Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: ik1XbE0uBNVTkJUIDX6JoJKOvGfG11EpXrTpTlLTIGc=
Subject key identifier: F7:E2:C5:1D:59:ED:93:B2:ED:85:25:08:AC:1D:23:73:50:E0:66:8D
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 01A0D34A727F0B0A1FBFC70F99C9DD9C6C14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 1981
Signing time: Thu 24 Sep 2026 12:01:06 +0000
Manifest this update: Thu 24 Sep 2026 12:01:06 +0000
Manifest next update: Fri 25 Sep 2026 12:01:06 +0000
Files and hashes: 1: 7oVXpAJyEuxYNuHmvd9aRWGoKfo.roa (hash: aOBhiDvMAxK+XYQzQVgLlx3/xd+jEySWQ2727ke/inY=)
2: Ey3m-lZEA987v9BNrn8LK_J0g00.roa (hash: bt6vCGnGpQLk0MF/D7iRAV+4/yJjQaAzG7ZTnezd07w=)
3: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: LJRgpNw6RxPA49si4vzvRVKSp5MABkuEV2plsIlZw20=)
4: YTkSY80BXrrm0yOSSyQ4NcWfFCg.roa (hash: Srwxxn9T4n8eBKaxltWuAJ0FzIn1uI4bI96/Rm2hnBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:4a:72:7f:0b:0a:1f:bf:c7:0f:99:c9:dd:9c:6c:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Sep 24 12:01:06 2026 GMT
Not After : Sep 25 12:01:06 2026 GMT
Subject: CN=f7e2c51d59ed93b2ed852508ac1d237350e0668d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e0:39:6c:21:4a:15:72:d5:38:ef:5c:4b:ec:
db:cd:8d:78:f9:a0:2c:a5:41:c9:f0:91:c2:08:66:
2f:99:6a:8b:b8:18:fc:1c:ac:c4:f8:0d:f2:4d:ef:
e7:ca:a8:8b:7c:08:3e:ff:47:bd:c9:ac:d5:f7:75:
35:b1:21:3a:ad:d0:e6:53:76:8c:0f:e6:5c:47:b2:
5a:48:fd:d7:33:f4:45:48:03:e6:83:7f:2a:3d:5b:
e2:63:84:a1:87:c9:81:29:1a:49:07:73:81:26:56:
50:a5:01:b0:60:b7:22:95:6d:56:55:fb:1e:45:dc:
32:4b:3b:c2:b2:4d:94:fc:1d:b9:a7:b6:29:5a:00:
11:12:51:31:b0:0c:71:83:d3:78:55:ce:66:b9:71:
9a:5f:77:ee:cf:25:8a:28:e9:8c:78:b2:c2:65:bb:
0e:4a:10:4d:66:ee:2f:83:1b:45:bd:1b:e9:c2:d0:
44:b2:60:3f:8b:56:20:55:f2:a8:95:ac:1d:23:86:
17:8b:2f:14:7d:3e:73:20:af:46:13:af:69:a3:32:
7d:33:af:32:48:a9:53:bd:94:12:00:45:44:c7:66:
a2:70:ac:d3:de:44:67:d1:bc:75:71:8f:15:f6:08:
b3:80:15:e7:41:c2:bc:8d:85:6b:c6:2b:9b:93:68:
d3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E2:C5:1D:59:ED:93:B2:ED:85:25:08:AC:1D:23:73:50:E0:66:8D
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:b8:f6:a9:80:a3:1e:4a:4f:5a:f3:f4:e5:84:72:8d:48:99:
a8:dd:c3:36:f9:07:47:0f:99:5d:da:c8:4d:24:c1:2e:8e:2d:
69:23:13:8a:c2:74:93:0d:c1:47:dd:c1:46:e7:88:39:7d:07:
9d:7b:47:27:27:f3:ed:10:64:fb:33:43:32:38:d8:cd:3f:61:
8d:6f:b2:8d:bd:f3:ac:e8:33:f2:76:2f:86:c7:c9:87:60:f0:
1f:6a:07:b6:67:10:08:82:e1:de:95:7e:04:7b:c5:25:c0:78:
44:72:9f:f4:a2:68:89:0d:56:0f:a9:33:46:dd:a5:19:e4:12:
9d:bf:75:b7:3a:81:87:0c:08:d3:6e:39:7a:51:20:7b:81:d6:
da:7e:18:b0:5b:e4:00:a3:36:09:aa:63:3f:a1:c6:a1:7c:c7:
24:ba:a6:83:33:72:11:8b:fa:cf:57:de:c9:fd:37:bc:f4:92:
7c:8e:4c:bd:f8:f8:69:f6:a7:16:0d:6c:e5:71:ee:52:9f:5d:
0d:70:c8:7e:d4:94:09:82:2d:42:82:f1:32:dc:c7:30:30:47:
47:2c:60:5c:45:8b:70:97:06:8d:15:03:b6:5a:0b:13:14:f9:
f2:33:9a:62:f1:9d:d4:d3:48:44:31:3d:91:2b:76:dc:76:76:
55:91:ac:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:30:00 2026 by rpki-client