Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
File: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft (raw, json)
Hash identifier: tSVprMQoAFMZEfqqSCTqBKfrFZA0BVCmrympt+GfLhU=
Subject key identifier: 07:56:91:B4:1E:72:4C:84:44:A1:05:2F:41:7F:D5:8A:E8:64:C8:22
Authority key identifier: 5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
Certificate issuer: /CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Certificate serial: 01A0E8C1C8AFBB9F333F889B11E1A781636A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
Manifest number: 15B0
Signing time: Mon 28 Sep 2026 16:03:28 +0000
Manifest this update: Mon 28 Sep 2026 16:03:28 +0000
Manifest next update: Tue 29 Sep 2026 16:03:28 +0000
Files and hashes: 1: 1-rh3SVK_l4oC_Y7ih51PfkV69KE.roa (hash: NJ7OHlFB+x8OrDZE2G7eqZGbDxSKcSz5o8ZkkHAui3k=)
2: DmAsoEh_ftaKPOhVRscVORbXGKo.roa (hash: K5t41X9Sj7F3OsASCaPLgv9lGQLlL9EDWZMrPiqu4D4=)
3: Jj9JAsNkaCzVh3y4XWm1P_rXYU0.roa (hash: //DJwmMWuAhUHyp7ncUG1CBCwhEdbc8wN+6fYn+HdDk=)
4: XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl (hash: tNA4YTghhGZaOrq8C9NJWfWx9d1ytcxRPDbWvoddZTU=)
5: qIrPTvkJoKHOpyB7wnhzahJKcVM.roa (hash: P67wuJBItbnZh+zC9ZR4+mPtRz9kxlpY/Ao75oEVWZ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 16:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:c1:c8:af:bb:9f:33:3f:88:9b:11:e1:a7:81:63:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d3bb84891651f2039cd81b0b60912f7c0e5cf96
Validity
Not Before: Sep 28 16:03:28 2026 GMT
Not After : Sep 29 16:03:28 2026 GMT
Subject: CN=075691b41e724c8444a1052f417fd58ae864c822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:3b:14:31:d3:f5:ba:fd:fb:ad:e1:83:f0:cb:
61:4e:50:34:45:20:6c:71:d9:27:45:3c:40:8b:d2:
03:7a:41:25:48:54:44:3c:84:62:cb:b5:ff:a4:73:
ca:85:50:e3:cd:08:97:4b:07:44:24:94:f6:10:e6:
e9:c5:03:cd:27:85:1d:8c:b9:e3:03:b8:7d:b5:c7:
ad:87:e7:b1:c4:9f:d7:43:a3:31:bd:28:b5:b6:d1:
54:62:42:98:d9:a3:d3:9f:91:f5:c0:4e:fc:fb:4e:
4f:ce:4b:8d:66:94:93:af:d0:28:f3:c7:40:9c:ff:
8d:9a:af:c2:94:8f:83:33:0d:95:24:05:1f:cd:e4:
35:3c:5d:da:bf:b2:e6:10:72:81:ca:6f:7e:85:1b:
4b:7b:96:bb:6c:81:e8:b3:61:24:dd:06:3b:ab:4d:
43:4a:e1:db:83:61:b0:c5:d9:f2:69:53:4a:02:16:
d6:c1:30:82:68:f9:46:3e:35:d5:7e:ce:87:c1:5e:
e2:22:8c:76:24:e6:ab:aa:e9:38:86:a6:28:ae:8b:
79:9d:93:41:07:be:36:f2:52:f9:c7:bb:a5:2a:1d:
c9:ad:13:1d:0b:19:1a:cb:c2:41:20:c2:48:3c:45:
dd:31:92:e1:6f:9b:f9:49:49:77:03:96:64:7d:50:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:56:91:B4:1E:72:4C:84:44:A1:05:2F:41:7F:D5:8A:E8:64:C8:22
X509v3 Authority Key Identifier:
keyid:5D:3B:B8:48:91:65:1F:20:39:CD:81:B0:B6:09:12:F7:C0:E5:CF:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/587f7e-60cc-41a0-8869-4f8c638a72e1/1/XTu4SJFlHyA5zYGwtgkS98Dlz5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:cd:7c:88:6c:91:e1:f6:f5:60:35:4a:ef:94:10:9a:b9:82:
43:b1:bd:c6:6c:84:64:b2:5b:82:3b:66:d7:e6:99:23:8f:f4:
65:bd:c1:ce:0c:3a:8e:fd:e2:64:69:28:46:b4:61:f1:8b:c0:
51:25:a8:cd:77:07:9b:83:fc:dd:9a:92:17:16:40:aa:41:74:
a3:29:bf:12:19:c5:4c:ff:c7:58:79:d0:2d:dc:39:0e:62:0d:
d0:3a:8d:09:cb:e1:b2:6a:24:6a:50:98:9b:4d:bc:9b:9f:d2:
e4:26:d2:0e:fc:d4:b6:b0:c7:1b:9b:23:f8:ec:38:e2:d0:0d:
c5:22:9e:51:fa:33:f9:37:9d:c1:ba:cf:91:f9:5b:4f:24:f9:
99:6a:74:ee:94:2b:7a:f2:0d:99:bc:f7:c6:d0:0b:33:fc:55:
7f:f0:3b:89:27:db:f8:fc:70:cc:8b:72:6e:99:89:0c:8e:3b:
d2:b5:98:0d:bd:9e:2c:14:20:19:63:75:4d:d2:9d:06:4b:fa:
91:60:93:8f:17:89:e5:d2:de:45:33:05:d5:80:40:e4:6b:c2:
7c:54:b6:c4:41:a8:e4:57:71:66:b9:10:9f:52:ad:c9:1d:bd:
e1:0f:86:bb:10:f1:9e:12:5f:a7:49:ba:48:9a:24:4c:98:4e:
f5:1a:e0:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:58:28 2026 by rpki-client