Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json)
Hash identifier: Ad9Wf0ItZeea7ZZOdF3FQlMs2oCAyYIaKeQ7DbFbW8A=
Subject key identifier: 78:C9:11:A4:86:F8:CE:24:03:23:F9:50:1D:24:86:D1:BC:EC:C5:6D
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial: 01A0DBE04E8DDA68EB812DCB9A6329E3751D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
Manifest number: 1A70
Signing time: Sat 26 Sep 2026 04:01:45 +0000
Manifest this update: Sat 26 Sep 2026 04:01:45 +0000
Manifest next update: Sun 27 Sep 2026 04:01:45 +0000
Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: ehQQYaApKLNngq5ROWsKGEDbdVHZBii8eKfN5CGvgHk=)
2: aeEP89HKT7e7KYklfEV6GwzzRq4.roa (hash: +iLAVwj6kbQSZH9/6AWgoWRz5/OYd1yxCHRY7Br0+CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:4e:8d:da:68:eb:81:2d:cb:9a:63:29:e3:75:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Validity
Not Before: Sep 26 04:01:45 2026 GMT
Not After : Sep 27 04:01:45 2026 GMT
Subject: CN=78c911a486f8ce240323f9501d2486d1bcecc56d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e7:35:bb:d3:87:0f:40:08:6d:0d:95:8d:63:
9b:dc:68:91:d0:f6:08:aa:4f:29:04:4d:f5:f5:69:
80:12:18:89:5a:7b:2d:67:a0:f2:0e:d7:a6:02:1f:
5d:19:1d:fb:5a:66:5c:9e:fd:3a:cd:da:7f:2c:52:
4a:de:81:de:1e:fd:f9:6d:1f:e2:f8:24:46:35:c1:
bf:60:1a:eb:eb:c4:40:86:c9:81:56:b1:8c:b5:84:
3d:81:b6:5f:81:ae:af:86:2c:0f:9b:f7:91:43:be:
24:90:ab:a7:45:8e:bd:58:a9:43:31:03:e4:5c:fa:
8d:8c:f7:6e:53:90:ae:19:38:d1:d2:3e:c8:5b:88:
09:6c:fa:c2:61:b0:ab:1d:95:79:8e:ba:7a:67:52:
72:28:e7:d6:1c:92:d7:d6:24:12:b6:c9:48:b1:65:
e0:d4:ca:22:e0:7d:04:71:d1:a3:7b:2a:dd:a9:cc:
dc:d6:a7:1b:3a:30:0b:04:79:66:5f:68:9b:76:17:
af:3d:da:8a:a9:40:aa:4b:ac:e5:14:a4:bd:5c:63:
7e:c8:6d:e7:6a:62:5a:06:d2:14:81:10:16:33:f3:
c8:00:5d:aa:d8:58:c1:2f:8d:fd:9b:d8:52:b6:fd:
15:48:1f:2e:ee:2e:a4:33:ee:f2:dc:8d:2a:3a:df:
ae:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C9:11:A4:86:F8:CE:24:03:23:F9:50:1D:24:86:D1:BC:EC:C5:6D
X509v3 Authority Key Identifier:
keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:4c:e8:b6:95:68:4f:40:52:f8:f0:df:ce:94:83:27:61:50:
94:39:14:f4:32:7e:f4:54:21:f6:56:d4:47:30:79:5a:62:2c:
c1:5e:2e:26:78:91:03:2e:5a:f4:c4:85:f2:80:78:11:9c:98:
19:c0:65:4d:41:69:ff:40:ff:7d:0b:a7:4e:b0:dc:95:19:9d:
07:f4:f7:24:a2:5c:fb:b6:7a:66:b3:29:13:a8:67:72:87:76:
77:2f:bf:8f:c0:7b:2b:20:da:d0:44:9c:8f:7c:0a:64:e9:72:
1a:28:88:71:82:49:e8:69:e8:e9:f7:78:b4:52:ed:07:ca:24:
07:20:d0:16:28:79:ad:06:ae:72:09:f5:89:05:37:42:fc:e3:
03:74:0b:71:14:7d:61:74:39:4c:35:1b:1b:32:c2:9b:26:dd:
84:be:26:f1:7a:c3:4e:0c:ef:97:a4:13:5d:3d:63:b5:8f:32:
d1:f2:e4:52:39:3f:92:8c:40:0f:db:f9:22:05:6b:1e:f5:a0:
63:c6:e5:eb:9d:c1:73:9f:49:37:a9:3c:c8:5c:df:2c:82:27:
61:2e:d4:e1:04:1e:62:54:20:60:82:69:6b:e9:eb:be:24:b1:
74:42:07:de:b3:f7:f6:32:41:14:07:ca:65:20:5c:dc:c1:c5:
b1:59:b0:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDb4E6N2mjrgS3LmmMp43UdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMjljYmEyZGFjZjBlZjlmYTIyMDkwMDMyYmIxNTlhMTA5
MTQwZjAwHhcNMjYwOTI2MDQwMTQ1WhcNMjYwOTI3MDQwMTQ1WjAzMTEwLwYDVQQD
Eyg3OGM5MTFhNDg2ZjhjZTI0MDMyM2Y5NTAxZDI0ODZkMWJjZWNjNTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk+c1u9OHD0AIbQ2VjWOb3GiR0PYI
qk8pBE319WmAEhiJWnstZ6DyDtemAh9dGR37WmZcnv06zdp/LFJK3oHeHv35bR/i
+CRGNcG/YBrr68RAhsmBVrGMtYQ9gbZfga6vhiwPm/eRQ74kkKunRY69WKlDMQPk
XPqNjPduU5CuGTjR0j7IW4gJbPrCYbCrHZV5jrp6Z1JyKOfWHJLX1iQStslIsWXg
1Moi4H0EcdGjeyrdqczc1qcbOjALBHlmX2ibdhevPdqKqUCqS6zlFKS9XGN+yG3n
amJaBtIUgRAWM/PIAF2q2FjBL439m9hStv0VSB8u7i6kM+7y3I0qOt+u0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHjJEaSG+M4kAyP5UB0khtG87MVtMB8GA1UdIwQY
MBaAFFwpy6Lazw75+iIJADK7FZoQkUDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MjlmZGEtZDg1Mi00YWNhLTlhZmYt
NmQxZmE0MmQwYjgwLzEvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MjlmZGEtZDg1Mi00YWNhLTlhZmYtNmQxZmE0MmQwYjgw
LzEvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0zotpVo
T0BS+PDfzpSDJ2FQlDkU9DJ+9FQh9lbURzB5WmIswV4uJniRAy5a9MSF8oB4EZyY
GcBlTUFp/0D/fQunTrDclRmdB/T3JKJc+7Z6ZrMpE6hncod2dy+/j8B7KyDa0ESc
j3wKZOlyGiiIcYJJ6Gno6fd4tFLtB8okByDQFih5rQaucgn1iQU3QvzjA3QLcRR9
YXQ5TDUbGzLCmybdhL4m8XrDTgzvl6QTXT1jtY8y0fLkUjk/koxAD9v5IgVrHvWg
Y8bl653Bc59JN6k8yFzfLIInYS7U4QQeYlQgYIJpa+nrviSxdEIH3rP39jJBFAfK
ZSBc3MHFsVmwTQ==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:36:55 2026 by rpki-client