Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File: XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier: 86GVyrk6o+hWub/b7LY97ZauZOW5uMfXH3djqf98jzk=
Subject key identifier: 6F:BA:2D:C7:75:60:B2:0E:A5:37:76:A0:D3:C5:F8:3A:5C:20:6F:80
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 01A0DA5F68A109EB0D6C96AAA3491907390A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number: 1230
Signing time: Fri 25 Sep 2026 21:01:20 +0000
Manifest this update: Fri 25 Sep 2026 21:01:20 +0000
Manifest next update: Sat 26 Sep 2026 21:01:20 +0000
Files and hashes: 1: 2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa (hash: Uywc9u8hm/WxjQy7SxAxxYIxsP7UM6R3hTnst6UR3yE=)
2: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: Ka6YPmq3Q9xKKY/SiGUhligCApB+p9VSiEfn/1XExdw=)
3: XN_BGWEzxZjhg6iXlmQqSDhpeZU.roa (hash: nt1Dqzzch0xHlTVsHiqUIJZJJ7P5OL+fpAG1RALu8GE=)
4: cDTj5s606sVgmgpZ3n6Z3dU4zwA.roa (hash: Tz/Xa89Xe7rgKjUL5hIFqnaSfDilwgGaKsizO4oAEvI=)
5: fQWCmfLdQl9kgPQ8VBdW1T6y5WQ.roa (hash: c6z+qlka4njKh+KsSdKsKGpsRerVkXlOyNamnYTlXAw=)
6: hVXu442W8sHVh8F2wI339U-u6hw.roa (hash: tfQAfvgbfBIutk9LhU3LMYfREhO9WhUNbbEaKiJKIO4=)
7: pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa (hash: lF7Ckm/bTHOWi8Xtom4+V7QF19TxeutNBXq6gqp0Yv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:68:a1:09:eb:0d:6c:96:aa:a3:49:19:07:39:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Sep 25 21:01:20 2026 GMT
Not After : Sep 26 21:01:20 2026 GMT
Subject: CN=6fba2dc77560b20ea53776a0d3c5f83a5c206f80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:84:bf:56:a2:20:bf:48:95:10:4a:39:f2:88:
f5:e1:76:37:e2:11:a1:5a:b0:aa:63:e6:f8:d3:ea:
f5:e6:e1:4f:aa:9c:73:8d:f9:68:26:b8:c6:e3:6e:
f0:4f:fd:46:e3:57:bc:6c:57:da:8b:84:d9:78:db:
96:59:7e:91:c3:9b:72:b8:85:37:2c:cf:37:04:e1:
0e:cb:ed:6a:74:da:d6:3f:2c:2e:60:32:33:9c:6c:
bb:a3:00:89:df:bc:a5:25:49:ac:2e:03:87:fb:ba:
9f:33:e3:a8:b9:8d:a9:89:dc:44:d3:75:d6:5c:31:
64:c9:fd:8b:9e:52:e7:b7:d3:01:b3:bc:a4:8d:58:
18:ce:c5:eb:8b:7d:0b:a2:b6:a5:28:06:e6:58:d3:
f6:85:72:1d:09:b4:66:24:3b:94:47:29:03:02:37:
27:65:49:7d:f7:be:ab:73:be:4a:6e:4e:86:97:8e:
df:82:42:20:4b:55:69:2c:6d:cb:d2:7c:0e:4c:1e:
15:5c:6a:60:9f:2a:7b:0e:e1:03:e1:f9:78:67:aa:
83:18:fa:3c:f0:2e:e6:31:3d:4e:00:e6:52:8c:10:
e7:22:53:45:c4:0c:08:b6:37:74:cf:94:45:2d:f5:
a0:d1:93:35:ff:9c:1a:44:79:16:4c:d1:47:2d:89:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BA:2D:C7:75:60:B2:0E:A5:37:76:A0:D3:C5:F8:3A:5C:20:6F:80
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8c:ba:f0:c7:77:a7:38:e6:3a:3f:f1:e2:25:55:07:9a:5b:
87:20:2c:cb:e4:f6:b4:57:75:81:1d:b0:cd:63:cb:9f:31:62:
12:18:63:fe:1b:04:a4:35:c4:99:2b:2d:ae:c1:ae:44:b0:7d:
b5:66:1f:37:dd:e4:9b:7f:b0:b5:49:45:bf:c3:c8:bd:5c:6c:
58:87:14:b4:30:e9:35:f9:c1:32:a2:ff:b9:f0:6d:0f:8c:4b:
b9:e3:9d:f9:97:ed:d1:71:82:0b:ae:b4:81:dc:59:45:42:4a:
da:37:c4:cb:a4:c7:86:9a:ee:a7:ca:ac:73:c9:22:f5:f3:f3:
10:21:31:96:7e:26:a2:ab:9c:91:b3:a0:1e:16:f3:f0:94:e2:
be:a6:a6:05:34:51:9a:39:e0:9c:7c:3d:3f:ae:5a:27:29:ab:
ff:df:24:5f:b9:7b:0a:4c:ad:f6:ee:d7:46:41:1e:c4:ab:30:
6a:25:8d:64:a0:c9:7a:fd:ec:36:ad:61:af:f3:2f:2e:4a:5f:
57:99:9a:ca:53:42:f4:0b:b1:57:b3:16:9d:64:e0:ea:4f:ad:
d7:cc:c7:69:d0:d3:6e:b6:f5:4f:00:a1:27:ca:1b:70:ab:67:
d7:9f:4b:f4:8e:b4:6a:7b:5e:91:9f:a3:32:68:0c:82:f6:df:
43:c8:3c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:59:45 2026 by rpki-client