Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: JYsZzjRb2XnfCnFrMSjE6fNYP7h5Lqeq4kBBOvRuD8E=
Subject key identifier: 7A:61:50:F6:7C:94:B7:C8:F5:A5:B9:A9:AE:75:D1:A4:93:65:AA:AF
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 01A0F67BCDF05983778F1FECD659DCAEB7F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 1A82
Signing time: Thu 01 Oct 2026 08:01:43 +0000
Manifest this update: Thu 01 Oct 2026 08:01:43 +0000
Manifest next update: Fri 02 Oct 2026 08:01:43 +0000
Files and hashes: 1: D7RyDh7lTL4H2jBeI3MtODxeB2w.roa (hash: j4FPb00AEU8sTGz7vN2WFChjUdkqXvKYmGt4w0kqQbw=)
2: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: mhLGYNRp7plLOJHo6usJfIpy1RMO9fawQKNJvS7s4Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:7b:cd:f0:59:83:77:8f:1f:ec:d6:59:dc:ae:b7:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: Oct 1 08:01:43 2026 GMT
Not After : Oct 2 08:01:43 2026 GMT
Subject: CN=7a6150f67c94b7c8f5a5b9a9ae75d1a49365aaaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9a:c0:e4:73:95:15:4d:1d:50:5c:06:ca:c4:
d1:46:05:a7:ba:5e:c3:44:db:9a:40:49:37:31:70:
e5:26:1c:bc:bc:52:ac:80:1a:21:69:30:f5:92:43:
18:94:7c:a6:0c:35:be:9a:9a:29:b1:1f:37:56:9d:
26:9b:fd:0d:8f:91:06:15:5c:b0:15:d8:c8:07:e1:
d3:90:7e:d0:c4:d6:b0:96:6c:74:05:96:78:67:5f:
0c:65:19:be:a6:fe:2d:bf:f4:2a:61:a6:5a:2f:a6:
c6:88:50:37:ce:5c:25:fb:eb:58:30:67:19:d8:b3:
c6:95:d5:5f:d5:3c:e0:92:bf:16:9d:5d:95:cd:f8:
c2:8e:ba:25:64:b1:06:d1:fe:57:1f:30:8c:08:7d:
13:30:8c:fc:cd:e2:db:88:f7:cd:0f:f1:41:a7:6f:
f8:f6:d7:af:8f:20:a9:59:23:50:51:d1:72:a4:43:
fe:2c:5e:df:96:92:f5:cc:42:75:89:3e:4d:8f:11:
63:bc:30:cd:7c:db:bd:44:15:b2:30:bf:3e:e6:02:
25:80:7f:24:8f:c3:16:df:f9:9a:4c:15:02:d5:d2:
59:95:d1:f6:1e:28:2f:bc:19:f1:25:2f:c7:38:cd:
43:6f:c6:09:c1:4f:c6:ef:26:0b:cd:64:d2:93:9e:
29:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:61:50:F6:7C:94:B7:C8:F5:A5:B9:A9:AE:75:D1:A4:93:65:AA:AF
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:52:06:fb:b8:70:fa:75:46:2d:dc:d8:de:b3:6e:a4:7a:2b:
f2:fc:f0:8a:ca:72:cd:78:5f:8d:43:38:5f:27:0f:42:70:af:
cc:91:95:89:04:db:c1:30:c8:54:f0:c8:c3:3d:db:cf:e6:7b:
b2:57:af:56:de:7d:d8:76:78:9c:15:39:17:18:9d:07:0f:e2:
12:78:78:f4:37:08:cf:ff:93:61:0e:87:02:df:df:fb:65:7a:
1a:2f:a7:80:6b:1b:b0:e3:45:5d:04:30:93:3a:be:b8:b3:98:
da:4f:1d:0a:6e:0d:b8:6d:b2:e3:12:d2:0e:dc:85:19:53:07:
2f:86:d4:ff:82:8a:78:ac:77:b5:02:54:c5:92:0e:d2:02:a2:
d7:3a:b6:6e:af:39:e3:4c:51:52:c9:86:1f:7d:28:2f:34:30:
39:74:85:47:3a:66:35:80:10:9f:2a:86:db:4f:87:49:16:19:
4c:03:a6:19:a0:ac:cd:76:e5:08:6d:23:0d:db:90:8a:ce:0e:
b9:57:22:12:f9:1f:d1:dc:0f:45:cb:68:ef:23:d1:d8:ad:d3:
36:dd:a2:73:83:60:5c:42:d8:7b:6c:68:af:92:2b:f3:8d:d7:
3b:4f:41:ac:27:f1:b1:a6:6c:65:dc:88:19:0e:9c:0c:f9:80:
6d:bf:f1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 11:08:13 2026 by rpki-client