Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft
File: XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft (raw, json)
Hash identifier: XnQlj/H2fzr5/1nUFcEhP4AhEdUjysJCHwOGyi6P80M=
Subject key identifier: 3B:22:84:02:10:98:62:9F:92:B3:17:6D:EB:8C:44:D0:0C:61:BF:BA
Authority key identifier: 5D:D6:C1:38:4B:4A:4C:A5:01:DD:33:C5:F0:D8:58:0D:44:16:EB:3A
Certificate issuer: /CN=5dd6c1384b4a4ca501dd33c5f0d8580d4416eb3a
Certificate serial: 01A0D494860D2BB359E54E853A289855A89F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdbBOEtKTKUB3TPF8NhYDUQW6zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft
Manifest number: 0768
Signing time: Thu 24 Sep 2026 18:01:38 +0000
Manifest this update: Thu 24 Sep 2026 18:01:38 +0000
Manifest next update: Fri 25 Sep 2026 18:01:38 +0000
Files and hashes: 1: XdbBOEtKTKUB3TPF8NhYDUQW6zo.crl (hash: zBNbwcQcKN+YH04fPgGJfS2tKLtpIrn/IXM49YaGT5g=)
2: x90dPkWW8REhzconoQULUI7Rl80.roa (hash: IZPztQukbhq4U8uDrkKMf9ofAgLjzhebtlSwoKIMZXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdbBOEtKTKUB3TPF8NhYDUQW6zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:94:86:0d:2b:b3:59:e5:4e:85:3a:28:98:55:a8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6c1384b4a4ca501dd33c5f0d8580d4416eb3a
Validity
Not Before: Sep 24 18:01:38 2026 GMT
Not After : Sep 25 18:01:38 2026 GMT
Subject: CN=3b2284021098629f92b3176deb8c44d00c61bfba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:8b:29:17:18:66:3f:6d:5d:aa:1b:b7:77:
91:74:12:5f:f7:b6:27:41:1f:b8:7d:e6:e0:c8:7c:
d0:26:55:cb:c2:02:5c:37:be:ce:fc:a3:db:a8:d2:
f6:31:24:c8:7a:8e:2a:7b:33:d5:92:84:cf:b8:33:
08:13:bb:ad:ab:96:ea:ef:33:32:5e:4c:09:26:77:
07:54:b4:7b:f9:38:3b:01:65:67:43:ed:d4:13:5c:
f6:fa:be:8b:01:40:c6:ba:8c:6f:6d:01:90:97:43:
87:d9:e0:a5:05:ab:86:22:17:bc:4e:ce:70:2b:23:
7e:01:8c:0a:2a:ee:8d:e3:25:94:9e:01:c5:00:e9:
bb:52:92:3c:d1:39:43:ee:1e:b6:0f:51:20:c5:d7:
4b:17:c9:69:4c:bc:4c:d6:47:0f:6a:79:91:a8:2c:
6e:ab:2e:66:27:88:4b:6e:4a:aa:91:10:b6:49:50:
83:3b:05:95:5b:c1:b9:eb:06:91:53:09:eb:dd:7a:
3a:a1:d8:fd:f3:58:74:4d:ad:be:7b:50:f0:d8:b5:
c7:45:c8:7b:c0:9c:56:c1:12:1e:2a:a0:17:9c:ff:
fd:42:eb:e1:58:c0:8e:fa:52:91:c4:4a:ad:3b:83:
ad:ef:29:0b:ff:b4:4d:b4:b9:e6:00:20:9b:e1:4a:
93:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:22:84:02:10:98:62:9F:92:B3:17:6D:EB:8C:44:D0:0C:61:BF:BA
X509v3 Authority Key Identifier:
keyid:5D:D6:C1:38:4B:4A:4C:A5:01:DD:33:C5:F0:D8:58:0D:44:16:EB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdbBOEtKTKUB3TPF8NhYDUQW6zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/9157a9-04b0-41be-9c24-d82d06a87bfe/1/XdbBOEtKTKUB3TPF8NhYDUQW6zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:c0:75:b4:d0:94:22:7e:83:a5:b5:3a:52:92:72:49:07:ce:
1f:56:af:30:5e:55:21:d9:4a:fe:9d:87:3f:d8:d9:fc:e3:ea:
cd:88:f8:f3:7a:9c:55:89:ea:03:58:be:14:25:91:39:46:80:
a4:63:f6:39:20:d8:2d:d3:5a:52:f0:63:04:10:ce:b6:c7:c0:
75:0c:04:71:b6:5b:06:fe:48:69:ff:82:59:cc:ee:5b:f6:83:
3e:5e:95:e4:03:63:b7:2e:df:e1:48:fe:80:46:9a:f1:1b:19:
d2:a0:9d:8a:d1:73:03:0f:c3:c3:a7:2e:7c:70:08:ec:ed:a1:
75:8c:08:35:ad:c4:0b:92:38:b7:10:9a:83:e9:1c:65:47:3b:
7b:6f:8e:ed:fc:41:fb:85:38:52:48:ad:53:db:d6:48:1f:ef:
9d:e1:cf:32:1b:8b:a2:f7:8d:11:71:e3:74:ed:d6:1d:38:d6:
a5:07:85:4f:46:63:ed:33:bb:67:a0:da:b9:82:63:68:02:03:
e0:3d:ad:8a:19:63:7d:b0:17:c9:10:9f:0c:e2:4d:71:78:7e:
dd:5d:83:79:d3:51:5c:15:3b:12:d8:00:73:9a:86:e4:36:d0:
94:3a:b0:0b:a4:b6:b9:12:38:c2:0f:0e:87:17:90:15:eb:bf:
73:64:5d:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:33:44 2026 by rpki-client