Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
File: Xff7OeIB66Y00CA8TyjeWuB5Wog.mft (raw, json)
Hash identifier: d2Wx9feEvFk9CIEzS1vy6ckg3q2LusYwIhCQ6n6KC0w=
Subject key identifier: 6A:92:27:7E:C6:85:68:3B:99:91:5A:F2:73:C0:42:8D:D4:7B:0A:47
Authority key identifier: 5D:F7:FB:39:E2:01:EB:A6:34:D0:20:3C:4F:28:DE:5A:E0:79:5A:88
Certificate issuer: /CN=5df7fb39e201eba634d0203c4f28de5ae0795a88
Certificate serial: 01A0D4CBB288207FC38FD841DCF3ABE17F75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
Manifest number: CD
Signing time: Thu 24 Sep 2026 19:01:54 +0000
Manifest this update: Thu 24 Sep 2026 19:01:54 +0000
Manifest next update: Fri 25 Sep 2026 19:01:54 +0000
Files and hashes: 1: VcA3UckODLoz1S7R5MoctsVXluU.roa (hash: RqMqQLgcmTKOOjU1HEo17gZOBmti+5lxR7MDDBpd4a8=)
2: Xff7OeIB66Y00CA8TyjeWuB5Wog.crl (hash: LURCBMpmII8GPnqU1QrfBaaE+t0pO+kpCOAi2SW5Q/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:cb:b2:88:20:7f:c3:8f:d8:41:dc:f3:ab:e1:7f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df7fb39e201eba634d0203c4f28de5ae0795a88
Validity
Not Before: Sep 24 19:01:54 2026 GMT
Not After : Sep 25 19:01:54 2026 GMT
Subject: CN=6a92277ec685683b99915af273c0428dd47b0a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9a:d8:21:5c:9e:30:be:07:83:30:33:b3:d2:
54:90:46:76:e4:32:3f:b5:97:63:9c:f6:02:d2:9f:
f7:6b:dc:41:a7:a6:0b:1f:de:50:b8:ea:7a:29:6d:
4e:8c:44:47:bf:cd:05:f7:72:fb:b3:e6:a4:c5:94:
cc:d7:83:1a:c9:6a:8b:40:03:f8:9d:37:4f:e0:74:
08:55:39:01:17:d8:69:64:cf:4f:9e:14:21:48:0c:
87:9d:e1:44:23:43:29:23:ed:5a:3a:0a:ce:28:e6:
6d:82:88:6f:22:24:de:2f:77:1c:b6:0d:fd:34:a2:
2c:4b:10:ce:f1:16:97:88:af:45:34:41:30:aa:7a:
9c:1e:a6:a8:73:25:c7:06:a5:76:98:4b:a4:25:53:
d4:16:4e:29:c0:68:37:51:29:43:7b:3f:2e:96:86:
fa:93:0b:29:8f:bf:3e:c3:ce:76:23:bc:5f:f5:37:
44:d4:af:9f:ba:87:cf:3c:b9:fd:92:31:4f:b7:c0:
af:b6:31:d9:15:34:b9:2c:8f:28:ac:4c:a4:67:e3:
e4:14:7b:30:41:14:48:76:c5:74:c1:bf:16:38:9f:
b3:17:94:3b:1a:49:62:87:7e:0b:a1:15:c4:44:a2:
a9:7d:06:45:2c:e8:e9:b3:ca:5e:85:6d:b7:0b:54:
44:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:92:27:7E:C6:85:68:3B:99:91:5A:F2:73:C0:42:8D:D4:7B:0A:47
X509v3 Authority Key Identifier:
keyid:5D:F7:FB:39:E2:01:EB:A6:34:D0:20:3C:4F:28:DE:5A:E0:79:5A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:74:f5:37:29:b3:d2:9a:c3:3b:90:5e:c6:80:d6:c4:a1:ec:
1b:a3:92:61:3e:c4:45:93:f2:3a:67:ff:93:b2:25:1a:5b:57:
d5:dc:3e:b5:04:d6:87:50:0d:05:e4:4a:c4:3b:da:f3:0f:70:
10:83:77:8f:54:f0:ef:0f:15:5e:db:b0:cc:03:3f:3d:4a:f9:
b0:ae:36:f3:24:0f:6b:50:da:ff:b0:96:63:7a:fd:21:07:e0:
90:bf:75:a3:93:4e:98:2e:44:03:0f:b9:90:02:37:82:f0:b8:
a8:e6:60:ce:5c:cc:07:22:19:b4:d0:2a:ce:32:4b:01:68:5f:
04:24:86:62:6b:96:7f:c1:90:51:21:19:93:f8:6c:61:3b:3d:
f3:9f:1f:19:74:74:00:0b:0b:2a:20:85:c8:aa:52:e4:88:f7:
2d:7c:83:b8:a0:b7:44:58:70:3e:89:7f:65:9e:91:9f:9b:4a:
d0:97:31:a3:99:fb:d1:84:1f:d3:fe:2f:72:a3:e5:34:97:ce:
d2:1c:d9:a1:bb:8c:6a:e4:0b:d4:df:80:e0:c0:7c:9c:c2:41:
bd:47:f7:11:19:fe:f9:27:68:73:4f:c2:2e:56:16:7e:ac:52:
be:39:61:bf:3b:3f:ac:cd:59:cd:3c:c8:b5:96:2a:91:38:5f:
9a:be:af:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:49:34 2026 by rpki-client