Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
File: Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft (raw, json)
Hash identifier: uZxkOVeOUOVxMLTxNDEzn7yAlDJTY6hg+eG6MSCbrzE=
Subject key identifier: B7:14:E0:CE:84:D1:02:67:69:6E:3B:E5:00:C2:53:7B:B1:25:11:3A
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 01A0CF6D1D5AAD364D935DAA736475228748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
Manifest number: 1A88
Signing time: Wed 23 Sep 2026 18:00:29 +0000
Manifest this update: Wed 23 Sep 2026 18:00:29 +0000
Manifest next update: Thu 24 Sep 2026 18:00:29 +0000
Files and hashes: 1: 3M28JHI7FacsIOAJQWmxce2Slr8.roa (hash: YkTIvgr/OPBfSq7cSMGcukiH55SIyz1JhUaAuApclZY=)
2: 7MeHuOHX_t0Y7M3OkiYTIbrWBmE.roa (hash: Odl4gnozu+3MVceJoIMFZfxLwPzuPyHk73z9Oo2EcD0=)
3: Gk3x3dMvMywr2S8J1gmXYe0hnoU.roa (hash: /bwOAvbGES0zjJv2PTCP3py4NDDoCXEMIJubC3y4gDQ=)
4: IK5t8ZtR9FmBC9B2Oc1q_FzsZ60.roa (hash: 99eWXzzKhZzYTyaPK2nn6KPekh7aMTWJKB401rZwNvg=)
5: Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl (hash: vlYK5jTOXGmx5p1VwVDG3BNMu2uyt5aUM1rDeVk9tbI=)
6: aqoU9zJ3XearIjlOINJlmfcvvuw.roa (hash: Sz6yVgzziCuFuMg8Vphcvorcn0t0kQDujyZ/W1bGUWw=)
7: kl3oy-dFL14cqnAqsoTUT2p-gAs.roa (hash: 2IH7sBJVtOHKhrFUONXV2aGCQkjnVLJ+vB9vvY8IEzA=)
8: kyQ4JI7k9YbINgfhHLT6m28Lt5g.roa (hash: k6gw+9YpfRZ8fBPrWOAfF6dmY/qo7leQ3UVRA8om9+s=)
9: qH5fLLWJkV1VZnXKxFAToZGD4BA.roa (hash: gujwjiPUnMht5bxbQJ8geZbpehgQ8vnJKIXcFg1nhbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:1d:5a:ad:36:4d:93:5d:aa:73:64:75:22:87:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Sep 23 18:00:29 2026 GMT
Not After : Sep 24 18:00:29 2026 GMT
Subject: CN=b714e0ce84d10267696e3be500c2537bb125113a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:05:05:e8:0f:e4:e8:20:8a:21:1d:87:9b:
b6:5a:2d:cb:a9:33:ef:dd:16:4a:98:2e:d2:3b:5b:
6c:4f:19:b1:e5:ea:55:7c:8a:58:9a:97:df:e8:ed:
9b:60:16:a3:a2:56:67:16:25:d5:e0:49:c7:c9:e0:
97:b8:9e:2a:a6:64:59:d5:69:0b:6f:be:cc:3a:13:
10:50:31:d3:24:54:dc:55:ac:7d:d7:de:a1:94:ac:
d8:e1:bd:59:ed:27:7f:8d:81:48:fa:3a:66:7f:18:
48:0e:89:d8:65:aa:c6:ed:19:2d:72:a9:0e:79:9e:
ce:4b:40:e2:1b:a1:35:77:14:fd:b9:11:8d:db:b4:
83:7d:5b:b9:c7:a1:de:74:b2:c0:26:e6:e8:ea:47:
cc:df:ce:47:ae:ff:05:ea:05:5e:89:bc:12:1f:32:
d9:07:4e:ab:cd:6d:3d:ef:fb:e1:be:da:55:e3:ed:
98:7f:1c:e1:fc:c9:80:cc:ab:06:0e:d9:b6:97:7a:
6e:fc:13:94:42:7e:7d:5e:51:57:64:8e:bc:73:9e:
52:3a:d3:42:e5:59:31:50:20:09:78:bf:aa:57:41:
76:e1:ab:b2:20:b2:7d:cf:dc:d1:bb:98:82:ae:9d:
76:7b:da:0e:f2:fa:ca:d5:ab:a4:67:d3:a2:a0:aa:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:14:E0:CE:84:D1:02:67:69:6E:3B:E5:00:C2:53:7B:B1:25:11:3A
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:13:99:e1:af:1b:8d:17:6c:59:32:bb:dd:92:af:5c:80:fc:
bb:9b:5e:af:30:9c:84:ba:f4:43:1f:25:ac:3b:5d:5b:86:02:
73:fe:f2:32:28:48:68:46:53:9e:6e:89:4c:d5:b5:51:4d:c7:
e5:c1:6e:45:89:c7:9f:d2:62:2f:50:ce:2b:f3:7a:8b:9e:8b:
1a:d9:26:44:77:4f:cc:ac:0d:01:ca:ac:94:3a:2f:9f:52:c2:
8d:1c:6b:d2:67:12:9a:2e:0c:ad:49:4b:66:be:b7:4e:53:ec:
05:a3:b3:d4:84:b6:db:e1:10:60:0b:9b:32:ba:10:45:fb:3f:
3a:50:71:e5:4b:a2:24:07:2e:23:4f:0c:8f:dd:4c:6b:c8:7e:
06:af:4a:50:c9:5c:10:bc:8a:b2:74:f3:e5:63:cf:e0:fd:fe:
db:23:9c:b7:88:d3:b5:27:d0:7c:c8:16:ba:11:6c:4d:28:91:
7a:2d:b7:04:95:f7:48:81:cc:f3:88:f3:bc:98:bc:ad:6f:03:
f2:f5:6a:d9:59:e4:1e:66:42:8d:31:c3:75:a4:17:b4:aa:65:
01:0e:0c:a3:6d:4c:94:2e:d9:38:d5:3d:ff:50:bf:50:22:15:
ca:ce:02:f5:62:8a:55:3e:92:27:fc:35:b9:6c:53:b4:31:b1:
84:76:d8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:25:45 2026 by rpki-client