Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
File: XgSwLaV7ADebVhowISLnjl1Qick.mft (raw, json)
Hash identifier: zHUWygXzHtCA9D0pnUIlm9R+wOgbrm/y0Q+NFAewqfs=
Subject key identifier: 4A:26:FE:FD:15:CD:B7:46:E0:20:C3:47:9F:2E:40:A7:56:C1:15:D3
Authority key identifier: 5E:04:B0:2D:A5:7B:00:37:9B:56:1A:30:21:22:E7:8E:5D:50:89:C9
Certificate issuer: /CN=5e04b02da57b00379b561a302122e78e5d5089c9
Certificate serial: 01A0F0E7CAC58CD8CC5032514A0FA0DFAF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
Manifest number: F6
Signing time: Wed 30 Sep 2026 06:01:57 +0000
Manifest this update: Wed 30 Sep 2026 06:01:57 +0000
Manifest next update: Thu 01 Oct 2026 06:01:57 +0000
Files and hashes: 1: Dj9kuZWr9tyLTs78iAEnZEz4gVs.roa (hash: NhBr92QCCO8QbowM/v9LvYLKA9Dujq44YfaPAibmCTM=)
2: TQ0wM6huTqh458ZZSQM0KI52teM.roa (hash: nBLiANju/5qfI/HxdXcGxBhrz2L2pBNw4FU6t8WZ4B4=)
3: XgSwLaV7ADebVhowISLnjl1Qick.crl (hash: xvuj5oeQVN08suetj5rTRBMGDXfYa4b1d4hyIpBQ900=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 02:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f0:e7:ca:c5:8c:d8:cc:50:32:51:4a:0f:a0:df:af:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e04b02da57b00379b561a302122e78e5d5089c9
Validity
Not Before: Sep 30 06:01:57 2026 GMT
Not After : Oct 1 06:01:57 2026 GMT
Subject: CN=4a26fefd15cdb746e020c3479f2e40a756c115d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:de:6f:70:05:c8:3c:6d:87:4e:cc:92:b8:3c:
62:c5:ee:ff:4b:17:ce:72:5a:fd:d6:36:04:c4:de:
cc:a9:20:ba:3b:66:8e:bd:e3:50:dc:3c:8f:6f:8a:
24:f1:e9:30:b6:98:ec:5f:ce:b9:2f:eb:39:82:13:
92:56:a9:88:a7:f9:80:76:8d:4a:aa:4f:57:0f:57:
8e:cb:33:3c:ab:08:8a:71:d3:3e:fb:1f:cb:d7:bf:
6e:cd:d7:46:d5:a3:e8:26:41:1f:f0:3d:12:2c:56:
8e:66:21:27:8a:12:b1:f3:41:0d:4a:ee:62:98:3f:
01:21:9c:bf:3a:07:b2:32:e9:7c:81:a7:9f:b1:db:
ce:9a:7c:32:b4:81:21:fa:ef:a1:ff:3f:20:d1:91:
ed:98:d4:4b:9e:ca:62:e0:88:ca:ee:55:31:ce:f0:
3a:a0:4e:92:2e:b4:66:b2:1f:84:09:4f:60:96:8b:
c1:4c:ce:29:e4:de:35:04:56:2d:78:84:bb:c6:20:
34:97:8c:91:0d:e8:75:4e:b0:0f:e3:2f:a5:9f:98:
d2:8b:5f:64:f4:e8:4b:08:19:46:f8:d5:29:fc:00:
4d:dd:cf:18:ad:29:0c:b4:d7:81:1f:2d:1c:9e:2d:
14:90:50:23:79:1f:01:5c:8a:90:71:f0:bc:17:0e:
9e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:26:FE:FD:15:CD:B7:46:E0:20:C3:47:9F:2E:40:A7:56:C1:15:D3
X509v3 Authority Key Identifier:
keyid:5E:04:B0:2D:A5:7B:00:37:9B:56:1A:30:21:22:E7:8E:5D:50:89:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f4:4c:1d:ad:f5:0f:bb:3a:c0:1f:76:8c:bd:99:b7:da:32:
a9:6b:5a:e4:db:ef:d0:e0:8a:30:37:2a:14:87:47:ac:cf:bc:
13:bd:5b:9a:e8:7b:f1:2e:ef:e3:9c:ba:4b:89:4a:3c:39:4e:
dd:d3:c9:25:28:f4:c7:b2:04:40:00:6c:1c:76:8f:1d:38:df:
bd:5e:c0:d1:32:87:a5:78:86:99:b2:40:74:33:c7:92:22:6b:
20:8d:e4:bb:96:9e:d4:9e:49:b0:19:19:6d:47:15:8e:f1:fe:
20:09:52:af:f2:90:16:4b:32:5e:22:cd:9a:e2:9c:20:48:a6:
33:13:5c:b5:97:2a:2c:0c:35:75:16:ed:41:3c:34:57:5d:fc:
16:73:91:22:ec:2b:7e:6d:3e:73:57:6b:62:11:e3:9e:d9:df:
15:bf:fe:70:f7:34:53:9b:d6:a2:06:9d:65:b9:5a:8c:c3:87:
44:cc:ac:0f:b0:16:4d:42:d6:10:2d:4a:3b:b8:47:ee:15:fd:
82:a5:2c:29:4b:87:ba:d2:d3:41:1c:57:b0:d9:bb:12:7d:17:
f9:4f:da:da:fb:96:c1:a2:6f:fd:6b:02:c1:11:74:ab:3d:0b:
b4:27:24:1a:f4:a0:96:fe:38:b8:dd:26:d6:00:34:3d:1f:8e:
99:a9:dc:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 12:05:54 2026 by rpki-client