Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
File: XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft (raw, json)
Hash identifier: 8yhKabwJRua1Ta4nogc1+6iTA4OZeRrHfhV0lOXdhrs=
Subject key identifier: 53:62:3B:C4:E6:BC:8F:5A:72:12:DE:69:E2:2C:1B:9F:08:D3:FE:E9
Authority key identifier: 5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
Certificate issuer: /CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Certificate serial: 01A0DF186A50682E6CDF3E28512BC381B451
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
Manifest number: EE
Signing time: Sat 26 Sep 2026 19:01:54 +0000
Manifest this update: Sat 26 Sep 2026 19:01:54 +0000
Manifest next update: Sun 27 Sep 2026 19:01:54 +0000
Files and hashes: 1: XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl (hash: JJAvCpS1YxLHdm3mgQ8KrULHFodaUbqMJsMmQH/OgJE=)
2: dVeZzKDi_fO4mE5HHo16sVmtMMU.roa (hash: 1r2T0D/7NQ/zB+ziH9iXBQGlu0LN0IlUyw0vofrt4CI=)
3: lldCsQ1hgTCDcrFWBWU0S5eC1nE.roa (hash: PQn0MUfrufkEibOpWiDwl2hJpMI+Yw+jzN0Z4rlm5DI=)
4: whybmoJ3UH-tZcQj28IxhxnuNWU.roa (hash: XoXTuKuWN/G+ZqFwydqG+jUtoRxuSHXL1j3ltwwohOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:18:6a:50:68:2e:6c:df:3e:28:51:2b:c3:81:b4:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Validity
Not Before: Sep 26 19:01:54 2026 GMT
Not After : Sep 27 19:01:54 2026 GMT
Subject: CN=53623bc4e6bc8f5a7212de69e22c1b9f08d3fee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a3:25:b8:4d:86:d4:5e:a4:35:9b:23:6d:53:
2b:39:6e:65:fd:c6:e8:d5:c4:e0:8c:d5:d7:53:1e:
4e:f9:e8:18:6f:c9:4a:2e:e6:cd:04:2a:9a:00:9f:
24:ba:e5:d0:c7:77:a3:d8:92:5a:06:b6:c4:83:ee:
21:fc:89:32:67:61:94:ca:b4:41:5f:de:6e:54:a8:
6f:96:fe:cd:09:a7:1e:53:2d:2c:a7:44:9c:3d:b2:
fa:bb:8e:d7:44:dc:48:04:8e:72:2c:d8:bb:db:30:
67:c2:9f:c1:c1:c4:40:61:7b:84:92:89:5f:68:17:
5d:e9:1f:d7:35:8f:5e:38:26:b8:3f:e7:50:ff:d8:
f3:13:83:d9:a2:46:8d:70:36:51:38:e7:df:ef:48:
ed:ac:a7:72:6b:81:dd:99:11:05:8e:02:65:41:ef:
03:d1:68:18:ec:1a:ee:c8:40:0f:b7:45:94:69:4a:
6f:86:24:9d:b2:20:da:96:d6:eb:7e:c5:29:36:92:
0a:13:7d:17:56:5c:61:99:c5:30:ea:53:a7:4d:52:
67:42:d1:e5:83:24:2e:46:c2:80:b2:7a:68:0e:9f:
fd:72:64:6e:f7:a6:dc:e9:fe:aa:7d:a7:61:c9:52:
a9:6a:89:1d:b4:df:e9:e9:4e:c5:92:58:e8:30:1c:
a4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:62:3B:C4:E6:BC:8F:5A:72:12:DE:69:E2:2C:1B:9F:08:D3:FE:E9
X509v3 Authority Key Identifier:
keyid:5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:62:3c:81:43:81:dd:73:9a:39:55:0a:fc:83:c3:79:10:d0:
d4:2f:43:1f:a7:67:3d:d1:62:ea:d0:5b:db:d4:e2:09:31:03:
ca:9f:a4:65:7e:35:92:7f:e9:71:ac:18:b2:af:70:7e:ae:7e:
5f:04:ef:97:94:5b:36:ed:1e:9d:2b:70:64:41:5e:bb:51:1b:
3a:e3:16:a9:d9:c7:fb:aa:ac:fb:29:46:8f:32:ab:18:8f:10:
e8:fd:f3:e0:75:d4:9e:99:a4:5b:21:2c:71:f6:05:59:42:26:
28:b0:86:aa:73:29:4e:3c:2a:6c:a0:f4:79:fe:8a:29:14:57:
90:d3:3a:b9:22:54:4e:3e:1c:66:3b:0f:4d:9b:8d:d4:24:54:
99:94:84:67:d0:8b:a8:9d:af:fc:81:13:71:2c:d2:d7:05:b2:
52:b9:ea:cc:b7:09:6f:3a:2f:e0:0f:e8:b6:46:66:7b:f9:6a:
b2:6d:19:5e:dc:ba:ad:a8:2a:ec:9e:76:d4:e1:eb:d1:21:9b:
1c:05:f0:16:c5:11:f1:98:12:e8:5c:65:ca:ea:59:e5:d4:25:
fd:45:6c:73:8e:93:f9:d2:8d:23:59:8e:f1:53:c1:4f:b2:e2:
96:c6:a7:44:b3:6b:1b:6d:a4:cf:1a:ec:09:9b:f6:e6:a3:74:
00:33:9f:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:49:40 2026 by rpki-client