Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
File: XSP6gsR1KG22BxT2A2Gg8crCPSM.mft (raw, json)
Hash identifier: Ne4s2dbqBsAJgNoYnxU4R1jMjYZYhDZxKJ9uV+H1KG8=
Subject key identifier: DA:DB:8B:63:CB:F2:AB:7C:F8:93:C6:15:23:D4:A9:65:3C:3E:96:9A
Authority key identifier: 5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
Certificate issuer: /CN=5d23fa82c475286db60714f60361a0f1cac23d23
Certificate serial: 01A0D5DF04A2BC87A84B242101DA75E1E9DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
Manifest number: 021D
Signing time: Fri 25 Sep 2026 00:02:37 +0000
Manifest this update: Fri 25 Sep 2026 00:02:37 +0000
Manifest next update: Sat 26 Sep 2026 00:02:37 +0000
Files and hashes: 1: 3Owi7w8XHfa2ETQQJKxPe5_2S3M.roa (hash: WxZPvj4Y/uFWaukPSMrNh1kQZIcODKf/xbXFTKHA6tE=)
2: XSP6gsR1KG22BxT2A2Gg8crCPSM.crl (hash: DdoMpBo16qLtHkXE7eDk/hLd9hVfl4MZp/ZVOsNVasQ=)
3: kHjyu0leWmEWJz4dGZNRuqPpKu0.roa (hash: xSmyUIXwxdKC/wUH6aKgbqf7oSMgpHlsL1OZu9Jw99Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:df:04:a2:bc:87:a8:4b:24:21:01:da:75:e1:e9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d23fa82c475286db60714f60361a0f1cac23d23
Validity
Not Before: Sep 25 00:02:37 2026 GMT
Not After : Sep 26 00:02:37 2026 GMT
Subject: CN=dadb8b63cbf2ab7cf893c61523d4a9653c3e969a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:4b:5c:cd:51:27:53:20:f6:2c:d5:fa:55:
48:fa:79:b9:9c:86:d0:3a:6e:47:ed:ae:9d:d8:02:
6b:44:94:62:1e:0b:5b:5b:39:35:e2:b6:b3:63:8a:
49:97:bc:2f:30:2c:0c:54:88:dd:73:5a:f8:39:05:
4a:2f:96:71:d0:4e:1b:f6:65:29:e0:09:03:a1:67:
29:78:d9:13:ba:0f:54:51:89:af:53:ee:f1:ba:a4:
4f:e5:e6:d9:90:f4:c1:5e:cf:53:4c:aa:76:1c:b5:
ce:32:21:26:a1:e0:04:c2:81:66:59:06:5c:e8:eb:
7e:22:17:da:f6:7d:d5:29:d7:37:77:2f:b6:43:15:
77:ea:dd:d1:e2:4b:3d:c4:1b:b2:62:0d:56:26:05:
1d:b3:90:e7:ab:6c:13:cf:bb:dd:e9:a6:26:bd:e8:
61:b9:0e:6f:fc:b7:0d:86:29:52:56:73:96:a8:24:
55:34:76:50:50:29:bb:cc:67:93:8a:90:b6:b3:25:
44:29:e4:d3:4d:6f:9c:9e:7f:3b:48:e4:29:86:3e:
df:75:c5:61:26:a6:39:39:0d:7f:08:c8:69:59:b4:
94:06:9e:02:c8:7b:e6:a2:d6:ff:a0:2f:8f:40:d3:
be:ae:ae:fe:9a:b9:a1:db:ea:28:01:3d:a1:1b:27:
d0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DB:8B:63:CB:F2:AB:7C:F8:93:C6:15:23:D4:A9:65:3C:3E:96:9A
X509v3 Authority Key Identifier:
keyid:5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:94:95:40:e1:0f:8c:2d:20:21:f2:e0:52:18:92:c0:a0:50:
59:2c:1a:7a:be:3e:c4:ef:c1:9a:75:2b:4c:9e:ba:0e:32:5c:
da:b7:45:8f:88:25:96:b5:3a:38:36:0e:52:be:dc:3c:08:62:
ef:8a:b0:98:44:68:99:4c:d8:32:8d:02:f0:76:4e:ab:55:62:
f9:5e:9e:de:4f:07:1d:c5:d3:09:0d:d0:d0:67:8d:af:aa:99:
ca:4d:30:cd:49:69:45:bf:03:8a:3a:50:96:5b:c2:02:18:17:
e9:30:57:0c:3e:91:7f:96:a0:97:63:2b:ce:76:51:05:a6:5f:
0e:8f:1d:9f:a4:7c:d8:28:2e:7f:de:ed:95:a3:97:19:2e:46:
aa:9f:58:14:54:80:f6:88:52:e0:4f:ac:b5:78:0b:0f:d9:1b:
aa:10:25:7d:df:af:02:f9:e9:4b:fd:de:99:1d:29:91:09:c9:
f7:fb:a6:eb:eb:4e:f4:08:54:9c:f7:c1:fb:b2:4d:dc:04:2d:
bd:a7:07:18:c3:b6:3a:7f:90:fb:97:08:cc:73:b0:36:8b:b1:
72:ba:eb:37:b4:3c:1d:29:a7:f3:1d:cb:5c:f6:9c:0d:c1:af:
af:11:0b:0f:62:a5:9d:c9:8d:9e:dd:41:ea:77:54:ad:11:88:
fe:e4:8e:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:10:38 2026 by rpki-client