Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: xumV6E0sjNTLpgU0KE4SsbnBBQY/BfEG4Vo6yB0tO3Y=
Subject key identifier: E6:14:2C:89:F3:A9:6A:37:B3:DE:3B:32:EA:CC:8A:25:6A:43:4E:5F
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 01A0D3EF250D656E8239A88B0DB3FF755611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 16A9
Signing time: Thu 24 Sep 2026 15:01:00 +0000
Manifest this update: Thu 24 Sep 2026 15:01:00 +0000
Manifest next update: Fri 25 Sep 2026 15:01:00 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: 2YEsxOs0mFlHr2CN2xKEznZWD5YlSGuXqkRZ6GY+QU0=)
2: fDzIkCC4HQZF8d8gvy277WuuRYM.roa (hash: TzMFdxwnyUIL4oJ9MUVrNEjKX81ekLEZoq92hFxo3V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:25:0d:65:6e:82:39:a8:8b:0d:b3:ff:75:56:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Sep 24 15:01:00 2026 GMT
Not After : Sep 25 15:01:00 2026 GMT
Subject: CN=e6142c89f3a96a37b3de3b32eacc8a256a434e5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:29:74:09:8b:14:01:2d:81:e9:96:98:5a:16:
5b:80:73:7a:5f:7c:73:a6:97:fa:c2:a5:0e:de:11:
9f:c2:6b:5e:af:60:bd:57:13:72:96:0c:f5:3d:37:
de:17:c6:26:78:c9:d7:70:65:e0:7d:60:01:4a:0b:
ae:15:7a:0c:83:ac:a0:93:9b:01:cc:ad:c4:5e:13:
f2:db:3d:2e:cd:0b:6a:bc:fd:ec:b1:15:f4:4b:06:
b8:10:9e:80:0f:64:83:e7:fb:28:ae:29:68:50:8a:
f7:b3:f4:8b:c3:81:d9:1d:6d:de:c1:87:ae:07:99:
92:3a:f5:35:c9:65:59:85:e6:b5:3d:46:bf:67:50:
63:6f:8f:6c:7d:5b:da:be:96:9a:16:19:17:7e:5d:
79:56:c8:83:bc:c0:b3:3e:72:67:be:54:2a:51:54:
cc:35:05:f9:0f:3f:79:12:de:f2:9d:67:89:cc:2d:
f1:fe:c9:81:64:ac:3e:46:f3:a0:f6:c6:82:59:39:
2b:72:90:32:b4:c0:5f:c2:03:39:ae:06:8f:04:bd:
4e:ac:de:65:3a:c2:63:08:7a:31:33:e8:11:38:34:
eb:ce:8e:84:e2:41:e4:76:14:04:ab:5e:b6:d6:18:
6b:4b:a8:6d:20:a8:65:1e:d7:d2:3d:ed:16:b7:40:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:14:2C:89:F3:A9:6A:37:B3:DE:3B:32:EA:CC:8A:25:6A:43:4E:5F
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:26:8b:07:92:fa:29:c8:b6:de:1d:54:0f:fc:95:bf:b4:b7:
93:87:28:99:a0:e0:15:91:be:6f:56:df:b3:fc:db:31:ba:e1:
e2:4e:34:94:0c:62:e9:bf:42:a8:99:7c:34:98:68:2e:ae:0c:
43:bf:b2:9d:b7:4a:a1:35:78:b1:ad:07:0c:18:c0:f5:f3:5c:
82:05:01:3c:4a:9b:8c:5c:30:45:3d:b9:58:8d:ce:1d:11:f4:
47:71:2d:2f:f0:5c:3f:5d:fb:76:26:4c:20:aa:2c:3a:49:35:
17:3f:81:df:38:c6:cc:6a:81:02:04:e5:6e:1b:2c:d0:0f:3f:
ec:e5:4f:91:af:54:d0:7d:ab:df:d0:94:ea:27:1f:b1:0c:93:
7b:d9:ae:ba:78:56:55:2e:13:45:58:ed:a7:0e:a8:54:bc:16:
fd:1d:e9:df:4e:c3:3c:f5:33:14:83:b3:94:35:f6:ee:d1:0a:
61:56:00:eb:b3:79:ac:3f:68:f6:c3:b9:02:88:a2:a9:73:82:
80:a6:7f:95:ab:b2:03:0b:37:57:f5:69:9c:98:b7:2a:d1:43:
b9:3d:3e:cc:85:87:c1:a6:ae:71:3b:57:be:3a:89:3b:21:9e:
4e:b2:e0:19:f3:9f:17:19:b4:d5:b3:a7:92:82:ff:ee:1b:e0:
5c:bb:6d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:48:04 2026 by rpki-client