Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: QMs11HmyBkWza4Z/EkvqiDpNfexsMPMXpxwe3TCoXfA=
Subject key identifier: FC:EF:48:2F:F0:BF:F8:0A:9A:97:D4:19:0E:B4:2C:52:93:99:79:59
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 01A0D0121234821F649B4570A4E1A7A94EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 1A6A
Signing time: Wed 23 Sep 2026 21:00:40 +0000
Manifest this update: Wed 23 Sep 2026 21:00:40 +0000
Manifest next update: Thu 24 Sep 2026 21:00:40 +0000
Files and hashes: 1: Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa (hash: Ykk34DqNXHApsE9nxxAgQ38pONoyVUESYWMP39kBFzk=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: 6BMcyeqTwZ0Q+9Rb0eBfLZchwDDF7BfsttpNpUZP0x4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:12:34:82:1f:64:9b:45:70:a4:e1:a7:a9:4e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Sep 23 21:00:40 2026 GMT
Not After : Sep 24 21:00:40 2026 GMT
Subject: CN=fcef482ff0bff80a9a97d4190eb42c5293997959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:93:06:d5:74:86:45:a4:c5:22:66:dd:a0:31:
33:03:c7:18:25:98:f4:b2:5f:bc:71:d4:14:7e:77:
2b:05:18:60:b6:83:08:c9:02:4c:24:11:a6:cd:57:
12:14:bb:94:73:a2:9b:77:3b:48:3c:f9:06:53:3c:
7c:c2:c0:0a:e0:e0:b4:3b:bd:a1:98:f5:43:85:df:
91:f7:e0:c2:ce:15:99:5b:ca:2d:9d:f6:bf:bf:e8:
eb:e9:46:85:08:e3:30:3b:d1:4b:d1:90:66:07:9e:
f3:3d:f1:3f:42:a2:11:4c:2a:2c:9b:72:fb:46:cb:
b6:f8:7f:5d:91:07:a9:60:ad:45:f1:d1:1f:92:50:
cc:54:96:f8:c5:1a:29:71:16:06:0e:d4:ef:70:76:
a6:9d:80:3f:d0:05:67:ce:e8:a5:a2:42:7c:0b:f2:
9c:b3:6b:e7:2b:72:80:42:38:5c:f2:99:62:38:57:
b4:11:91:95:30:66:2f:8c:d0:83:d1:01:ec:eb:23:
47:46:83:dc:9c:ab:bc:94:2a:40:98:ef:81:bb:d3:
c9:00:ca:67:74:c2:c2:3b:77:4b:df:86:b4:fa:e2:
0a:06:f1:bd:75:50:69:6a:18:9c:ac:31:08:c0:de:
2c:87:2d:ea:02:6c:ee:80:84:6e:b4:1f:20:d5:9b:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EF:48:2F:F0:BF:F8:0A:9A:97:D4:19:0E:B4:2C:52:93:99:79:59
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:28:9b:76:ff:59:a2:f3:c3:59:5e:6f:29:f1:78:47:72:f0:
bc:4c:c7:01:d5:eb:4c:84:8f:b1:db:d4:79:79:97:ff:93:96:
f3:b7:3f:d9:9e:d8:38:07:b5:a8:9b:d8:72:c6:7b:15:9c:ed:
f8:71:74:da:59:96:00:22:51:66:6f:73:4f:96:99:df:6c:a1:
d2:ff:88:56:88:94:ba:62:d0:96:ca:94:ee:c0:82:48:59:22:
80:df:ce:c9:f4:ab:65:e3:c3:d7:37:ae:7f:d5:37:67:a6:ad:
b8:8d:f2:4f:2f:4d:3f:61:6c:03:e3:3f:91:a3:00:fc:3a:22:
78:85:b9:9a:2d:27:75:be:4c:ba:d6:a1:71:ef:10:75:9f:c0:
2f:bf:68:a5:2a:b0:9d:36:34:46:c7:07:ab:76:bc:f0:9d:a3:
3a:08:24:59:f3:6e:32:f1:f9:13:f4:23:e2:99:25:94:7b:f7:
76:b7:8a:be:f6:d9:1a:f9:84:2d:3a:ae:90:6b:1e:56:a9:17:
79:92:c6:fa:81:19:a3:0e:8a:4d:1f:96:cb:64:29:e2:93:bd:
51:28:56:f1:eb:b1:e8:ad:4f:da:87:fe:f9:a1:5b:7a:ae:b0:
db:01:9a:eb:31:b9:3a:ca:19:17:f2:d7:31:32:4c:a0:28:e9:
e0:72:6c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:12:28 2026 by rpki-client