Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
File: XdDfAq2NzVImXb-cBfOBnyQy3_4.mft (raw, json)
Hash identifier: EUHTy602DwE8QIUqjqL44+3VufSdfrOn8QvaI8QOue8=
Subject key identifier: 06:71:D0:2C:5A:17:DB:B7:0F:0F:2D:7C:78:F3:81:3F:5A:FA:F9:C7
Authority key identifier: 5D:D0:DF:02:AD:8D:CD:52:26:5D:BF:9C:05:F3:81:9F:24:32:DF:FE
Certificate issuer: /CN=5dd0df02ad8dcd52265dbf9c05f3819f2432dffe
Certificate serial: 01A0DBA9FFA907F7145567E6B8D5EA4CCB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
Manifest number: EB
Signing time: Sat 26 Sep 2026 03:02:26 +0000
Manifest this update: Sat 26 Sep 2026 03:02:26 +0000
Manifest next update: Sun 27 Sep 2026 03:02:26 +0000
Files and hashes: 1: 9gJWQkxGs5Qy5W0SDW1Rj7nGQoI.roa (hash: 4pm0cu3JawKPkvnVafLyIQWg1jaUXk/k+2XMfkJDsyU=)
2: XdDfAq2NzVImXb-cBfOBnyQy3_4.crl (hash: 9xT4PWwy8IEjSvbjNH0iD1unWcuKwsbnlaqCMGtmXB4=)
3: jxsYluW7L-VesUMEEAjwwcE99j4.roa (hash: nwnLEM1dFL1lWHtpYNqY2hUoyqHLs3XF/ua5I+nhIX8=)
4: sJdr2Fb_Swcmno7YhJernLivV-4.roa (hash: UR6r+/nWVWtQENnrssjpLZJ3r+hXsPHUdwQ2sgMSnus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a9:ff:a9:07:f7:14:55:67:e6:b8:d5:ea:4c:cb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd0df02ad8dcd52265dbf9c05f3819f2432dffe
Validity
Not Before: Sep 26 03:02:26 2026 GMT
Not After : Sep 27 03:02:26 2026 GMT
Subject: CN=0671d02c5a17dbb70f0f2d7c78f3813f5afaf9c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:91:c2:d3:3f:04:7c:a5:84:3f:ac:a6:65:93:
9a:8d:bf:ad:80:60:c8:9f:e2:b9:0c:4b:44:ac:39:
b7:5b:0d:47:3d:96:3c:a9:98:91:9c:d4:08:09:a5:
4d:22:3a:60:d5:ad:58:3f:03:10:70:ee:a8:25:93:
f0:09:7f:29:ff:59:98:ca:ed:eb:e4:cd:03:5d:b1:
8c:4c:53:99:1d:62:bc:0c:43:28:bb:bb:6d:03:bd:
83:23:42:5a:7c:54:ab:49:2d:0c:a8:00:1b:93:11:
ef:ee:f1:33:b5:aa:29:8c:93:8d:89:ed:0d:17:48:
9b:78:a3:02:df:53:64:60:5a:71:01:59:7e:2c:99:
80:30:9a:7a:54:4c:ea:67:9b:bf:29:ca:e3:90:f1:
a7:f2:0a:5e:13:2b:b1:1c:d4:d4:7c:4c:11:c8:ec:
27:67:00:33:ee:c7:90:c1:08:64:22:69:86:8b:e6:
f8:07:24:41:e8:ea:c0:e0:ea:e8:e9:f6:77:82:a5:
12:a1:9b:eb:a6:1f:08:26:49:58:d2:75:9b:31:fd:
e2:95:7f:cb:7c:96:e8:f4:59:d0:e2:67:bd:70:a5:
c6:6c:cb:91:b4:d2:0f:56:df:65:ed:1c:38:05:0c:
c8:18:26:ec:0b:53:d7:7f:5e:5d:98:4b:1e:93:dc:
b3:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:71:D0:2C:5A:17:DB:B7:0F:0F:2D:7C:78:F3:81:3F:5A:FA:F9:C7
X509v3 Authority Key Identifier:
keyid:5D:D0:DF:02:AD:8D:CD:52:26:5D:BF:9C:05:F3:81:9F:24:32:DF:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:9f:fb:0c:3f:76:71:ae:0b:ae:d7:97:d9:22:73:af:e2:d3:
86:c5:5e:24:b8:93:f3:a3:29:2b:d3:7f:b1:b1:a5:2a:bf:e3:
6c:c4:51:23:60:1c:48:1b:9e:f6:fb:0d:e9:77:9d:09:e5:ac:
69:05:f8:cf:ac:8e:7e:9b:71:d1:90:b1:f5:9a:fa:7e:05:b0:
0c:18:59:24:f1:b9:0f:3a:46:77:a4:0c:e0:d3:25:c4:d0:bd:
69:de:19:83:2f:ad:09:36:99:dd:b9:5e:23:3c:af:a2:93:c8:
96:9d:29:8d:36:ce:28:b5:23:91:86:cf:7e:f8:ba:43:5d:6b:
48:bc:ac:4e:ed:4c:f0:2a:51:cf:cf:a5:cf:48:a5:f9:4a:23:
0f:6b:4f:06:71:68:ef:e3:46:06:65:a0:a5:15:05:5d:6d:31:
1f:4b:2f:1c:ce:66:ff:c4:95:cd:79:61:e8:14:de:fc:51:27:
5b:4b:87:7d:df:3c:47:81:0b:77:94:5c:7c:ec:4d:aa:17:62:
7c:cb:3d:25:09:3b:a7:99:a8:3b:a4:76:58:cd:d1:24:c9:3b:
21:f0:15:33:81:c1:60:56:5c:0b:42:6d:c1:fe:53:ec:fc:f1:
1d:b3:ad:a1:14:94:2b:b9:22:ff:a6:84:82:e4:13:37:bd:b6:
c4:3d:b8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:51:01 2026 by rpki-client