Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier: Y9ZEDeOicSrW/f77KlgKv6Rx6H0VdGU1iJxwDfi3Kw8=
Subject key identifier: 14:4E:4B:5C:91:D0:69:FC:29:F5:69:A9:BA:2A:E3:A2:EB:3D:83:37
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 01A0E09823089EE08E3BC9463089CC1AB65F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number: 1785
Signing time: Sun 27 Sep 2026 02:01:01 +0000
Manifest this update: Sun 27 Sep 2026 02:01:01 +0000
Manifest next update: Mon 28 Sep 2026 02:01:01 +0000
Files and hashes: 1: F7EvqKPuCJrRbauscLqXiKU0tSU.roa (hash: Rn1QP+hzXdWW26eL4q5uEtv+FD1RDx8ao69irkAES9U=)
2: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: +dLWMXLAAHG393SFn6ZG9cvcAnQG+keQWLGX1p0oh/0=)
3: a7oKAtXpujbjcSp7xIWIBbpbuwo.roa (hash: uOToHNzKGxHUJP96PSZDBVfJ0h4D91Ag2KcuZFpXViQ=)
4: bklYzzrT2LyqE_eolbd4uJqpn88.roa (hash: hL8JImvIqT8exdBOwwwQRZtRNMgq3QcD8ZDf3TXxPgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:23:08:9e:e0:8e:3b:c9:46:30:89:cc:1a:b6:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: Sep 27 02:01:01 2026 GMT
Not After : Sep 28 02:01:01 2026 GMT
Subject: CN=144e4b5c91d069fc29f569a9ba2ae3a2eb3d8337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:db:ff:75:1d:4a:fb:d2:4e:c0:e7:9e:68:
40:2a:76:bf:55:b3:6c:69:13:fe:8e:2a:8b:eb:45:
2b:73:57:13:1e:c0:31:6c:bd:5d:ef:56:01:fb:69:
9a:a1:46:ac:1b:94:ab:a9:61:cb:a7:d0:fe:5d:49:
0b:a6:0c:2d:97:18:59:77:b1:e8:9b:da:5b:7d:98:
ea:19:fc:b4:50:50:85:28:49:c1:b9:30:d2:75:e4:
75:07:a0:3f:12:b3:56:35:fc:f0:65:af:f4:6c:9d:
e4:a2:26:cc:a1:fd:d7:50:73:1a:8d:08:ef:65:7b:
b6:92:59:bf:85:44:32:0f:be:85:9a:94:46:14:35:
09:73:c4:f7:a7:9b:62:6d:c4:ac:e2:5f:f5:e1:02:
02:c9:6d:d2:b4:07:59:6f:8d:60:9d:26:be:1e:4e:
c9:ab:f1:8a:f3:9c:e4:11:68:14:b1:ab:69:52:41:
fd:16:55:97:ff:35:26:0f:ce:1e:8c:36:c8:6d:f1:
74:ef:c7:52:c0:24:cd:72:06:72:db:a5:a6:b6:f0:
58:26:f9:5c:a1:f8:1d:5e:23:15:a3:2e:aa:04:5b:
6c:54:20:b8:d2:e6:4f:ec:94:fc:02:0a:b0:10:bc:
b8:d8:96:21:78:43:27:c7:1a:d1:c7:67:4d:36:b3:
ff:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:4E:4B:5C:91:D0:69:FC:29:F5:69:A9:BA:2A:E3:A2:EB:3D:83:37
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:f8:de:c4:8f:48:cc:8d:18:62:7b:5e:d0:b5:ad:d8:0f:c2:
9c:05:e0:03:bf:bc:60:16:08:7a:b7:d2:00:d8:a1:a7:25:0a:
63:5d:10:8d:15:1a:93:1c:72:a7:36:2c:f3:9f:b5:5c:a9:3b:
bc:28:3f:a4:72:4a:b3:0a:95:8d:5a:6e:26:ba:af:a7:d9:4b:
ff:2c:04:26:3e:11:42:07:b6:0f:43:0f:d3:a8:55:de:bf:6a:
f1:67:cd:1d:66:8d:67:40:31:c7:a2:04:cd:10:d1:6f:fa:36:
71:16:16:15:0f:e2:ac:7a:93:8f:c3:21:72:2d:2d:08:ff:55:
46:39:ef:77:8d:24:37:0a:86:57:21:b0:ce:09:ce:fe:de:05:
c7:cf:6b:c5:64:92:39:97:9e:06:5c:87:28:3e:64:5b:73:23:
93:c7:3b:35:ed:fd:98:66:d8:40:72:15:56:30:d1:51:3e:40:
bf:f8:01:9a:f4:73:51:26:66:70:0f:a7:c7:35:e8:52:32:f1:
99:9e:de:ad:23:8a:e1:ae:2a:10:34:e1:2c:2f:12:23:94:ca:
ff:86:bb:1b:c3:9b:fe:6a:5d:3a:27:c0:42:11:1e:e8:0d:1e:
71:28:1c:e0:9d:87:83:d6:a0:ef:2f:27:f6:35:60:96:41:40:
d9:e6:3f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:16:06 2026 by rpki-client