Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
File: XGGrSm35u5XP3orwdmaKWVs0HeE.mft (raw, json)
Hash identifier: ioKvDRp0T9/WrhJ3dCwXD881VTzbw03JLT98YTlvzHA=
Subject key identifier: D8:CF:67:25:49:76:52:05:CF:04:FB:4E:D7:3B:19:69:22:BC:A5:87
Authority key identifier: 5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
Certificate issuer: /CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Certificate serial: 01A0E39949B6756A8D00DC751C41D13912C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
Manifest number: 075D
Signing time: Sun 27 Sep 2026 16:01:08 +0000
Manifest this update: Sun 27 Sep 2026 16:01:08 +0000
Manifest next update: Mon 28 Sep 2026 16:01:08 +0000
Files and hashes: 1: XGGrSm35u5XP3orwdmaKWVs0HeE.crl (hash: NfDeYhgYYd7r6HDHj2JD3jBsaUDq4vNxTVVPSeWzUm0=)
2: d9ad6eSfGOCAtJCyfx5T80LXc84.roa (hash: l8TnxH7nYsbi9OkxC5kgX4fiX1lQ108inFjyeEj/BH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:49:b6:75:6a:8d:00:dc:75:1c:41:d1:39:12:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Validity
Not Before: Sep 27 16:01:08 2026 GMT
Not After : Sep 28 16:01:08 2026 GMT
Subject: CN=d8cf672549765205cf04fb4ed73b196922bca587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f7:be:a7:b1:39:69:a7:09:b6:dd:08:60:47:
35:eb:f6:53:45:36:bd:a7:ea:33:41:2f:b8:6d:72:
70:2e:55:82:a7:f9:34:19:de:85:b9:53:b3:ae:24:
ee:81:09:cd:ce:b6:79:20:c7:19:44:ff:6a:c5:e6:
07:e1:60:6d:33:0b:2e:69:64:79:4e:0f:2e:b0:18:
f9:a0:41:78:e6:33:4d:a7:c4:fb:fc:dd:1e:4f:5a:
cf:c8:42:d2:d4:b5:71:a3:b2:16:fb:ea:b2:0b:d6:
79:ff:51:4b:89:6e:96:de:15:90:19:1a:7f:bf:f7:
98:06:e9:d1:d9:ca:bd:80:f8:a1:5d:e8:24:a0:60:
bf:72:3d:c9:07:29:b0:fb:ae:08:f2:3e:e7:11:c8:
1e:53:9f:43:e9:d0:37:c3:c4:0d:14:c8:3f:72:72:
87:05:6d:af:2f:9b:1c:e8:df:f2:20:d0:09:08:df:
d2:2e:62:46:33:1f:9a:44:b0:65:f5:d8:71:e2:ba:
74:0c:92:82:c2:40:48:f6:c7:50:1b:85:17:98:10:
c0:04:50:cc:7b:96:0a:67:b3:25:5d:f2:d6:79:99:
1c:f5:0a:df:13:57:97:56:47:53:58:a7:01:f3:96:
89:97:75:58:8d:55:7a:ea:d5:96:f3:64:29:36:54:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:CF:67:25:49:76:52:05:CF:04:FB:4E:D7:3B:19:69:22:BC:A5:87
X509v3 Authority Key Identifier:
keyid:5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:e0:09:14:03:22:a4:3a:35:e0:ae:31:b5:45:e8:3d:6a:ab:
1b:18:a4:af:fd:0d:ba:d2:d9:40:4c:77:f9:e0:2e:21:6f:87:
5d:72:2c:f9:0b:14:a5:d4:dd:43:44:41:34:28:70:a0:2e:00:
55:55:f0:dc:3f:15:da:59:74:a5:62:e7:bf:79:19:2e:ac:75:
88:ad:9f:f8:2d:a0:05:c4:d0:90:0a:47:54:f2:1b:ce:0e:ea:
5c:41:e8:c3:4c:c1:7a:38:4c:80:dc:a1:20:40:0d:fd:08:db:
c6:ac:54:00:1b:97:b3:66:46:b2:61:70:3b:18:bd:67:38:ad:
31:2f:4a:99:e7:aa:1a:71:62:62:76:f3:87:e6:7b:cb:17:74:
7d:6c:51:6b:60:6a:8e:03:77:75:e4:fd:9b:d1:9e:e2:34:0e:
e9:98:20:fb:aa:0d:bd:46:65:5b:3d:94:46:83:8e:3f:40:fe:
3e:36:71:d5:c8:0f:ab:27:cd:d0:d0:33:f7:30:1c:ef:20:ec:
7a:ec:6e:aa:57:72:23:d8:b4:5d:aa:de:68:a1:92:e3:1e:5b:
25:f5:c0:0e:72:6c:1b:b0:2b:a7:9a:6b:15:68:1d:25:6e:e7:
3e:17:13:08:8f:34:08:8e:7d:9b:fa:77:1a:a4:04:24:55:44:
ce:a5:6a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:07:47 2026 by rpki-client