Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
File: XYqf18UZJuIuqKozs7iDjpPovt0.mft (raw, json)
Hash identifier: O1jtI7MFVh9TiPMNqjMixtiHJXVNby8D8tktiG+Duts=
Subject key identifier: 9F:85:9F:BC:2E:AA:AE:BA:1A:C0:63:71:66:51:56:DF:8A:FF:2D:22
Authority key identifier: 5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
Certificate issuer: /CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Certificate serial: 01A0CAB49F2AEF31EB4273DC187B94E3FD76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
Manifest number: 1A6C
Signing time: Tue 22 Sep 2026 20:00:29 +0000
Manifest this update: Tue 22 Sep 2026 20:00:29 +0000
Manifest next update: Wed 23 Sep 2026 20:00:29 +0000
Files and hashes: 1: OS8EDWL74n3CtFxmTxNOolYhsvA.roa (hash: yF17P4v/AdaI5VNNKOl9FtUJuOAbQSvTKgj5Ha/kk7s=)
2: RrlPj_5PMLmauOZbV-XxFE0jClU.roa (hash: +JGjuqCo+HgEGZGs0mkuqnIL4NPJWqKMaUK/A5KXgqw=)
3: XYqf18UZJuIuqKozs7iDjpPovt0.crl (hash: 9PMv8BElTUX4kweu7SxR/6/ICWjhYxWRsv6MEh83CVA=)
4: dL_9twvmgLzMs895oA64iiDmIEY.roa (hash: LgJcVms5Pq7JFZ8+OO+s5X+XVI8uKF8XIm98bwsR7Lk=)
5: dqfLmPoWYDgnN63zfumMSmq4Qs4.asa (hash: VP2elBPNAsWST4m//JgRDzv1id8AdOzpooWBKdSTZ3M=)
6: m_016GliLd1us5Dyp3gWd_9XmZU.roa (hash: NGfX/rkS6vQZZNfEtGY8uwL12Vk9X/AaXVk/NGit2hQ=)
7: wEd_ihwz_Sc9Z7253Egu-wb4rYs.roa (hash: JaUYZqefug6H01TWJts1HEcFIA5lKpx4F7+av5F+33Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:9f:2a:ef:31:eb:42:73:dc:18:7b:94:e3:fd:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8a9fd7c51926e22ea8aa33b3b8838e93e8bedd
Validity
Not Before: Sep 22 20:00:29 2026 GMT
Not After : Sep 23 20:00:29 2026 GMT
Subject: CN=9f859fbc2eaaaeba1ac06371665156df8aff2d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:6d:b1:69:1a:4e:ab:08:c3:2b:b7:30:fc:ba:
a3:f8:da:5e:6a:90:f1:cd:5b:cf:ca:31:69:58:12:
48:67:94:4a:ac:e5:cb:b1:eb:bf:33:e3:86:09:4c:
44:0a:15:76:52:2d:91:a6:12:78:cd:8e:c6:85:91:
61:81:e4:74:28:73:01:49:fa:5b:5a:c3:03:8e:14:
88:af:92:fe:88:67:e1:65:2c:a9:19:a9:cb:d4:0a:
de:c4:97:a8:c5:3a:d4:54:ca:f3:b9:d6:38:8c:37:
75:1d:bc:10:82:c7:31:40:d1:a5:ca:58:5f:b9:0e:
b2:33:c0:84:12:a4:da:d8:dd:5f:c1:c5:9f:81:f3:
c9:a9:e4:c0:d0:c0:67:bd:44:88:85:a4:24:30:6c:
fe:b3:8d:d2:00:c9:43:8c:95:cb:b9:50:5c:96:76:
9b:72:43:8e:19:f3:79:47:d7:d1:df:1d:d8:c2:4c:
d6:28:38:33:23:c7:07:29:01:19:38:f0:18:9c:96:
d9:b5:0b:e3:c1:19:e4:e0:65:67:68:b4:3f:a8:91:
e8:d7:81:06:c4:95:fa:59:16:52:bc:d9:d6:a2:47:
a0:f3:c3:d6:71:e7:4b:e9:07:9d:fe:a1:19:eb:58:
2a:71:4e:ac:00:e2:f2:45:b3:4c:3f:7a:54:fe:a7:
66:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:85:9F:BC:2E:AA:AE:BA:1A:C0:63:71:66:51:56:DF:8A:FF:2D:22
X509v3 Authority Key Identifier:
keyid:5D:8A:9F:D7:C5:19:26:E2:2E:A8:AA:33:B3:B8:83:8E:93:E8:BE:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYqf18UZJuIuqKozs7iDjpPovt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/bb861d-330f-4a97-9f9c-66c53f2b1f02/1/XYqf18UZJuIuqKozs7iDjpPovt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7d:4d:99:07:ce:f9:2a:dd:ef:0f:32:b3:42:43:6e:82:ae:
e2:ba:b1:0a:28:01:d9:70:f5:62:0f:77:80:29:76:f7:86:db:
20:97:91:0b:e2:63:00:06:17:2a:e5:c0:93:26:d2:51:01:19:
89:3d:4f:59:6b:11:e4:21:02:05:2b:b9:e9:12:71:b2:7a:38:
3a:5e:31:b9:f6:f6:71:a6:f0:1f:fe:9b:65:7b:3b:99:a9:79:
da:62:94:5e:bc:7e:21:0a:43:17:f6:da:65:4c:f0:f6:6c:5e:
9f:72:08:96:23:72:c8:ef:9c:66:27:21:21:4c:0e:41:d9:a8:
74:4f:be:97:63:31:92:4b:48:7c:05:48:2e:29:21:e9:f6:d3:
88:0a:29:6f:f0:c1:d2:fc:ff:5c:a4:3e:2a:71:83:c4:1d:cb:
40:e3:d9:e6:91:1b:f4:44:bf:e6:d7:f7:f5:1f:07:22:37:26:
cb:88:50:a2:ee:b4:68:f2:57:75:1c:15:ba:2c:2f:6d:65:8b:
5c:4c:04:48:b5:05:4f:0f:a8:e6:de:ae:cb:46:00:6e:e0:04:
37:15:58:ab:d4:06:c9:49:eb:8c:55:88:ac:8b:b1:38:aa:66:
e6:c6:2d:a8:c7:53:51:28:94:5f:2a:6b:e3:f9:01:4c:7c:79:
b4:ff:9e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:17:41 2026 by rpki-client