Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: eMbpRVSbaAYooftvrGeXW36S2zujEji4H9H46rCsQ7c=
Subject key identifier: BE:77:C2:2C:FB:5D:9B:40:11:74:37:97:CB:57:02:D4:BF:75:C0:F8
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 01A0CAEB6D92AE14F0CC4367B2B1CB569E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: 056B
Signing time: Tue 22 Sep 2026 21:00:21 +0000
Manifest this update: Tue 22 Sep 2026 21:00:21 +0000
Manifest next update: Wed 23 Sep 2026 21:00:21 +0000
Files and hashes: 1: 2Mi7xSwXWORT-cP1uI-5ipGqq4s.roa (hash: tSv3E+ZA/wZe9XbU1lskSKrjg17Dn+XBQfh3/xFVJUg=)
2: ByC-ZTHZLIp48xod5-DXAW5F3BI.asa (hash: 8ff1w8+edBnztEn324ScKN5DjpE1LW2R4BVBiNrCsOw=)
3: LlfdcTz9x7rrYLdHdKh9Na-Mfd0.roa (hash: RkCIWInpuo8o6AIXIjNXD1h+2dYnpr1vQR3Vie5EDns=)
4: Tp-h7fmGBqfKD0Ue-ghQOfIbzYE.asa (hash: WMYYd+/cdLigPmUzWhY4TymlCE9a6NI3QPAJVx0ExN8=)
5: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: /b+MVUaOKUShPlc7yAneDS5uIv0Cj5vruN6IL4w8vZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:eb:6d:92:ae:14:f0:cc:43:67:b2:b1:cb:56:9e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: Sep 22 21:00:21 2026 GMT
Not After : Sep 23 21:00:21 2026 GMT
Subject: CN=be77c22cfb5d9b4011743797cb5702d4bf75c0f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:50:21:97:88:9b:93:93:e9:a9:c9:3f:58:a6:
d0:6d:d5:f9:ac:48:d4:1d:f3:8c:c7:5a:66:e3:b2:
c9:33:c8:08:73:78:f9:b0:e2:0b:4e:07:a1:3d:0a:
15:c2:b9:44:42:99:b4:2a:32:d4:2a:66:b7:2a:d3:
d8:3d:9b:a9:0e:e6:92:6d:19:36:fd:37:94:ae:ef:
c4:a5:b8:c1:71:70:f3:4a:ab:16:a5:09:b3:26:d5:
c4:89:65:0d:7d:01:16:8f:40:68:1e:f4:29:7a:1c:
01:72:fd:a2:da:e9:9f:75:20:d5:6f:19:05:8a:3f:
9f:8a:c5:4e:67:f6:4c:a4:f7:a9:1a:19:f2:12:6b:
4e:3f:66:5d:10:9c:04:a6:53:9c:6b:4f:cc:bd:10:
2d:bc:46:b1:d8:a4:a3:56:2b:77:33:55:98:24:2c:
51:cf:6c:3e:5c:cb:70:80:63:b9:4a:ab:92:b1:1a:
19:bf:ba:54:d4:04:22:57:70:0a:70:31:81:15:16:
cc:28:f1:07:7b:6c:b2:79:74:b4:c8:e8:60:df:d3:
86:a7:fb:fe:f9:3c:f1:99:a2:a0:ef:07:55:3e:83:
97:af:16:b2:f7:59:98:8b:2a:37:a9:30:41:71:db:
0e:0d:fd:7e:d3:0b:f3:45:c8:d1:8b:93:33:ab:38:
1a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:77:C2:2C:FB:5D:9B:40:11:74:37:97:CB:57:02:D4:BF:75:C0:F8
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:82:06:c2:dc:7c:ec:1a:61:dd:10:74:8e:48:72:b1:5e:0d:
b6:b7:e7:51:a1:49:d8:11:8f:42:ed:24:8c:31:30:1a:6c:6f:
0f:2b:b3:24:1c:0e:63:a2:e7:47:66:1c:44:9f:e7:01:ea:c0:
4f:59:9d:c6:0f:61:f8:e8:56:4f:b3:2f:14:5d:4d:b7:94:33:
19:c0:02:1b:1c:cd:a0:49:30:bb:18:a4:db:01:1f:7c:ab:27:
a3:6b:76:90:e9:9c:bd:36:69:dc:4a:eb:0b:08:31:ed:2c:9a:
94:03:77:bf:51:8e:68:1d:57:d7:a4:22:1d:d5:cf:7c:5a:5e:
85:e0:18:77:49:7a:c0:f6:c9:ac:cc:fb:71:59:5d:c7:fb:0a:
15:7b:8f:51:39:79:dc:50:09:ee:f5:82:4b:bd:83:71:84:76:
b5:f6:ff:71:be:32:7e:3d:b5:ad:07:b7:9e:93:60:ca:f8:f9:
97:ca:ed:6a:d0:c1:64:ba:9d:f1:ae:b8:eb:24:b8:af:6f:62:
b2:d9:25:61:64:8c:95:c1:65:85:d4:e2:4e:b3:f0:19:d9:88:
21:57:53:e1:6d:4e:ec:60:3c:ba:49:a0:d5:67:23:66:34:34:
24:b2:27:38:b2:a0:6c:4e:3f:dc:72:46:90:f7:46:90:55:db:
22:7b:a6:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 22:35:03 2026 by rpki-client