Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: XXAQLGGxYNB6VdHKCiTm1e0KgnusETTc2DQOU3Rqw04=
Subject key identifier: 10:9D:80:11:24:FF:BE:A8:2D:F8:1C:FA:A3:BE:C0:6F:CA:44:0A:21
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 01A0D5029801FC888FD12CE7EFE1140D6975
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 0863
Signing time: Thu 24 Sep 2026 20:01:51 +0000
Manifest this update: Thu 24 Sep 2026 20:01:51 +0000
Manifest next update: Fri 25 Sep 2026 20:01:51 +0000
Files and hashes: 1: Gkzr8cmq5l-SJW535VAbg6PLMB0.roa (hash: Y4hmK6YPKNo9n40cQMscOcZSxtVZskzUJfJT11sn8vQ=)
2: OpYOp0A5IPKJ7jbcXskpSxQGlaQ.roa (hash: rADmm3meTWoAJpb+yfOPFFjI2xZfTZaGcVmBPuOR9B8=)
3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: /Vs0Rq8CFax4BQa6iMpqxckIyM+z0Eap1VyO76az8HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:02:98:01:fc:88:8f:d1:2c:e7:ef:e1:14:0d:69:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Sep 24 20:01:51 2026 GMT
Not After : Sep 25 20:01:51 2026 GMT
Subject: CN=109d801124ffbea82df81cfaa3bec06fca440a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0f:7e:b1:a7:5c:48:36:d9:0f:44:bb:0a:fb:
5f:63:36:fa:2a:66:96:61:21:cb:61:60:32:40:4b:
dc:14:2d:3b:16:94:de:65:38:46:9c:f0:f4:2a:5b:
be:de:6c:74:7c:e6:48:e9:29:ed:21:44:16:74:e0:
c5:58:a0:ab:ec:6b:31:0a:1c:00:4a:88:14:fd:3b:
65:84:01:31:1f:de:e4:78:c0:aa:51:09:df:d1:10:
46:1c:5f:e9:00:b6:53:97:83:17:38:dc:5a:67:df:
57:68:3b:aa:24:1a:3b:13:6b:19:a5:b2:c3:b5:72:
09:ba:15:94:f0:5b:bd:2c:5a:0d:02:bf:c3:9e:f9:
85:37:70:97:76:6f:86:d8:25:d7:25:d3:29:53:86:
81:47:d4:f7:ea:67:b0:5c:de:02:1e:af:6d:44:b2:
b7:ff:0c:5d:42:37:de:1f:f4:98:b0:84:11:b0:6c:
9d:ed:a1:de:fc:ea:0e:b5:59:58:fa:9c:ac:23:c1:
98:3f:e3:57:5e:04:e9:6c:ab:7a:c9:3a:ac:2d:9e:
60:a3:7d:95:21:af:af:0e:d1:64:68:0c:dd:26:5e:
a9:04:66:4d:27:bb:14:1f:ce:54:9b:07:c6:ad:e9:
2f:fa:01:5e:41:74:f6:25:0a:4b:a2:62:19:ea:7b:
aa:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:9D:80:11:24:FF:BE:A8:2D:F8:1C:FA:A3:BE:C0:6F:CA:44:0A:21
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:58:71:ef:78:5d:0b:00:91:e3:4b:34:69:a2:85:81:7f:e3:
d7:9b:f3:8e:1f:cf:83:28:7f:2a:4b:bd:bf:d0:fd:23:de:2d:
9a:73:8e:22:ff:f8:5c:67:e6:f9:59:14:54:4f:e9:03:91:00:
93:49:19:22:8c:72:83:c6:31:76:83:7e:d3:f8:29:e0:0e:54:
7e:08:9a:bb:37:f2:4d:82:fe:82:3a:32:03:af:c4:90:ed:da:
2b:1c:73:12:c5:21:fe:a3:fd:40:9d:53:f9:e7:5d:29:17:39:
40:14:85:86:8e:bf:b5:7c:78:69:72:fa:9d:80:3c:e1:4c:5d:
c2:15:96:fe:d5:7e:41:bd:94:4c:12:19:35:1e:19:e5:a7:50:
9e:4f:8d:53:ae:ac:0b:cf:96:58:e5:39:c6:51:a4:ea:0e:a5:
d5:fd:3a:4a:15:7c:32:71:2c:b2:6f:7b:f9:e2:cb:37:f5:d6:
87:c0:7e:5b:f0:bf:13:4b:2f:eb:cc:67:70:6f:ff:b3:e3:4f:
20:03:9a:fe:38:72:d2:13:29:f1:9b:d9:dd:df:99:8d:ee:ad:
56:3e:27:27:e0:38:c7:53:0c:58:d1:8b:30:2e:5f:4b:71:86:
9d:e1:f9:b8:6e:ec:2b:76:22:a1:56:e9:67:ed:d7:a9:84:96:
31:b3:c6:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:03:02 2026 by rpki-client