Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
File: XQwn-FWB4ue94MmPvVS-HUlnBRc.mft (raw, json)
Hash identifier: BhVN6NOU4A639DC3zFfo77oTo27TaZBuWWEHVoGEI2A=
Subject key identifier: D9:A6:D5:98:7F:79:82:86:AC:40:67:E0:67:33:68:04:03:56:A3:1B
Authority key identifier: 5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
Certificate issuer: /CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Certificate serial: 01A1076F0077057E0C186B86FA0F75CCCA56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 15:01:17 +0000
Manifest this update: Sun 04 Oct 2026 15:01:17 +0000
Manifest next update: Mon 05 Oct 2026 15:01:17 +0000
Files and hashes: 1: XQwn-FWB4ue94MmPvVS-HUlnBRc.crl (hash: oI6OfkrPev4ERISrrDtwqjnV5exFTKPRr+BnbG3Ecg8=)
2: vnF9EvcfI-7kYq34-IY7bnUdmlo.roa (hash: W8m5Gh0nOl5EVAy+/ig/+nvn/Z9/xuqglmDOFhR3bg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:6f:00:77:05:7e:0c:18:6b:86:fa:0f:75:cc:ca:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d0c27f85581e2e7bde0c98fbd54be1d49670517
Validity
Not Before: Oct 4 15:01:17 2026 GMT
Not After : Oct 5 15:01:17 2026 GMT
Subject: CN=d9a6d5987f798286ac4067e0673368040356a31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ac:aa:8b:06:52:d3:72:fa:5c:eb:6b:0a:14:
85:72:b9:12:3b:cf:6c:b8:d4:30:34:45:da:d3:c0:
51:34:3a:05:e9:7e:e4:ae:8d:33:38:24:8d:9c:24:
78:a9:15:95:a4:99:1c:ad:29:9c:11:9b:00:09:68:
e9:fe:ea:bb:ad:02:7a:9b:7d:13:b0:d7:45:55:65:
0a:4b:d3:0e:27:f0:ce:89:31:34:05:6a:b2:fe:f3:
ce:93:4a:6f:dc:61:80:4d:12:e6:5b:6f:4e:d7:5f:
04:f1:5a:fd:05:92:fc:6e:6f:bc:91:6d:fc:43:75:
cd:45:76:ef:3d:0f:d0:b0:e8:1a:de:07:6b:25:52:
47:08:ba:73:f7:43:09:09:97:1e:ec:b7:d5:e6:9f:
e7:e1:f7:86:a6:b1:61:b6:1f:d0:c1:ff:e1:83:93:
de:c4:64:4e:5d:46:53:1e:ea:a0:33:49:73:47:67:
6e:10:d6:4e:bb:da:92:25:76:c1:7c:5d:f5:3c:c4:
1a:2e:8f:df:23:37:24:69:a7:ff:4b:54:ad:66:f9:
fa:9c:11:ba:3e:2b:fc:58:df:83:57:54:0a:46:82:
3e:4a:f0:a0:36:5d:de:52:e8:dc:d7:c1:09:35:1c:
a6:ed:36:9c:aa:d1:be:02:89:c3:d1:ff:63:44:7c:
0d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:A6:D5:98:7F:79:82:86:AC:40:67:E0:67:33:68:04:03:56:A3:1B
X509v3 Authority Key Identifier:
keyid:5D:0C:27:F8:55:81:E2:E7:BD:E0:C9:8F:BD:54:BE:1D:49:67:05:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XQwn-FWB4ue94MmPvVS-HUlnBRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f787a9-5763-4c36-8c73-341f5173fcf7/1/XQwn-FWB4ue94MmPvVS-HUlnBRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:15:49:8f:db:fe:a9:f9:fe:19:01:10:13:50:2e:ad:73:ed:
9f:6e:f4:af:d0:0b:18:03:74:bc:8f:08:c0:5c:80:80:04:ae:
bf:6d:51:1e:80:89:3b:f6:0b:3d:07:71:79:cf:e0:4c:d4:f5:
36:09:5a:43:4c:5b:b6:a7:31:ed:14:ff:4a:d5:c6:d9:39:5a:
e9:53:9f:50:9f:08:91:7e:5b:ed:fd:10:44:9b:23:5c:9e:5d:
d7:40:db:ef:7a:3c:fa:d2:0c:c9:8d:a4:73:2c:9d:4a:db:cf:
6d:a4:f9:10:8a:0c:39:db:d0:96:55:2d:29:de:d0:77:20:d3:
d2:f5:2d:75:83:10:ec:c6:ec:9d:a3:6a:c6:9f:a2:c3:1e:73:
8e:08:ea:ef:4f:64:9a:d5:d9:f4:17:28:b2:5f:61:23:05:20:
e4:8c:3a:20:00:06:68:59:c1:dd:ff:e1:68:93:0a:0d:80:2e:
59:7e:e0:d8:d6:81:0e:42:ee:84:a4:91:19:cb:88:d4:7a:22:
b4:49:f1:e7:f4:c6:58:9e:63:e4:6d:c1:a2:a9:43:5a:4e:62:
c8:b4:f6:aa:f6:e3:dc:93:90:1e:81:58:e9:b6:37:85:98:49:
0d:27:50:15:3f:8a:ba:eb:f5:9d:ec:21:e2:83:8d:1a:cd:1d:
20:76:ad:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 00:49:57 2026 by rpki-client