Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
File: XlFUwaEL4eJaptT4rvpGrTH5uW4.mft (raw, json)
Hash identifier: /48DnFfbMEeBU50JFLCri7WPShsF1RqH92MLW8xn7LM=
Subject key identifier: 02:FE:7D:8E:5C:F8:D6:84:D3:FA:09:E7:3C:13:6B:4C:1D:AB:19:02
Authority key identifier: 5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
Certificate issuer: /CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Certificate serial: 01A0CBC71B1F4ACBC328DFA07222DF82FC34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
Manifest number: 023A
Signing time: Wed 23 Sep 2026 01:00:18 +0000
Manifest this update: Wed 23 Sep 2026 01:00:18 +0000
Manifest next update: Thu 24 Sep 2026 01:00:18 +0000
Files and hashes: 1: XlFUwaEL4eJaptT4rvpGrTH5uW4.crl (hash: chUjeLSEOPeFUK4ntPyqzIzl++9n20bv+QeMAHDfOow=)
2: y9CLGthskm4bnZl6iRpadOOvcw0.asa (hash: 4oKFMMI1txxJcbOTwatF9YPUQxB0wLl2gg3DiiRkr5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:c7:1b:1f:4a:cb:c3:28:df:a0:72:22:df:82:fc:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Validity
Not Before: Sep 23 01:00:18 2026 GMT
Not After : Sep 24 01:00:18 2026 GMT
Subject: CN=02fe7d8e5cf8d684d3fa09e73c136b4c1dab1902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:28:94:be:3f:8b:ca:44:36:46:4d:32:52:f3:
b1:d0:b9:36:17:b1:b6:6a:04:dd:15:2c:54:98:a0:
bc:3d:72:95:2e:2b:6f:60:a8:10:16:cc:1b:65:7e:
76:02:10:0d:e0:01:78:c8:06:38:46:ba:91:4c:7b:
c2:10:47:ac:83:8d:a3:27:ad:11:75:98:a9:da:e3:
0a:b7:13:f2:c5:fb:c9:88:44:04:f6:b1:e2:4f:6c:
25:1c:8f:f7:e9:66:35:73:77:73:39:5d:cf:1c:ca:
f5:33:94:9a:b7:3f:bd:1e:21:3d:7d:8c:4c:13:a8:
09:87:92:90:6d:e1:4f:03:29:7c:b8:9d:74:16:32:
a1:26:11:74:2d:75:57:ec:d7:c2:c6:eb:97:88:b4:
35:00:5e:36:b7:58:97:d5:4a:4b:84:2c:84:e9:f0:
0d:c6:1c:b1:c1:99:56:c8:5d:d4:16:7e:61:d9:b1:
4f:7f:dc:8d:d0:a4:6f:c1:b2:34:5d:af:3e:3e:cd:
05:70:5e:fa:62:ce:5c:ca:c1:a5:f6:21:7c:13:45:
e6:0e:9e:16:86:19:db:45:29:d6:66:03:ec:ab:73:
61:e9:ea:89:b3:ed:a3:4e:e5:d0:a9:c7:a7:3b:f5:
d4:b4:76:67:41:3f:6e:8c:c9:b3:50:2a:17:bc:64:
04:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:FE:7D:8E:5C:F8:D6:84:D3:FA:09:E7:3C:13:6B:4C:1D:AB:19:02
X509v3 Authority Key Identifier:
keyid:5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:9d:37:b8:97:96:71:1e:a3:14:27:83:18:0c:ab:c9:0d:cd:
53:bc:27:d5:01:9c:5c:e1:d6:1e:25:62:f6:cd:ea:5b:66:0a:
15:7e:73:29:01:b3:4a:18:99:d6:2b:c4:22:5d:d0:99:5d:74:
b5:cf:3b:00:48:20:25:a6:9b:94:32:c6:f2:b1:c7:08:4f:c7:
d8:93:67:79:b7:82:d4:c2:34:f1:ca:90:a4:d9:f0:c8:36:ee:
92:f4:db:a4:af:0c:1b:a7:af:e6:cc:13:d3:2e:2c:19:bc:be:
f3:46:76:55:bc:0a:45:b0:67:9a:b3:23:07:25:0b:27:4c:f2:
d6:ca:88:3e:6a:a3:00:df:3b:1e:8d:00:d4:d6:84:37:55:12:
9c:f1:02:96:02:8a:da:41:23:17:76:1b:40:71:01:a8:a4:f3:
ef:41:7e:31:03:b2:a0:47:ec:82:d6:ed:8d:c5:6d:b8:b6:5b:
bc:64:b9:d1:a9:00:3c:71:9d:de:2d:5f:f9:21:96:50:6f:ef:
d2:67:30:4c:fe:5a:e1:9d:49:a3:3b:2d:32:74:c7:80:5b:06:
0b:a0:88:3c:30:4f:8c:09:27:bc:a1:5b:79:1d:05:1d:aa:32:
29:31:1a:6b:67:05:13:35:a4:56:e7:96:a1:c6:f5:c3:bc:09:
8d:f7:90:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 04:19:26 2026 by rpki-client