Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
File: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft (raw, json)
Hash identifier: DgWWclxBXQAxFPEg6uWx5rr3vk9O3wIRDEqtp2/LuEY=
Subject key identifier: 2E:58:D8:14:62:7B:21:D3:C9:4D:EC:EC:BE:9D:B2:B6:41:A3:BB:D8
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 01A0E061B67342B6F8BC887DEF875A759369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
Manifest number: 1A74
Signing time: Sun 27 Sep 2026 01:01:35 +0000
Manifest this update: Sun 27 Sep 2026 01:01:35 +0000
Manifest next update: Mon 28 Sep 2026 01:01:35 +0000
Files and hashes: 1: 5i2TAh2og4TXto7xyAcopWr_UMg.roa (hash: ZekBhPcyoCd+84YvBPa87l2ubLNdolD6vu0bwY9F0iY=)
2: 8sy7RPYdN9OOw5GeBoNUqLHEJwg.roa (hash: Hl1lQvcDtC+ikOs/Ko0nJQFgSRezGLcK7o1ZONxr73k=)
3: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl (hash: S627mkH/Lk/vzdH1AUqlybmPllqBdjAlPZklJEP/l14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 01:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:b6:73:42:b6:f8:bc:88:7d:ef:87:5a:75:93:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Sep 27 01:01:35 2026 GMT
Not After : Sep 28 01:01:35 2026 GMT
Subject: CN=2e58d814627b21d3c94dececbe9db2b641a3bbd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9a:b5:68:16:67:c8:32:2f:15:ef:78:0d:5d:
f8:50:bd:7d:ae:48:33:c0:c9:25:03:32:41:2a:1f:
d3:7c:28:06:1c:ad:a7:04:c1:4c:a0:90:1b:a7:2c:
47:b3:4e:08:56:b4:98:c7:51:26:51:6c:74:70:18:
c2:2c:f6:23:8d:6d:14:2c:6f:63:b2:2f:4f:27:f8:
37:68:69:65:e1:b9:1b:a0:ea:f0:23:a0:ba:43:98:
0a:32:be:f6:89:14:26:b0:32:42:2b:14:ac:69:86:
30:b8:a2:e5:06:ae:d0:37:69:ea:5c:c9:72:cb:17:
b4:d9:6a:be:67:4c:84:43:07:82:4a:38:81:d6:3e:
42:90:8c:94:11:e3:ca:11:0f:97:b2:d2:70:28:39:
61:43:fa:98:a2:bf:cc:84:9d:6e:b3:82:cd:c1:b7:
08:f1:aa:13:87:44:41:9d:80:b9:52:e8:a8:6b:58:
59:f6:b0:26:c6:80:a9:96:2e:0d:2c:6f:10:66:ca:
53:ed:68:65:69:21:cc:88:85:7c:d1:fb:77:2d:c7:
bc:8d:ec:49:b6:4f:77:de:53:64:c4:9b:78:aa:36:
9c:ca:f9:4b:02:58:d3:95:27:f8:98:8f:92:05:bc:
99:f2:49:f0:f8:52:92:1c:17:6c:be:52:a6:d7:17:
e1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:58:D8:14:62:7B:21:D3:C9:4D:EC:EC:BE:9D:B2:B6:41:A3:BB:D8
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:91:dc:ab:94:5e:53:cc:55:ee:59:e2:20:9d:ba:5e:be:53:
be:fa:5d:d1:f8:6a:ca:08:b9:92:d3:e7:ce:97:e5:88:65:db:
a6:b2:75:eb:5d:2f:70:12:12:c3:0a:03:e2:2f:c1:94:67:ea:
37:7b:a2:1b:e7:1b:f2:06:49:a8:50:7a:01:df:30:5f:aa:3a:
9e:e5:1b:c1:b7:df:8a:9d:11:86:71:8e:71:d6:91:2b:c3:bb:
d6:30:31:f8:3c:f8:8b:1e:98:be:47:8c:ae:93:4c:c3:51:9d:
2c:62:67:fc:ee:fa:bd:49:e0:6a:5f:dc:4d:e9:23:f7:fe:11:
3b:7a:cc:2f:a3:31:4b:35:28:99:33:90:1a:0f:07:14:fc:34:
5d:ae:94:44:10:b0:dc:2b:7f:62:d7:ba:d2:e6:8a:0c:88:16:
1e:50:60:e6:f6:3c:b4:f6:14:ea:4c:29:67:d5:ff:75:e1:41:
73:69:4a:72:c8:50:f3:75:7c:08:2a:c3:13:ce:89:05:ac:17:
42:89:26:26:c8:0b:6f:00:f4:20:99:22:f2:75:53:a4:40:a7:
bd:26:8c:ca:27:3c:c2:3e:e9:58:2a:e1:43:7a:e5:5a:8c:cc:
8d:53:b8:2f:9a:50:a1:9a:ba:fe:00:b1:09:f1:96:c4:73:95:
15:4d:00:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:10:29 2026 by rpki-client