Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: 5cX50QRrrQzhtH7uA3Csbrm6sKO6WUmv+7KRiZGiZ8s=
Subject key identifier: A9:A3:DB:FA:A2:FC:24:69:E4:BE:D7:D8:57:66:D6:69:60:A3:11:FA
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 01A0D5DECC44686A4086917C23FFB2CA4EDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0D39
Signing time: Fri 25 Sep 2026 00:02:23 +0000
Manifest this update: Fri 25 Sep 2026 00:02:23 +0000
Manifest next update: Sat 26 Sep 2026 00:02:23 +0000
Files and hashes: 1: MXmi4elQgkZloOXKc5KxZJXFILw.roa (hash: 4eGKiA6fp/86boDwfJeXXyGqjfCWRwxGmH0ShZjDAuQ=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: Kuv/EU/RiXTzUuXBbWCgwT4mzSGC3rUfN4d6o/UUcYc=)
3: taZbUsGibT55ZZu6Th_Go_ILjiU.roa (hash: d/WlzB5v4feaToE5n6krRnONbSIkTydQjlb9UBErHJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:de:cc:44:68:6a:40:86:91:7c:23:ff:b2:ca:4e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Sep 25 00:02:23 2026 GMT
Not After : Sep 26 00:02:23 2026 GMT
Subject: CN=a9a3dbfaa2fc2469e4bed7d85766d66960a311fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:45:92:16:23:f9:7a:a8:9e:3e:99:0d:76:
ee:07:24:8a:d9:23:f2:2a:ed:e6:ee:a3:cd:01:41:
f1:e4:46:98:8c:bf:77:85:4d:ff:53:ea:74:88:5e:
f3:9e:b6:ff:9a:47:95:f0:29:b0:64:9b:3e:1c:81:
4d:c1:ef:35:de:81:9b:fc:4c:79:0d:a5:93:1b:8c:
a1:33:f2:d0:13:29:bb:84:14:20:4f:da:e8:75:cd:
e3:2b:a2:03:d7:85:9c:98:56:84:eb:bd:64:f5:12:
fd:0d:0d:a4:be:80:55:8b:92:ec:97:7f:4f:ac:1d:
37:de:23:9c:86:8d:6e:1e:90:2b:54:3f:db:80:7e:
19:a1:6d:ce:8c:45:27:29:97:f7:39:40:d6:5e:b3:
63:d3:c5:1c:6e:9e:5f:f8:a8:da:96:51:8e:9f:76:
ec:e9:36:66:87:15:66:cb:4a:cd:cc:49:8f:bf:51:
18:19:a5:b2:86:5c:47:2d:5f:65:fc:bf:66:ef:f0:
7e:f8:9a:0b:86:54:43:9c:9c:c4:47:73:56:9d:c1:
c9:90:22:d0:74:9b:74:9c:96:e6:37:10:c8:5b:20:
5e:a0:fc:58:48:81:bb:c6:e0:e0:70:74:b8:f6:65:
93:05:42:04:c4:af:b7:0e:fe:c7:4b:72:b5:6c:88:
12:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A3:DB:FA:A2:FC:24:69:E4:BE:D7:D8:57:66:D6:69:60:A3:11:FA
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:49:45:e8:cc:43:fc:38:55:41:f0:ea:bd:99:bf:2e:d1:9e:
39:8e:e0:3e:c7:e2:56:a1:2f:14:20:73:16:31:9f:0c:aa:ce:
33:20:0e:61:c1:f6:ec:4b:bc:4e:ae:cd:fd:be:ea:b9:bf:ad:
fa:95:de:74:83:ec:c8:23:ac:97:53:15:ed:7c:66:68:63:35:
4d:ed:62:a1:76:ee:8d:65:4a:40:c9:33:e1:ad:9c:48:d7:7d:
9b:5c:a9:7d:04:8d:b6:a1:56:8f:c6:53:2a:21:c6:8f:82:27:
0a:0e:5a:98:c1:fa:55:f3:5b:70:ad:6f:f0:15:a3:8b:dd:99:
96:45:5d:2e:e6:db:65:51:45:53:32:7f:fc:af:46:9d:27:85:
4b:d3:b1:f3:bd:8f:5f:10:3d:45:94:48:5d:23:2f:d2:d8:d5:
f1:4a:4b:c7:45:52:d5:b7:cd:ea:60:96:a3:46:07:a4:23:a2:
af:b2:f8:c7:b3:15:f4:16:d8:ad:36:31:b0:9d:16:4c:42:f9:
fb:b5:77:a1:ad:88:24:05:90:3a:73:78:1b:02:63:fd:48:5f:
97:49:1c:3f:9d:80:c9:22:a4:37:34:9c:15:b2:1f:dd:c9:6a:
e5:32:9a:90:bf:43:ad:30:c9:d6:57:73:8f:59:77:e5:53:8d:
d4:ef:de:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:53:42 2026 by rpki-client