Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier: 3awg7wMqrnw4xhb7z6QUS/dj14u+pKwyxEkLbes8j+w=
Subject key identifier: AA:4F:D3:7A:29:BE:31:2B:3A:D4:C7:ED:2B:74:8B:7F:BB:77:AA:03
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 01A0CF36422F73E913E7CD2EAC37E3A98544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number: 1A6E
Signing time: Wed 23 Sep 2026 17:00:34 +0000
Manifest this update: Wed 23 Sep 2026 17:00:34 +0000
Manifest next update: Thu 24 Sep 2026 17:00:34 +0000
Files and hashes: 1: JtY0Nc5KsnYFhq9gwtFkh9ll4_c.roa (hash: 2ee0ztpkOTTrJZ/rJndPjJzssmpY0MoOu/loesqHer8=)
2: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: 6/WhINpYfhrpMSlAhmjrGnw88C91gkvgxXIywzXafgE=)
3: XVPpnUXQ607rP--ePsLN9cz89_c.roa (hash: 0wqwWXvhEcuxDQDNA2phuoRTJPiVO88rNNJcF2GbNvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:36:42:2f:73:e9:13:e7:cd:2e:ac:37:e3:a9:85:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Sep 23 17:00:34 2026 GMT
Not After : Sep 24 17:00:34 2026 GMT
Subject: CN=aa4fd37a29be312b3ad4c7ed2b748b7fbb77aa03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:58:95:b2:fd:e6:49:c5:ee:a3:3a:7e:70:
35:b4:7f:42:de:e0:b1:62:4d:ba:70:6c:bb:d9:0a:
60:4f:03:dd:8d:8a:60:b4:e4:d8:ad:c1:42:53:10:
42:55:ec:2d:fb:db:a2:6c:16:c1:73:c0:ca:39:18:
4b:a6:24:71:b1:42:a9:cb:fb:9e:b9:1e:58:a0:cf:
23:df:0e:5f:df:be:cc:4e:4d:f7:f8:67:97:f0:c6:
26:38:4f:30:41:6a:94:32:86:e8:00:aa:e4:4d:55:
50:2d:4f:5e:9d:4b:f0:c3:10:df:a8:9c:e6:6d:7a:
d8:bf:ac:de:48:91:0a:92:d2:3b:2f:ce:ff:67:01:
fb:26:8a:84:d1:65:d9:32:8e:13:b8:f6:86:a2:93:
ec:92:d8:d7:6f:be:e9:8d:27:d0:c6:3e:57:db:a7:
14:85:23:12:f4:34:e0:8d:a3:79:ec:dc:79:c2:bb:
66:39:7d:90:96:7e:ad:32:d3:cd:05:40:68:75:1d:
5e:1b:40:10:b0:0a:83:05:c4:8b:16:c5:28:9c:9a:
5c:ff:8a:ba:9e:ee:62:97:cb:c1:d6:13:34:6e:ca:
8e:82:ce:fb:ce:9d:c3:a3:bc:c6:3d:1f:ab:ba:dc:
cc:24:29:5b:23:38:2f:a3:ba:ff:9c:19:54:c0:37:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4F:D3:7A:29:BE:31:2B:3A:D4:C7:ED:2B:74:8B:7F:BB:77:AA:03
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4a:b7:06:1f:6a:b5:f7:39:35:e8:a5:ef:c1:92:9c:e1:6f:
5b:5d:b9:1b:86:16:15:77:b1:5f:46:6e:ba:da:94:8b:e0:7b:
62:a4:48:c4:88:38:7d:97:7c:8e:b6:69:d5:11:25:e0:57:99:
9f:e9:83:60:ac:b4:c4:a0:e8:30:c6:fb:2d:1c:f4:a2:bf:1f:
0b:59:f5:d7:a1:e8:82:cb:90:a4:49:f6:18:ca:dd:8e:59:3e:
90:75:c1:d7:4c:aa:f0:d4:3c:d8:67:5a:60:3d:f2:31:b1:63:
18:f8:b0:52:08:c7:17:9b:05:f5:c6:73:5f:cf:a9:74:30:24:
6d:3c:fe:69:20:83:3a:61:56:e2:31:06:f6:c4:1d:89:96:eb:
e3:ca:b8:ce:b7:72:34:67:0d:64:32:c1:23:ec:b9:04:87:d2:
a6:bf:7f:ce:11:9a:28:6c:3f:04:bb:0e:91:3f:c7:fe:6c:01:
fe:21:5a:8c:71:66:7f:0e:cd:6a:e5:8c:0c:61:d1:c3:1f:5a:
42:15:09:d3:ed:79:4d:7b:05:53:31:2c:02:37:41:8b:2f:7b:
3c:cb:4d:58:05:a0:ae:b4:81:f1:c0:f1:4f:f0:c9:fb:07:2a:
a8:1f:a9:69:48:6a:50:09:01:31:47:d8:79:22:c5:70:7b:79:
3d:a1:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:36:54 2026 by rpki-client