Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
File: XaWsO7omBTjDM-bIYPI2ASyYZ10.mft (raw, json)
Hash identifier: Y2HpycSD3PnJnNJ5pARvmwZ1sqwHgxKfuYUeei2iu6A=
Subject key identifier: 49:62:1F:FA:C5:4C:F3:8E:97:45:61:B4:F0:86:01:05:02:DB:F2:70
Authority key identifier: 5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
Certificate issuer: /CN=5da5ac3bba260538c333e6c860f236012c98675d
Certificate serial: 01A0CDECB476197AA55FE03E7A8B2CF86E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
Manifest number: 14C5
Signing time: Wed 23 Sep 2026 11:00:36 +0000
Manifest this update: Wed 23 Sep 2026 11:00:36 +0000
Manifest next update: Thu 24 Sep 2026 11:00:36 +0000
Files and hashes: 1: GqfcLrP9OkUTy-GX1d-k-vfcOX8.roa (hash: XFhkOuqDVaUrmegmAPvZHJBMmOe4H8O6VpNvMvQVK4k=)
2: XaWsO7omBTjDM-bIYPI2ASyYZ10.crl (hash: fAJZ756QuNsWZ6TQ1qDIC6WGZsoBcd3kgbhJvooqDtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:ec:b4:76:19:7a:a5:5f:e0:3e:7a:8b:2c:f8:6e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da5ac3bba260538c333e6c860f236012c98675d
Validity
Not Before: Sep 23 11:00:36 2026 GMT
Not After : Sep 24 11:00:36 2026 GMT
Subject: CN=49621ffac54cf38e974561b4f086010502dbf270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:50:c9:36:57:98:06:e5:15:c1:36:00:25:7a:
fe:ad:21:10:a4:fa:8f:d4:b1:4c:dd:5a:a5:62:1e:
21:aa:c8:6b:98:b7:09:bd:77:16:89:d7:34:b0:35:
8c:02:ce:f9:ba:95:43:b7:52:a8:9f:fb:b3:c3:63:
d4:c5:e1:ae:74:74:9f:90:07:2f:9a:84:b7:b6:b1:
4c:53:3b:79:35:2c:ec:60:d2:d9:e3:42:50:70:8a:
48:b7:a1:dd:cf:71:04:0d:f8:95:a1:46:91:ed:f0:
23:86:e9:db:7e:1e:1c:ff:85:db:b0:fd:95:29:df:
28:82:f6:fc:f2:ac:ea:f7:ed:ff:ac:49:fa:47:6a:
2d:ee:32:4e:92:3e:e7:45:e9:87:e0:43:49:e3:d0:
34:71:e1:6a:e5:4f:25:ad:18:7a:4e:a7:c9:89:2e:
3d:f7:6e:b1:5a:ea:d7:10:79:f2:53:2d:05:bf:ea:
50:49:44:d3:30:61:4e:fa:a9:6f:e3:c7:c3:8f:03:
7b:29:d4:ce:7d:05:84:d6:f1:f1:98:0d:4b:a6:3e:
5f:31:2a:5d:4c:08:6a:3b:9f:e2:bd:bc:f2:0d:2e:
6b:c4:de:3e:85:11:25:8e:e6:5b:ee:2c:d2:6d:8f:
9a:d0:bb:fe:34:16:b5:c1:4d:9d:fd:22:5b:1a:72:
c0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:62:1F:FA:C5:4C:F3:8E:97:45:61:B4:F0:86:01:05:02:DB:F2:70
X509v3 Authority Key Identifier:
keyid:5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:2e:74:31:c5:e6:e4:9c:db:0a:62:8b:ca:33:ea:01:4b:ad:
31:67:0d:a5:9f:21:05:d1:39:a5:ab:ea:bb:88:ca:bd:c7:24:
04:17:5c:5b:b8:42:b7:23:b5:42:5e:67:05:d7:16:84:68:b3:
44:b6:35:a4:c1:0a:11:35:13:43:ca:63:53:ff:ea:4a:3d:06:
1a:57:df:da:d9:50:f0:ce:04:77:44:5b:d9:59:6a:e1:89:f4:
4a:a6:ba:0c:18:33:f5:c7:d3:48:1c:b6:8d:fb:7f:61:4f:d7:
7b:6b:64:d0:f4:c3:d4:55:66:94:26:cc:f1:ca:26:90:3c:23:
2b:a9:25:76:ae:8d:d5:03:00:b0:a2:61:4a:23:c8:fb:34:03:
25:39:0c:2b:4d:cc:a3:91:64:de:de:20:b5:93:f7:eb:22:d6:
ff:72:53:70:5e:ca:c1:69:cf:cf:19:21:7c:6e:41:f5:f8:9d:
86:ce:69:fc:b7:d3:33:7d:9c:4e:40:d2:2f:3a:f9:4c:9e:b1:
9c:92:9a:50:ab:0a:fa:ba:1d:b5:e8:f6:a8:fb:32:3e:ba:23:
96:29:90:3c:fa:4e:51:a3:1c:88:a2:fb:12:e5:74:42:58:d2:
07:92:28:02:8f:84:53:0c:92:36:c7:56:76:a2:c9:f6:27:82:
5e:87:c5:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:35:32 2026 by rpki-client