Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
File: XL1s2RrWpyhrIfZQn92fUP7nXYc.mft (raw, json)
Hash identifier: RxhR2MJyZ8dPqnr3wWS13eR/1BEKH0d+M0bfVQbnx6w=
Subject key identifier: 4D:EF:B9:2E:A2:E1:9A:9E:58:A7:2D:F4:FE:B5:D0:A9:7E:34:51:53
Authority key identifier: 5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87
Certificate issuer: /CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87
Certificate serial: 01A0E4AC950E125A509899B1EFC302A781E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
Manifest number: 19A3
Signing time: Sun 27 Sep 2026 21:01:50 +0000
Manifest this update: Sun 27 Sep 2026 21:01:50 +0000
Manifest next update: Mon 28 Sep 2026 21:01:50 +0000
Files and hashes: 1: XL1s2RrWpyhrIfZQn92fUP7nXYc.crl (hash: HHz5kMDDwOPgmP1yfr1RTy+/RGQQS25T0OvYYK/11Fo=)
2: aJRCmul5cvMFEkfsWwNh6YKtWg0.roa (hash: scsks3FGlAv25a5TwoetFCR7muYAvHPLPp8bABvEfPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:ac:95:0e:12:5a:50:98:99:b1:ef:c3:02:a7:81:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cbd6cd91ad6a7286b21f6509fdd9f50fee75d87
Validity
Not Before: Sep 27 21:01:50 2026 GMT
Not After : Sep 28 21:01:50 2026 GMT
Subject: CN=4defb92ea2e19a9e58a72df4feb5d0a97e345153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e4:08:01:36:52:9e:ce:ea:35:c3:72:57:d9:
8b:64:41:a8:7a:82:d3:1b:d5:d4:21:b6:76:2f:36:
b1:35:16:aa:b2:3f:79:94:c2:a8:90:bf:9c:4e:86:
ad:14:8d:ab:54:a4:35:81:97:f7:58:d2:d6:d3:2c:
ee:5a:c9:f9:bd:35:f1:e3:56:d1:3f:2f:5d:7a:8e:
e4:35:59:71:cd:23:f8:db:00:ba:c1:6a:bc:a2:12:
21:29:ac:5b:37:fd:8a:f2:3a:9c:54:49:71:31:f8:
5d:ce:fe:ee:be:e1:fa:4d:6b:43:b2:1d:0d:a8:bc:
c9:5b:6f:3f:41:af:65:86:e2:48:34:85:fc:a8:79:
d6:6e:47:70:03:a4:03:f8:da:26:42:41:33:88:b0:
09:c4:62:ac:6d:79:37:18:e1:df:a3:c2:35:04:51:
6f:cb:6c:d7:09:9a:c8:27:08:50:1e:0a:7c:ab:57:
23:49:4a:8d:8d:aa:ce:b1:76:14:8b:19:53:76:76:
a7:94:29:92:19:69:7f:cc:e2:d1:1e:06:41:7b:c2:
5e:d2:97:f4:f4:bd:0f:6b:22:94:74:f9:09:97:92:
af:9e:1b:3e:b1:8c:d6:d9:1a:ee:81:74:c2:03:df:
13:00:bf:50:80:39:de:16:89:93:57:a8:a0:47:42:
43:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:EF:B9:2E:A2:E1:9A:9E:58:A7:2D:F4:FE:B5:D0:A9:7E:34:51:53
X509v3 Authority Key Identifier:
keyid:5C:BD:6C:D9:1A:D6:A7:28:6B:21:F6:50:9F:DD:9F:50:FE:E7:5D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XL1s2RrWpyhrIfZQn92fUP7nXYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e0223a-31fd-4cac-8164-fba074ba1b90/1/XL1s2RrWpyhrIfZQn92fUP7nXYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:18:e4:19:c6:f9:26:27:13:08:aa:1d:b9:4d:78:83:19:d1:
3b:c1:39:d6:10:ea:5c:83:2a:e2:6c:34:f8:5b:cb:c2:ea:55:
9a:7b:9c:4b:4b:d4:f4:33:00:04:28:63:22:6e:20:13:61:55:
ce:fe:f7:82:69:e8:c8:39:90:40:13:55:07:9f:58:6a:93:17:
a6:17:d0:b5:e3:5e:d6:8d:b6:6f:7a:c3:4e:44:90:e1:b5:bf:
fc:11:8e:b5:96:b5:6b:f5:a5:3d:62:81:f2:2d:e9:89:20:a1:
7d:8d:88:99:45:b7:45:51:d4:ed:65:b9:ef:b7:e3:4f:f4:ac:
c3:68:d8:86:ed:54:8c:d1:ba:91:e2:c0:3b:e6:84:9d:c2:d2:
03:e9:f6:11:c2:59:ee:8c:3e:e5:e3:84:f5:30:29:66:98:15:
e4:bb:dd:17:f5:7d:e0:08:02:3a:2a:03:e5:70:fb:3b:fe:62:
fa:db:40:61:c8:59:7c:ae:37:92:08:ed:84:65:34:79:fd:29:
f4:6e:98:84:d0:b8:89:6a:94:7d:cd:b2:d7:9e:3c:ee:9e:23:
54:99:ce:84:26:0b:00:cb:f4:f6:7b:b8:ad:e7:c8:5e:9a:50:
4b:4e:47:6b:8f:61:dc:38:16:cb:e7:53:3f:9d:e2:64:d0:4f:
ae:b6:1e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:41:17 2026 by rpki-client