Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
File: XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft (raw, json)
Hash identifier: erDirSGWZmUG60Oarj2joIv8pRKN6R9Sdui/4kHbWvQ=
Subject key identifier: 61:28:A0:C4:9E:9F:99:F1:E0:A9:BB:0D:CB:D7:42:5C:74:DF:01:73
Authority key identifier: 5C:14:65:0A:6F:9E:C8:C3:85:70:B1:BC:49:97:58:65:86:8A:DE:E0
Certificate issuer: /CN=5c14650a6f9ec8c38570b1bc49975865868adee0
Certificate serial: 01A0D5A6A22363E6D3EB73EF6ABCEC8323A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
Manifest number: E8
Signing time: Thu 24 Sep 2026 23:01:02 +0000
Manifest this update: Thu 24 Sep 2026 23:01:02 +0000
Manifest next update: Fri 25 Sep 2026 23:01:02 +0000
Files and hashes: 1: 04Jned94Tm4i1zjB6zNQbqDkj_E.roa (hash: SONtOeyZ10Os/7J4wXL7zFzVJyuJnftLszlFQu+LaN8=)
2: DkfBHadjV5hCivz6mN22vFIwsKo.roa (hash: M3npshua+IYUg+jl7d/CJO6XhinOhlUvR9sQkjh5CFk=)
3: XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl (hash: nPMQedeKo9i2EI/V8uDgx8TTovSxdVHUX3UDTZG6P1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a6:a2:23:63:e6:d3:eb:73:ef:6a:bc:ec:83:23:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c14650a6f9ec8c38570b1bc49975865868adee0
Validity
Not Before: Sep 24 23:01:02 2026 GMT
Not After : Sep 25 23:01:02 2026 GMT
Subject: CN=6128a0c49e9f99f1e0a9bb0dcbd7425c74df0173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7c:0e:e9:c8:56:d6:e4:af:81:fc:50:08:31:
0d:bb:bb:a1:d3:16:37:b6:8e:2f:67:85:13:96:05:
04:df:c8:e5:e7:d6:5e:a7:2b:68:96:a4:e3:5c:90:
5a:45:88:ed:66:f9:87:d1:87:3e:80:73:bf:11:cc:
7c:34:84:ea:77:30:98:8d:64:ef:c6:a0:99:24:7a:
d5:fc:d2:00:48:55:cf:63:8d:87:45:1d:6a:a1:8e:
23:51:4d:d4:a2:e8:39:1d:4d:21:2b:c3:c2:8e:7d:
8d:d1:13:eb:94:21:02:fe:5e:3a:84:6d:39:2a:f1:
60:98:62:ca:0e:d0:98:45:d9:75:19:e0:96:e2:a3:
ef:e0:b0:34:04:63:09:87:b5:fb:b0:44:c6:7e:9b:
43:0b:bd:14:e3:7f:c6:9b:a2:bc:f3:9d:55:8f:81:
f8:73:97:dc:f3:a6:7c:38:ff:89:65:fb:7e:b4:1c:
9e:73:7b:f2:1d:cd:de:fc:c4:fd:5d:d3:49:b2:4b:
88:5f:53:b1:07:ab:08:d9:3b:cf:c6:71:69:17:6e:
8a:08:2d:8f:bc:75:65:70:48:09:ab:d1:1e:2e:f4:
4f:7a:c9:fe:13:16:bb:e4:da:76:ca:86:27:b1:c1:
dd:3b:46:01:fe:d0:10:a5:bc:13:d2:d7:d3:a0:cf:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:28:A0:C4:9E:9F:99:F1:E0:A9:BB:0D:CB:D7:42:5C:74:DF:01:73
X509v3 Authority Key Identifier:
keyid:5C:14:65:0A:6F:9E:C8:C3:85:70:B1:BC:49:97:58:65:86:8A:DE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBRlCm-eyMOFcLG8SZdYZYaK3uA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/6a3215-6b62-4363-9abc-7a54db59ec2d/1/XBRlCm-eyMOFcLG8SZdYZYaK3uA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e3:30:30:fd:39:71:50:4a:a0:17:19:f1:51:de:c0:cc:70:
33:d3:6f:b2:ef:82:c9:c5:93:ba:ba:ad:66:59:5e:98:4c:38:
2b:3a:25:c0:67:b4:14:b3:ef:bb:8f:77:93:24:24:e3:f1:8b:
9b:50:66:e0:aa:e9:1e:f1:4f:71:61:e7:b3:32:4f:70:d6:ac:
59:f7:e7:fc:9a:85:99:db:12:e2:da:c6:4d:5b:f5:dd:b1:1a:
d3:5b:4a:cc:4b:94:4d:39:61:06:97:d9:90:e8:70:7c:83:ef:
80:50:2e:01:27:ea:d1:54:58:61:ec:d1:6d:84:d2:c7:f9:b3:
7f:77:24:8c:03:97:30:8b:97:1c:56:1f:4d:3f:09:a5:0d:3a:
07:9e:40:f2:8d:32:dd:18:e2:25:b0:08:4d:2a:d7:09:ac:fc:
93:c9:05:d3:83:93:30:08:61:f0:86:b3:41:a2:26:68:7a:c1:
65:68:39:60:5d:6f:7c:b5:2e:23:73:ff:5f:b1:1b:4e:77:a9:
20:3b:c6:d1:97:88:fb:29:0d:5e:d3:8b:69:5e:db:21:3a:cf:
7c:66:a9:99:2f:dc:da:ad:91:52:17:55:e2:8b:53:09:9c:f8:
de:dc:80:bc:4e:45:3c:7f:9e:66:e0:69:f3:14:5b:5f:1d:54:
3b:8f:45:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:33:43 2026 by rpki-client