Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
File: XDodlz-bM5HorayqZk0bI9d48Ag.mft (raw, json)
Hash identifier: KHReEx7oDcS1tyewFIHFYvH39TnqcB93Wpo9QQK8Iuw=
Subject key identifier: 3D:87:81:10:06:99:9D:64:75:F9:62:E5:4C:E8:96:35:23:1B:59:88
Authority key identifier: 5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
Certificate issuer: /CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Certificate serial: 01A0D5A74D656E7D710057B7ED9F6A406C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
Manifest number: 1A72
Signing time: Thu 24 Sep 2026 23:01:46 +0000
Manifest this update: Thu 24 Sep 2026 23:01:46 +0000
Manifest next update: Fri 25 Sep 2026 23:01:46 +0000
Files and hashes: 1: XDodlz-bM5HorayqZk0bI9d48Ag.crl (hash: oMijd5VCeK7D+27pgaTMZ558CXH3vgYEAo2P3uclfOY=)
2: nESdHSYfa1deK4cuMEoqKlkUBhA.roa (hash: Ne5xi2gxYVVWXxqP7e6edUaF5lMzo3AlLl0nnSwGj20=)
3: rZYX5fKPq_iTsTklZo3tUzGErD8.roa (hash: Bkadagr0tzraTAYCN3j7TcAW/fLW29DF6wAopom2qpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:a7:4d:65:6e:7d:71:00:57:b7:ed:9f:6a:40:6c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c3a1d973f9b3391e8adacaa664d1b23d778f008
Validity
Not Before: Sep 24 23:01:46 2026 GMT
Not After : Sep 25 23:01:46 2026 GMT
Subject: CN=3d87811006999d6475f962e54ce89635231b5988
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d8:7a:d0:23:27:53:c1:d0:d0:6b:cb:81:62:
70:a0:70:b7:2e:90:20:52:a0:1f:96:e7:dd:1e:e6:
02:b8:43:cc:ff:b3:2a:b3:ba:14:73:ea:f1:68:e5:
f0:81:8d:db:1c:92:9d:dd:9b:58:91:8b:1e:d0:19:
55:b2:b6:04:ab:3c:9b:96:90:9c:6c:94:90:b3:15:
d8:3a:31:7d:03:dc:86:05:b5:74:e3:51:8a:f8:23:
64:d5:ce:a9:1a:69:6f:41:e2:1e:fd:87:f0:9d:10:
ff:80:cd:81:1e:df:51:95:c0:d4:fa:95:ff:be:b8:
81:fb:d9:8f:c7:4e:95:6d:90:0d:6c:93:a9:b6:54:
2d:a8:44:bd:69:21:49:ed:c6:ee:08:4b:61:82:c7:
ab:11:fb:5f:be:56:7d:21:68:55:80:81:c8:a3:13:
1a:6e:97:e9:97:d5:bd:f1:40:3d:b7:54:9c:34:49:
3d:13:b1:7e:e2:71:10:8f:0a:4d:43:59:dd:8c:bd:
ab:9a:0b:0b:33:df:73:ed:2f:39:cf:e2:e8:42:e9:
00:3f:8c:66:94:9a:a9:f4:45:53:48:59:28:3c:74:
73:17:71:aa:c9:24:37:49:75:52:d5:4c:75:20:c1:
f8:0b:e7:97:77:7f:4c:94:6f:8b:ce:16:c9:a9:af:
4b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:87:81:10:06:99:9D:64:75:F9:62:E5:4C:E8:96:35:23:1B:59:88
X509v3 Authority Key Identifier:
keyid:5C:3A:1D:97:3F:9B:33:91:E8:AD:AC:AA:66:4D:1B:23:D7:78:F0:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDodlz-bM5HorayqZk0bI9d48Ag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/a5fcf5-7863-43c1-a1c1-194cc9902abf/1/XDodlz-bM5HorayqZk0bI9d48Ag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f4:e4:88:b5:d7:01:c2:32:29:b3:4d:ef:4d:97:8b:8b:24:
a2:14:8a:8c:3e:4f:94:d7:e0:c3:d8:ee:95:fa:64:42:41:5f:
d0:36:a9:54:af:aa:21:53:66:44:f6:4a:16:7c:11:4d:26:11:
fe:c2:4f:3e:30:cf:4b:19:dc:25:bb:03:2c:f8:06:34:f5:aa:
62:93:57:11:59:db:fb:96:86:3f:b2:84:02:2a:f7:69:c7:59:
a2:3f:b3:57:99:9c:ca:f4:53:33:02:47:4e:2f:71:04:2e:58:
49:be:d0:ce:17:7c:a4:a6:26:db:5c:d4:fb:b2:57:bb:5e:b3:
e4:30:88:0a:bd:fe:d9:6a:1a:ad:b5:31:da:ec:5f:1e:60:f0:
9d:73:5e:9c:49:50:c5:1c:e8:5e:ea:2b:2b:9f:6c:7b:f1:6b:
17:c1:dc:76:a7:2a:f8:e6:5c:60:89:d4:26:1f:19:3d:05:1a:
54:51:b2:c2:ac:86:0d:25:55:fc:6c:1f:09:d6:b3:36:23:58:
7e:9e:13:c7:5c:0f:44:be:78:64:8c:a5:30:22:75:13:48:63:
2e:7d:be:da:17:07:8b:9b:43:c7:c6:07:bd:2f:fc:b9:85:a4:
89:77:8b:7b:ad:a2:13:a0:da:c1:cf:e6:81:87:3e:3f:44:c6:
d5:05:cc:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 01:21:41 2026 by rpki-client