Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
File: XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft (raw, json)
Hash identifier: IS+DJ0s2z8ndyMl5UYGIpFXVqN5a3UEnc0gl+1L5NM4=
Subject key identifier: C4:C4:9A:22:58:99:F4:CB:E9:F9:37:8A:4F:8C:D8:61:BA:10:E1:86
Authority key identifier: 5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
Certificate issuer: /CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Certificate serial: 01A0D3F08846D336FDD2484E668B4BB76851
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
Manifest number: 064B
Signing time: Thu 24 Sep 2026 15:02:31 +0000
Manifest this update: Thu 24 Sep 2026 15:02:31 +0000
Manifest next update: Fri 25 Sep 2026 15:02:31 +0000
Files and hashes: 1: XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl (hash: A+JSvIuxLwY+ntxcr+jbAod/LVw1vF2x1nV7jCCQix4=)
2: ua_e8PovLDNf56za3RBEa7cuuaQ.roa (hash: AeMBv+klAL3WpkSagPgkjuVi+j0J2ixa7AC/uv/cJ9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:88:46:d3:36:fd:d2:48:4e:66:8b:4b:b7:68:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Validity
Not Before: Sep 24 15:02:31 2026 GMT
Not After : Sep 25 15:02:31 2026 GMT
Subject: CN=c4c49a225899f4cbe9f9378a4f8cd861ba10e186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:f6:23:f6:88:bb:eb:75:2b:16:2c:2e:31:
08:75:68:cf:b9:20:19:6b:9c:dd:e9:f7:9f:70:5f:
29:45:37:d2:8e:bd:37:1e:3d:64:97:63:01:cc:68:
98:f5:59:33:47:ed:25:28:62:b3:e7:1f:5d:aa:a7:
12:6b:e9:07:75:18:8a:86:1a:a2:b0:7f:ac:1d:2c:
a8:ab:4f:60:0f:e9:0b:db:f9:00:74:a0:a6:cd:dd:
92:00:19:a7:c1:61:b1:5b:02:86:11:0f:3a:e9:9e:
eb:fe:6a:68:de:aa:67:8d:98:78:56:46:69:ba:dd:
30:16:b8:8c:9e:53:48:62:d4:db:69:76:92:ba:fc:
93:24:f8:bf:88:9e:cc:a3:66:ff:6a:2c:ee:8f:c6:
a1:a6:ec:53:12:34:6f:ea:6a:dc:08:a4:53:9e:fc:
8a:61:f8:54:47:95:81:5b:18:6b:09:fe:6e:19:a5:
ed:1f:78:7a:41:51:e0:55:05:bb:a2:c4:f8:9f:0d:
8b:27:fc:6c:47:fa:c2:b9:4a:d5:14:ea:93:76:cf:
06:2b:ae:2e:57:f1:5f:cc:71:53:d5:95:83:b1:0c:
6d:8f:9f:73:81:77:b0:90:0a:01:bc:e1:2d:6a:e1:
83:33:2e:46:cf:c9:88:8b:f1:38:14:ee:86:0a:16:
e0:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C4:9A:22:58:99:F4:CB:E9:F9:37:8A:4F:8C:D8:61:BA:10:E1:86
X509v3 Authority Key Identifier:
keyid:5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:ca:af:7f:4b:a0:d6:c1:fd:25:27:52:05:78:3f:f4:2e:e2:
8b:40:04:15:5d:2a:8d:12:ed:ca:29:06:e4:71:66:af:1e:7b:
51:78:de:ca:6c:32:cd:9f:2a:01:81:a6:bc:eb:f5:b7:ec:87:
d1:7d:2b:dd:28:1b:90:22:85:3d:11:dd:5d:04:30:35:ee:25:
20:bd:2d:f4:79:0a:c8:6d:aa:4d:4f:7b:56:e4:b4:62:2a:b9:
26:3e:47:90:84:f9:5f:85:8c:b5:d8:b7:3b:2c:14:de:3c:17:
a1:c2:7a:cc:60:ae:68:10:ca:15:58:83:a1:4e:71:e7:5b:c5:
86:4c:4c:a0:b7:ea:18:a5:5d:87:4e:a1:cb:f0:64:9a:55:74:
41:fa:fb:b1:da:1f:6a:d2:ab:04:d6:d1:01:67:04:d3:33:0c:
d1:98:78:0a:dd:04:91:a8:88:8a:86:a7:54:1f:8a:a8:b3:f3:
43:07:cd:8f:ec:2b:9a:8a:04:aa:56:a2:f6:8f:e3:d0:b7:95:
e0:41:03:09:17:72:c2:a9:d5:56:ed:59:c4:4b:49:a0:bb:50:
15:d4:03:63:c9:68:ff:1d:47:26:11:e6:6f:81:b3:58:4a:60:
e6:9a:49:0a:a6:2b:02:57:cf:17:9c:fa:b6:68:5b:db:04:dc:
ef:6b:8a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:36:11 2026 by rpki-client