Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
File: XxpCcHKzHUR4TDdd-uQieOcfqDY.mft (raw, json)
Hash identifier: 3OPCN92T5omixucvoJjBfcaQypYNFzlGsb15uGqfiAo=
Subject key identifier: 3B:9D:3E:C6:42:E9:2A:8A:6F:78:55:BF:5B:CA:4E:71:3D:9B:F3:34
Authority key identifier: 5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
Certificate issuer: /CN=5f1a427072b31d44784c375dfae42278e71fa836
Certificate serial: 01A0EE8BF1B67B33D215C24B0094D5660CAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
Manifest number: 13F3
Signing time: Tue 29 Sep 2026 19:02:23 +0000
Manifest this update: Tue 29 Sep 2026 19:02:23 +0000
Manifest next update: Wed 30 Sep 2026 19:02:23 +0000
Files and hashes: 1: KceNOn_bCzlpYzkGAtSH71ZEniE.roa (hash: ghG8vlvVhPRN/q5ENiLGfWe2Rdz70LqNWlKQluJ96vs=)
2: TnLGleLWbF6Xbip1RIdiru4lzlk.roa (hash: TwgWk/EYTVXEiwe/Z9ywXVNMqxvlSEZDhUOiWjsfVSk=)
3: WMhIoor7Hyuy0wOxrEP3KE2ZBT8.roa (hash: wF/mTYNEBbK6LQa44t3Ab29Zi1DQ3lUoIwP6+TkkiBA=)
4: XxpCcHKzHUR4TDdd-uQieOcfqDY.crl (hash: ANlZqDb5qhtpZZhXAVcsMCYq1tZKAOtr2bW+DgIkBMk=)
5: gXCR-cLYMaojwmIaH2ky7eyIf5g.roa (hash: I8h0Z2ywnH4bteSn3QmarASyoNf+QDRHyu/nb8W4GNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ee:8b:f1:b6:7b:33:d2:15:c2:4b:00:94:d5:66:0c:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1a427072b31d44784c375dfae42278e71fa836
Validity
Not Before: Sep 29 19:02:23 2026 GMT
Not After : Sep 30 19:02:23 2026 GMT
Subject: CN=3b9d3ec642e92a8a6f7855bf5bca4e713d9bf334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:69:ea:55:25:74:d0:df:7f:4e:6f:9c:c3:ee:
c6:1c:b3:11:b6:17:3a:71:1f:2f:97:d5:53:59:40:
3f:b2:b7:e2:ba:1e:22:e4:fe:08:30:81:e6:ab:b6:
da:36:1b:68:4c:02:f7:68:32:15:21:ad:f8:e8:6b:
59:41:77:74:21:84:87:3b:8e:10:e7:9c:03:84:ee:
5c:80:a3:2a:9b:5c:62:78:c4:99:7e:40:47:47:16:
9b:c6:40:1e:43:b1:68:a1:17:ed:8a:bd:46:b6:8d:
53:94:fd:a2:bd:35:77:d7:c0:35:2c:72:50:c1:96:
76:d3:b9:b5:0b:f8:ef:71:42:1d:1f:18:56:9e:29:
a9:32:37:01:3e:c3:8a:4a:99:b8:94:c7:c9:dd:b9:
8f:63:16:3a:0c:87:17:fb:cf:cc:8a:7d:26:78:60:
a4:9d:b9:77:ea:8b:e6:a0:70:b9:a6:38:67:72:52:
b0:e5:50:54:f0:0f:4c:2a:b7:43:50:21:70:a3:18:
18:5c:65:cf:57:6b:44:9f:21:3f:34:12:fd:c4:e5:
3a:50:29:28:6d:69:b4:bc:b6:76:25:4d:fc:2b:a9:
c4:60:05:9e:1d:a2:c9:dc:e8:e9:6e:8b:ff:74:9e:
ac:79:ee:79:20:69:12:9b:48:ae:d2:b5:a9:1e:ee:
38:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:9D:3E:C6:42:E9:2A:8A:6F:78:55:BF:5B:CA:4E:71:3D:9B:F3:34
X509v3 Authority Key Identifier:
keyid:5F:1A:42:70:72:B3:1D:44:78:4C:37:5D:FA:E4:22:78:E7:1F:A8:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxpCcHKzHUR4TDdd-uQieOcfqDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/077f64-b843-469f-8547-dd20bb208bba/1/XxpCcHKzHUR4TDdd-uQieOcfqDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fa:39:b9:e8:b5:39:3f:a3:70:3e:66:72:81:99:25:bc:24:
c7:1b:90:33:a0:a1:9f:5e:6a:7f:de:d4:1a:0f:68:a5:39:4e:
52:4f:d2:fa:18:e5:15:bb:42:a9:db:9a:43:d9:4f:46:9a:ed:
c1:71:9d:d8:de:e0:b0:a6:0c:06:5f:21:58:7b:b2:21:6d:d4:
6f:09:e3:72:5d:ac:66:b4:69:79:b3:c5:44:9c:06:93:f5:ad:
87:30:bc:a9:54:79:53:1a:e8:df:cd:82:f2:28:87:4e:23:da:
35:90:1d:10:ea:0e:55:8d:b8:6f:33:e5:83:9a:f0:81:66:68:
49:b4:3a:85:cc:dc:cc:d5:f7:df:3c:67:31:96:4f:1f:bf:17:
79:c3:09:47:5d:5c:03:ce:4a:04:dd:45:ac:19:d9:4e:a4:7d:
7e:80:93:b0:8c:79:7f:5d:c3:de:7d:43:48:2d:04:a8:f3:e8:
3d:f7:e2:77:33:c0:53:07:c5:32:05:64:fb:32:55:c5:87:c5:
c7:ee:24:f5:24:82:82:78:cd:bc:a4:61:35:0d:d5:47:79:39:
93:f1:24:d9:f0:99:e9:07:1a:d8:e1:83:60:bf:22:b8:92:ff:
12:e5:b1:85:35:7a:e9:eb:56:cc:c6:5d:d4:20:8f:bc:90:61:
ca:0b:c0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:05:36 2026 by rpki-client