Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: 6tshoWUVlcKAPD6ItxVWiul+lPaZffqGZVswVLYQ6/M=
Subject key identifier: 57:DE:37:ED:E4:50:EA:47:C9:A6:A5:32:B5:0A:30:5C:C4:56:21:E3
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 01A0CE5A708B45EF114CE8F9609A7023C17E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 114C
Signing time: Wed 23 Sep 2026 13:00:28 +0000
Manifest this update: Wed 23 Sep 2026 13:00:28 +0000
Manifest next update: Thu 24 Sep 2026 13:00:28 +0000
Files and hashes: 1: 1-nsaGOYJDQs8nE83JBsjbwYRoPA.roa (hash: ZorqeuTKQ8BzMES+IbO5PhiAMx62C25+2z4OV8xpzBs=)
2: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: rKRd2iESQYdTsb3fos0+f+ZvuN4BaGOOCyHDgyLMUI0=)
3: fYv6u6ZqsaaVuf2RxvvaolhNBjk.roa (hash: jVk92j+q/o1dRJaAKw+eFCSe6j9s2E6quPaItwZl0/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:5a:70:8b:45:ef:11:4c:e8:f9:60:9a:70:23:c1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Sep 23 13:00:28 2026 GMT
Not After : Sep 24 13:00:28 2026 GMT
Subject: CN=57de37ede450ea47c9a6a532b50a305cc45621e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f7:91:d5:b5:77:46:3e:46:d2:c9:77:e8:7b:
be:ad:c6:dd:a0:2a:71:c6:69:4d:6f:52:b5:2b:ce:
e8:12:b1:e7:78:f1:96:67:b0:d7:fb:e1:0d:7f:bd:
3c:86:04:15:68:48:2d:23:ad:63:9c:76:14:b9:7a:
6e:e4:b9:c0:c2:0f:97:87:1c:1a:06:55:c9:2a:11:
0a:ba:19:b2:a7:6e:75:2b:f6:65:89:27:4a:30:53:
c6:10:f1:13:52:91:57:97:76:4c:f1:e1:c2:7d:6b:
03:d4:de:a7:fa:2b:ee:ad:41:ed:49:03:55:0e:7a:
78:9e:45:4c:bb:5b:e2:9d:d4:c8:e1:49:c2:c4:23:
25:d2:27:86:b7:55:30:6e:13:65:27:f9:4d:59:06:
11:6b:14:14:74:4b:8f:8f:50:d4:54:0c:77:f7:a9:
cc:07:71:96:d9:d4:a0:ad:e8:3b:68:72:db:24:eb:
6f:82:cb:f6:8c:c6:4b:df:fa:8d:b2:02:d6:8c:20:
05:0b:d3:d6:f1:52:5d:9e:aa:5e:67:ae:2c:83:0b:
e3:1f:b6:d0:53:e7:f9:2d:46:a9:ef:4b:42:ab:42:
ec:c7:ff:17:19:f4:0f:fe:a7:74:7c:b5:8c:5b:fd:
30:d4:26:47:bb:67:8c:bb:96:f9:c2:1f:13:be:c2:
c3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:DE:37:ED:E4:50:EA:47:C9:A6:A5:32:B5:0A:30:5C:C4:56:21:E3
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1e:49:df:d6:d6:09:86:7f:3f:4e:52:9e:6e:70:3b:49:e3:
71:2b:30:f8:28:94:09:1c:71:19:18:3d:07:15:56:e8:d9:c5:
a9:b1:f9:da:39:83:07:74:4b:fe:d1:86:8b:36:dc:c1:96:14:
fb:51:d4:54:46:5f:c1:cb:2a:47:36:9f:03:76:0c:91:5b:d1:
67:44:fe:47:7e:3f:06:0d:7a:f9:18:59:03:57:e5:2a:a2:ae:
9b:e2:5c:8f:b7:2b:7d:5d:2b:96:3f:42:1a:c0:d3:37:dc:d6:
97:80:7b:93:b5:a5:9e:c0:c7:63:6e:59:36:8f:b2:a5:44:d3:
42:d3:79:b3:44:fc:06:50:22:0f:fb:0b:80:ac:8c:ba:04:f6:
cb:41:4d:1a:8d:84:43:ce:aa:b5:9c:3e:08:f4:0b:5b:e3:da:
ef:4e:8a:bb:b9:3d:16:36:5d:fb:b5:25:3f:0d:06:b2:ba:7f:
7f:1b:79:2f:47:0b:23:5b:ba:ca:35:71:25:f3:90:e3:db:78:
2f:93:c3:7a:2f:7e:77:8a:74:5c:3d:f5:19:53:ee:87:a2:fc:
b7:2a:fa:aa:cc:5f:21:64:6d:fb:c4:3b:f3:d5:0c:22:c7:85:
69:59:61:c1:b2:07:d8:40:4f:99:d0:6e:e7:5a:30:6c:cc:53:
5b:43:2e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 17:25:56 2026 by rpki-client