca:ea:f2:59:ad:a2:18:29:10:
66:2a:af:57:8c:ef:63:61:69:49:94:4b:81:7f:f2:
d5:cf:87:c0:b0:d8:92:b5:80:4c:eb:92:5c:0d:2d:
44:20:e0:85:d8:2f:6a:c4:60:d6:62:7a:b1:9c:e0:
2c:49:c4:e5:16:5e:e3:11:f2:58:95:91:a5:07:86:
0f:44:9a:9d:74:b7:08:f5:10:56:27:eb:09:c3:24:
60:d4:dd:1c:3c:95:cf:dd:fa:3c:01:82:bf:b6:e6:
e7:49:9f:03:45:03:dd:11:14:8c:37:9e:05:06:e5:
45:33:04:b6:d1:12:c8:7e:ac:15:35:92:76:ce:6a:
7e:0c:76:97:f3:9a:cd:ac:2b:01:b8:19:ad:f5:f9:
75:2a:19:f3:ea:26:6f:a8:f7:1c:91:4a:aa:e9:e0:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A1:44:5D:5B:48:02:0A:15:41:C9:8F:87:F1:25:AA:41:A0:9D:E2
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:da:0b:a7:53:4f:15:df:87:9b:43:e3:95:d7:47:1c:f7:e3:
02:64:77:6d:c1:94:2d:52:6e:fa:f7:96:38:8f:73:58:9e:15:
4b:02:2d:23:a0:91:7b:bc:1b:38:ec:3f:0d:c6:ee:51:28:1b:
75:bf:6c:58:2f:ac:7e:ff:07:75:1f:68:c3:a0:a6:24:53:b0:
ed:ef:c8:f0:23:b7:16:69:7a:e1:f2:69:4a:40:06:48:90:b7:
3e:ed:40:02:23:7c:1f:9a:96:a7:51:1a:af:80:a9:cb:2d:18:
79:6b:e8:26:02:b3:57:87:b4:95:9a:e0:3f:41:8a:2c:6e:7b:
bc:59:e9:20:3d:7d:7a:86:a8:cb:62:fe:7d:c2:a5:c8:db:b1:
dc:f8:80:9e:e1:d6:04:44:ff:9b:18:bb:66:10:30:90:27:cf:
21:02:43:57:38:af:aa:18:d5:32:e0:81:f0:40:81:e8:f2:48:
f3:2b:31:83:ef:40:f0:3c:07:07:42:7f:b0:1f:88:60:32:5d:
0d:9a:40:5a:f4:9a:47:76:39:de:48:82:49:7c:f1:81:b6:91:
43:97:77:f5:61:aa:91:56:b8:5f:1d:ea:c1:01:4e:de:79:d8:
36:22:51:5d:7f:08:60:c4:c3:78:58:ef:b0:bd:58:40:9c:1b:
90:c1:a5:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:12:52 2026 by rpki-client