Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
File: XM3soXHkIseck4wnMqkNSKjFPAY.mft (raw, json)
Hash identifier: K0vZuoiEVc1ZgS/+izpeSxg+7cQWRlCq7DgNaS3U87E=
Subject key identifier: 70:8C:08:CA:CB:DC:AA:3F:A6:4F:3E:A5:40:08:3E:7D:C6:54:C0:B6
Authority key identifier: 5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
Certificate issuer: /CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Certificate serial: 01A0CFDB266A7FCBE8DFED418EC8EEE6E160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
Manifest number: 1A7C
Signing time: Wed 23 Sep 2026 20:00:40 +0000
Manifest this update: Wed 23 Sep 2026 20:00:40 +0000
Manifest next update: Thu 24 Sep 2026 20:00:40 +0000
Files and hashes: 1: 3LD6WIAhD_aIwcAd82VY9zFCI7I.roa (hash: 8HYsxXGY/mwoE0plHWwgkDJBrIUo/WJsQuXAN4HGlQY=)
2: Vcrxz5upkyAccEnWWkm1jKbiHCU.roa (hash: DF9acpeNSt3QcU3RLTkyAoSPyBTgnqf4yVUPlH/IEUw=)
3: XM3soXHkIseck4wnMqkNSKjFPAY.crl (hash: n52Fe9QkbY64SxObPyGPSzHWu4JPw1ObgsMPGIAIgP4=)
4: d61QkjArffvt5fKMvIXWF8nIPcE.roa (hash: n77B2cSkql2uFL2mgGTUwbPJJQCN8pumVVKiMumdlmQ=)
5: vEmqZz7TyOIZcMFGWq5sr0qWa9c.roa (hash: rxEx9pdbLlzRrifCSn69fPPljhSEaN1XwXY/F5cFM9M=)
6: x9IxkDkzEkDokkzWh7NpXLA6pSU.roa (hash: HHdD49yqs88lPuXMSPj56CT2/FilbQVuZopBY9/6oH8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:db:26:6a:7f:cb:e8:df:ed:41:8e:c8:ee:e6:e1:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ccdeca171e422c79c938c2732a90d48a8c53c06
Validity
Not Before: Sep 23 20:00:40 2026 GMT
Not After : Sep 24 20:00:40 2026 GMT
Subject: CN=708c08cacbdcaa3fa64f3ea540083e7dc654c0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:77:24:0a:c9:e7:98:22:c2:08:f9:a2:cf:dd:
94:cb:45:15:91:27:9b:12:48:93:dc:ab:db:fc:ac:
36:bc:6d:f4:4d:f5:e1:55:4b:4d:51:95:3a:5a:b6:
a2:08:d1:24:c3:c9:42:92:dd:15:10:5f:da:f7:b8:
78:99:a6:7c:c2:ca:1d:74:a4:d0:1b:8f:1e:e9:a4:
29:b0:aa:64:89:82:e1:79:4d:fb:ae:21:35:3a:36:
00:b6:71:6c:63:f9:09:28:3e:43:41:ad:36:d5:ec:
42:ce:7d:c3:cd:52:47:ba:88:57:c9:e9:8c:9f:c8:
3b:3c:a9:d6:4a:75:f1:fa:e8:03:da:1c:7e:4a:05:
81:ea:de:d5:60:d9:e9:f4:e8:df:11:15:cc:bd:a7:
30:14:3e:7b:c3:28:f0:c0:b2:fa:b6:52:eb:66:24:
bc:6d:f9:24:70:59:f1:26:10:c1:03:66:c5:23:0b:
15:c2:2d:36:b4:90:11:8f:2f:9c:1e:58:0b:ff:e5:
a7:6b:75:da:f6:a4:42:e3:5f:d5:d6:4c:1b:e3:4f:
b8:84:ef:55:61:73:34:98:da:80:13:85:0d:f5:85:
b3:1b:a8:e4:52:4d:1c:4d:6b:41:80:8e:e4:93:7e:
77:e2:40:f4:7a:aa:a8:0f:5c:29:1a:fd:e0:6c:5c:
4b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:8C:08:CA:CB:DC:AA:3F:A6:4F:3E:A5:40:08:3E:7D:C6:54:C0:B6
X509v3 Authority Key Identifier:
keyid:5C:CD:EC:A1:71:E4:22:C7:9C:93:8C:27:32:A9:0D:48:A8:C5:3C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XM3soXHkIseck4wnMqkNSKjFPAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/b8f5e6-c951-4ddb-b4f5-a881ec8228b5/1/XM3soXHkIseck4wnMqkNSKjFPAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c1:9e:c3:0e:f0:63:59:13:49:fd:75:a4:6d:de:ca:9d:00:
97:37:c4:0d:74:98:7e:ee:a6:ad:bc:a7:fd:13:a4:6d:45:fd:
1e:57:e3:24:1f:7f:9c:01:f6:1a:6c:f0:38:cd:65:85:e6:7b:
6d:b3:64:9e:e6:ce:17:1c:d5:75:fb:86:fb:e6:24:c5:c2:4c:
61:6a:fe:16:83:14:12:c5:4c:df:60:1d:ed:05:f1:e0:b0:64:
6f:27:c4:4f:f1:60:be:f9:3e:15:f3:9b:21:a8:41:fe:6b:bc:
9b:ec:01:16:44:3d:f2:d1:cb:85:7c:d1:b3:9f:22:a2:6a:96:
bd:0a:ad:f4:1b:62:2f:b0:b4:5e:75:64:0d:d2:97:c8:2b:df:
ea:b4:46:d5:eb:7a:7f:4c:f1:85:e8:3c:6b:07:5b:57:9d:ba:
c4:5d:0f:0d:a5:26:d8:1f:40:ea:a7:e5:72:e8:93:a9:ea:cf:
b6:c4:aa:8e:4d:3a:e9:45:0d:6b:46:47:9a:2b:d8:9f:fa:47:
48:8f:ac:42:8a:d2:f7:38:34:22:6c:b2:c6:ee:c9:4e:62:69:
c7:fb:2f:ba:76:da:a2:c3:39:6b:14:12:f7:59:07:6f:ca:e3:
62:ee:9e:82:d2:ac:4d:7a:ef:1f:bc:c7:13:92:bd:f7:0a:27:
c2:cc:5f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 03:11:17 2026 by rpki-client