Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json)
Hash identifier: NeY6HXhhKfZx61Dxjo4LnaMCNDeYzP8BKsaNepb+NFw=
Subject key identifier: 8F:7E:66:CA:F8:87:58:05:50:AF:FD:DD:6B:E9:EE:A6:3D:91:5B:E7
Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Certificate serial: 01A0D3B8FCA715609F597BF8B08883752308
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
Manifest number: 0986
Signing time: Thu 24 Sep 2026 14:01:50 +0000
Manifest this update: Thu 24 Sep 2026 14:01:50 +0000
Manifest next update: Fri 25 Sep 2026 14:01:50 +0000
Files and hashes: 1: OBYyhiA-o_Lu_Sii3K0csw4HB8Q.roa (hash: losaCS7PxxPceDw56uDFnzA7tz476/wdte0ltw/SmOk=)
2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: pHPvPM9MySj55iaFAOXhABumsYzNeORSMk+10cdCIM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:b8:fc:a7:15:60:9f:59:7b:f8:b0:88:83:75:23:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Validity
Not Before: Sep 24 14:01:50 2026 GMT
Not After : Sep 25 14:01:50 2026 GMT
Subject: CN=8f7e66caf887580550affddd6be9eea63d915be7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:b2:b6:75:29:15:87:6e:70:98:dc:50:5a:69:
2d:c8:bb:76:3a:ac:62:8f:ac:c5:b6:de:02:e2:f0:
a2:ce:b6:a7:c3:53:5e:69:ae:a1:f6:73:b9:37:88:
95:79:b7:97:ab:fe:cc:f6:f2:e2:5d:f6:bd:e0:da:
4d:83:a8:f9:0f:be:c5:54:30:b8:a5:89:2e:e5:f6:
58:df:eb:aa:9d:2e:c9:35:43:89:2f:3f:26:f1:8f:
de:e2:7d:51:a2:a9:9d:0e:69:26:ba:00:20:0f:60:
87:d5:4c:43:75:14:3a:f0:a6:9e:37:0a:53:e4:c5:
22:92:4c:77:d3:3b:db:0c:73:f5:cb:31:00:a7:48:
e9:18:fd:19:d9:a6:20:8d:27:e3:e1:55:bd:76:d4:
20:7c:de:d8:13:c5:67:00:47:63:53:f0:3c:03:92:
20:a3:18:7d:cb:8b:72:6c:48:52:7b:e0:85:b1:fa:
6c:d3:bd:be:7e:39:43:c9:82:12:2c:06:f7:4f:c9:
15:a6:d9:6f:bf:69:11:2b:08:73:93:4e:ba:31:63:
3e:bc:6a:48:58:27:4e:0b:e7:4c:e2:86:87:be:1a:
9c:c3:ac:f1:42:e9:14:67:9d:ed:27:e5:a2:ed:a3:
c6:9a:b9:36:ce:5d:3b:27:d6:e2:d7:8d:1e:d3:af:
53:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7E:66:CA:F8:87:58:05:50:AF:FD:DD:6B:E9:EE:A6:3D:91:5B:E7
X509v3 Authority Key Identifier:
keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:d3:21:8b:df:a2:5b:71:cd:e4:f9:4f:1d:0c:27:4b:5b:ae:
e4:34:13:af:6a:fa:62:30:8c:3e:91:ea:3c:dd:01:d8:ed:6d:
0d:3b:15:c1:67:05:bc:64:6f:85:3f:ad:dc:a6:83:c2:f1:45:
75:dd:77:71:7d:5a:e9:10:72:13:58:0d:ed:e5:ce:ad:c2:d6:
56:e6:36:7e:05:3e:39:6a:b0:c8:fa:14:94:d0:6a:81:b7:65:
82:23:dd:95:b3:0d:ef:fa:5e:4a:b7:a8:d8:6c:96:03:76:aa:
c2:36:42:47:25:4a:e0:3b:6c:12:14:78:bd:d9:95:5e:2b:a4:
17:94:c8:c5:71:f5:a5:e9:9d:2a:cf:65:61:1e:f6:61:54:15:
7c:59:b5:11:0f:3f:1e:d8:d9:43:6a:53:95:1f:2c:90:be:35:
52:ba:a2:ff:b7:0b:6b:fd:df:e8:fd:bd:1b:35:cd:37:6e:46:
23:69:4e:06:46:04:ff:eb:de:fb:de:22:97:64:82:5c:3e:71:
03:c7:de:90:34:25:5d:dc:69:c8:c4:27:32:80:32:52:e2:11:
6a:aa:a5:11:71:15:6e:d7:24:c6:18:e7:39:a1:97:55:b7:5f:
aa:b1:4c:c2:b0:16:23:a1:a0:a9:c4:f4:c9:92:18:51:7f:0c:
3c:aa:8d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:16:54 2026 by rpki-client