Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
File: Xquekv3YH0FBR5edBTHibe3SYqw.mft (raw, json)
Hash identifier: +eBCTHufOxErkjIlyi4sqCz4NjMgxH9JGSoIu9kv5io=
Subject key identifier: 4F:66:8C:25:15:77:A5:CC:FD:6F:63:62:DC:31:C8:D8:FF:04:EE:49
Authority key identifier: 5E:AB:9E:92:FD:D8:1F:41:41:47:97:9D:05:31:E2:6D:ED:D2:62:AC
Certificate issuer: /CN=5eab9e92fdd81f414147979d0531e26dedd262ac
Certificate serial: 01A0D570C8F74BF9B99A4662A066FB2DB8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
Manifest number: E8
Signing time: Thu 24 Sep 2026 22:02:13 +0000
Manifest this update: Thu 24 Sep 2026 22:02:13 +0000
Manifest next update: Fri 25 Sep 2026 22:02:13 +0000
Files and hashes: 1: Xquekv3YH0FBR5edBTHibe3SYqw.crl (hash: DEYRrYRi+toAuxvyI0W2/yLShMzHCWI/wUd7KewLNMY=)
2: wZfLh5WSFAXKinsiyS1145pWxAk.roa (hash: t/km2qU0O3WotdafAm5WAIJsGqYsS42YCnAubnFGkjY=)
3: yWSxVMHaA7K49CJJasfPgxf0K9U.roa (hash: Bq8kCXwpBRnHBgJBCumGdqGaVlW+LIt6xmOmyuq+Mck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:c8:f7:4b:f9:b9:9a:46:62:a0:66:fb:2d:b8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eab9e92fdd81f414147979d0531e26dedd262ac
Validity
Not Before: Sep 24 22:02:13 2026 GMT
Not After : Sep 25 22:02:13 2026 GMT
Subject: CN=4f668c251577a5ccfd6f6362dc31c8d8ff04ee49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b8:e7:0d:4b:73:dd:e5:81:40:a1:74:1a:92:
e5:ae:ef:e1:65:ae:92:60:b4:5b:a2:8e:a8:44:81:
c2:a1:7b:63:da:aa:12:e6:45:b4:3c:df:b2:09:50:
9d:49:9c:b9:52:42:bf:76:47:f9:d1:35:76:24:12:
0e:c7:96:4b:51:47:a2:a0:4f:f9:e2:ae:f4:12:1e:
25:37:cd:d2:f5:3e:f7:58:88:a8:9e:3c:1d:a9:f9:
c5:e5:f3:6a:46:d9:f6:b6:4e:ce:d0:25:a2:bd:90:
7b:e0:f7:d6:57:9e:40:b1:2f:32:75:c9:a7:f9:3f:
76:7e:15:d5:c1:64:4b:43:c6:e2:95:b5:d2:89:81:
d9:0d:a6:a8:e5:4e:b8:61:9a:20:1c:91:af:3f:74:
d0:1a:92:4a:0d:2e:a7:55:fa:ae:2c:d6:bd:6a:30:
a6:3c:95:9b:ef:89:0c:59:b0:88:bf:2f:45:72:35:
46:55:f6:9a:17:97:7f:f8:a0:fa:01:ee:1f:38:b9:
4a:ea:75:e3:6f:6c:03:a4:d6:d9:43:1c:c6:a3:33:
17:7b:72:83:b3:55:a5:b4:d7:f4:e3:80:99:91:f7:
1a:8f:8b:f3:bd:ed:8f:da:a5:77:1d:4f:3e:50:01:
c5:1f:37:11:ea:01:0f:8b:fe:f0:27:84:0d:a8:19:
bf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:66:8C:25:15:77:A5:CC:FD:6F:63:62:DC:31:C8:D8:FF:04:EE:49
X509v3 Authority Key Identifier:
keyid:5E:AB:9E:92:FD:D8:1F:41:41:47:97:9D:05:31:E2:6D:ED:D2:62:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b9:6b:92:12:f7:2f:2c:7b:12:79:f0:e8:ce:19:19:c6:7e:
76:b8:60:94:53:72:99:9b:07:bd:e5:06:11:58:09:cf:83:ce:
e7:4c:35:d1:f3:58:84:9b:8e:db:09:52:ca:25:a1:36:80:5c:
07:a1:c7:3c:dc:62:a2:3e:2c:a9:c1:f9:81:5a:0e:71:d6:3c:
11:c9:08:a2:6e:c2:1a:95:80:b8:8f:40:f5:e5:0f:79:b5:fd:
b4:48:a2:ad:5c:ec:c7:01:75:54:00:f8:3e:42:d3:d1:f4:46:
e7:a3:97:ac:dc:24:5a:2d:e0:2d:76:f0:bc:da:44:22:a0:62:
c5:5e:54:f7:02:77:ca:c0:65:8a:f6:3c:5d:b5:17:06:e3:ef:
11:6e:14:c3:1f:45:9a:62:5d:b3:71:f0:ff:41:58:7f:3e:eb:
9f:a0:bc:cf:d1:e3:63:21:1c:dc:89:89:25:d2:d9:3d:07:aa:
37:7e:68:f0:03:a4:54:db:26:6e:1f:e5:07:bf:2d:ab:45:b8:
f6:a9:5a:fa:9a:8d:8c:7c:38:6e:e7:bc:cb:b6:fa:33:0f:47:
6f:d8:42:93:a6:fe:cd:f1:13:e4:ed:f5:15:0f:94:cc:f5:37:
2a:66:f6:cf:99:d4:b5:6b:42:bd:d9:3e:7f:da:e5:ab:b6:2e:
ac:ec:c9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:03:24 2026 by rpki-client