Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
File: XdDfAq2NzVImXb-cBfOBnyQy3_4.mft (raw, json)
Hash identifier: h0EE0kdxA99hcvZpKC4w56KHVOmC+yTLf0LUEV2J3U8=
Subject key identifier: F7:0F:E7:4D:C2:A6:DE:B8:EE:BE:D0:15:04:EE:B2:90:95:F6:BD:EA
Authority key identifier: 5D:D0:DF:02:AD:8D:CD:52:26:5D:BF:9C:05:F3:81:9F:24:32:DF:FE
Certificate issuer: /CN=5dd0df02ad8dcd52265dbf9c05f3819f2432dffe
Certificate serial: 01A0E174692C51F3725AFE63BF415BDE1130
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
Manifest number: EE
Signing time: Sun 27 Sep 2026 06:01:37 +0000
Manifest this update: Sun 27 Sep 2026 06:01:37 +0000
Manifest next update: Mon 28 Sep 2026 06:01:37 +0000
Files and hashes: 1: 9gJWQkxGs5Qy5W0SDW1Rj7nGQoI.roa (hash: 4pm0cu3JawKPkvnVafLyIQWg1jaUXk/k+2XMfkJDsyU=)
2: XdDfAq2NzVImXb-cBfOBnyQy3_4.crl (hash: j5XD7HGozsq4p14M4VSgvaJTqAJfiW4SGf4qwViC7qk=)
3: jxsYluW7L-VesUMEEAjwwcE99j4.roa (hash: nwnLEM1dFL1lWHtpYNqY2hUoyqHLs3XF/ua5I+nhIX8=)
4: sJdr2Fb_Swcmno7YhJernLivV-4.roa (hash: UR6r+/nWVWtQENnrssjpLZJ3r+hXsPHUdwQ2sgMSnus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:74:69:2c:51:f3:72:5a:fe:63:bf:41:5b:de:11:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd0df02ad8dcd52265dbf9c05f3819f2432dffe
Validity
Not Before: Sep 27 06:01:37 2026 GMT
Not After : Sep 28 06:01:37 2026 GMT
Subject: CN=f70fe74dc2a6deb8eebed01504eeb29095f6bdea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:fe:b8:95:ad:36:11:d3:20:ee:49:85:a0:
4b:21:47:b2:55:20:9b:e7:03:42:36:2e:51:00:7e:
b5:38:32:e2:af:e2:04:36:a1:f7:ed:4a:a2:82:d3:
49:97:a4:c9:99:e3:b9:5d:55:e9:e9:ed:19:a2:cb:
28:f8:67:b1:b0:1c:a7:2f:e4:57:0a:61:da:be:0c:
f7:0b:e2:b1:c4:85:97:3a:d0:71:41:de:1e:80:b6:
14:fe:ca:db:4b:c9:52:9e:8a:7f:7d:0c:0e:e5:fc:
9a:d4:74:cf:6a:de:c9:f8:f4:47:68:50:96:af:e5:
81:40:28:1e:93:91:65:4d:b5:12:53:03:42:51:85:
cb:25:7e:a0:6f:f7:8b:70:41:7e:f2:8a:4a:0e:da:
6c:a8:75:64:ae:c8:ae:aa:28:03:a7:e1:82:9b:0a:
c7:84:b3:b6:1c:1f:b0:32:32:b3:6c:4b:72:0f:44:
df:cc:6a:d2:96:45:38:bd:76:d1:80:81:27:28:87:
46:0c:32:8e:c4:73:31:23:04:42:e7:db:8f:48:d8:
77:da:e0:36:5b:9c:78:7d:41:c2:b7:d2:13:85:4e:
ae:2a:4d:a3:05:81:0f:3f:72:b3:68:63:da:0f:9f:
a8:b8:e6:d5:34:69:a5:d3:02:ea:8a:ba:1b:48:fb:
d3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0F:E7:4D:C2:A6:DE:B8:EE:BE:D0:15:04:EE:B2:90:95:F6:BD:EA
X509v3 Authority Key Identifier:
keyid:5D:D0:DF:02:AD:8D:CD:52:26:5D:BF:9C:05:F3:81:9F:24:32:DF:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdDfAq2NzVImXb-cBfOBnyQy3_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2cc419-8e34-41a9-b243-855418ffed41/1/XdDfAq2NzVImXb-cBfOBnyQy3_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:6e:5f:2c:3b:51:08:e8:8f:63:99:2f:11:90:ba:fd:ca:d6:
d4:ad:e3:bd:2c:9d:31:94:db:28:93:db:b0:2e:39:c3:07:4a:
d5:50:00:16:f9:9f:0e:2c:0e:c7:12:d2:6f:79:96:ae:a1:12:
38:05:de:32:ee:44:c9:fe:33:f2:63:df:2c:d5:96:6a:b3:94:
4b:c8:86:f3:6a:1e:f8:1e:f0:5a:dc:15:6b:95:ee:10:0c:7b:
67:2b:44:56:4d:d7:ad:fc:99:bf:16:9e:40:a1:dd:c3:ba:a8:
2d:a9:e3:26:a5:4d:fa:b1:68:0e:8b:f2:43:07:db:2a:1d:51:
50:c4:be:d9:87:ed:87:e8:49:05:7b:06:d7:1a:94:e1:a9:54:
16:9e:18:3e:cb:39:ec:44:5c:b4:0f:23:fa:bd:c6:14:17:3b:
29:0f:4e:40:a5:9d:2e:6e:ff:95:88:29:08:ac:26:0f:8a:94:
1c:5c:77:f0:cf:0d:0a:91:23:6e:4b:81:82:35:79:ca:1f:89:
9f:dd:58:f1:e5:8b:0c:41:18:47:3d:d5:b4:4d:0a:db:1e:44:
eb:af:27:a7:7a:bb:22:e4:87:37:d5:f3:eb:99:29:74:19:f7:
8c:74:93:09:79:3a:76:89:88:5d:f9:1e:1f:3b:07:31:a6:f8:
fa:e5:f8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 08:32:11 2026 by rpki-client