Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
File: XNhYOyEXQQSea7GalG2DGqvxGtM.mft (raw, json)
Hash identifier: Giqi5+drpwri07zqtifds5phbaI9qclj7IqCDmh/SQE=
Subject key identifier: 70:56:57:82:49:B2:BC:A5:43:80:83:ED:73:EB:4C:6C:4B:CE:5C:47
Authority key identifier: 5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3
Certificate issuer: /CN=5cd8583b211741049e6bb19a946d831aabf11ad3
Certificate serial: 01A0E92E14C1318C74184B5D7495F331C21F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
Manifest number: 19BA
Signing time: Mon 28 Sep 2026 18:01:46 +0000
Manifest this update: Mon 28 Sep 2026 18:01:46 +0000
Manifest next update: Tue 29 Sep 2026 18:01:46 +0000
Files and hashes: 1: S2GzX7bjyNfk8zuc_J7yDO8r8_A.roa (hash: 9cgwTQAZVGZH9VKGn5dJT7UJ2jaArnzhzVtmHDdrHjU=)
2: XNhYOyEXQQSea7GalG2DGqvxGtM.crl (hash: 3gCSsqZitmcaEyYlLvZxriPSwet7mNKO83jEqEa4+z4=)
3: rSchH_WpkAQtklBw4R5ArVw7Etg.roa (hash: FQrYCtK1inx5vQ38kiI4C/z5+zK3xo4th9Fjypdt9nc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 18:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:14:c1:31:8c:74:18:4b:5d:74:95:f3:31:c2:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd8583b211741049e6bb19a946d831aabf11ad3
Validity
Not Before: Sep 28 18:01:46 2026 GMT
Not After : Sep 29 18:01:46 2026 GMT
Subject: CN=7056578249b2bca5438083ed73eb4c6c4bce5c47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:03:65:f4:a5:da:c3:e9:40:4c:50:09:eb:2f:
eb:40:f2:3e:d4:1b:a6:a2:90:6c:36:c3:3b:d4:0b:
7d:49:f1:d7:2a:b5:45:c3:33:88:26:22:97:20:16:
35:d5:a0:93:5b:08:3f:53:65:bf:74:c2:0e:cc:c7:
36:a4:e1:3c:b9:5c:d4:3a:c3:bc:db:f6:be:e7:4b:
88:ec:d1:7a:ff:fa:61:49:f4:f4:ba:26:60:ea:b2:
08:86:43:27:01:2f:d3:c4:12:8a:ec:2e:7c:97:84:
b6:4a:c0:16:0d:c9:a0:d1:96:10:d4:98:71:a8:16:
b1:08:1d:28:85:71:eb:7e:87:4a:6a:6f:81:fe:79:
88:0a:0a:9e:a1:c8:79:99:b7:ab:2d:fb:ae:2c:84:
44:49:4d:fb:e5:4b:0a:4e:98:d1:9b:09:2d:ab:9e:
80:10:8c:2d:cf:89:fc:0a:90:a1:f6:3e:4b:63:61:
5e:33:9f:53:32:ba:b4:82:6f:e4:3b:1c:53:63:a5:
71:c7:97:f5:d1:17:34:a1:71:8d:fb:d7:29:6d:d9:
50:b7:e0:46:32:e3:9b:e8:8c:8f:a4:93:a8:0a:9d:
68:79:3c:7f:27:96:0d:05:43:1c:cf:c9:5a:57:38:
68:ff:a5:6d:14:a8:46:d0:21:e0:fb:84:87:cf:97:
b5:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:56:57:82:49:B2:BC:A5:43:80:83:ED:73:EB:4C:6C:4B:CE:5C:47
X509v3 Authority Key Identifier:
keyid:5C:D8:58:3B:21:17:41:04:9E:6B:B1:9A:94:6D:83:1A:AB:F1:1A:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNhYOyEXQQSea7GalG2DGqvxGtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/7298ab-7b9c-47ad-9085-50974bcdc248/1/XNhYOyEXQQSea7GalG2DGqvxGtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:e0:e4:b1:a8:79:ff:ad:4e:85:35:6d:39:21:be:7f:d9:e3:
5a:9d:17:7b:0f:01:86:37:00:b5:e3:aa:14:ee:4c:33:c7:ff:
d0:71:ec:7b:4a:d0:7c:45:e1:0d:4a:f1:82:eb:e3:62:fb:c2:
ee:c9:af:f7:c3:7c:9f:b0:d8:92:e5:0f:9c:29:78:fe:c3:4a:
21:f9:ba:2b:b2:6d:2b:94:c6:dd:bd:2d:91:71:34:b6:22:62:
e4:0f:5a:5d:9f:27:d7:dd:f1:4f:ce:aa:38:db:df:2f:f8:58:
88:02:07:68:0c:0f:60:63:bf:79:da:4e:5d:1c:e6:b1:b4:54:
87:19:c8:b0:90:66:b6:16:0d:d1:5c:43:ac:0c:43:b1:9c:40:
eb:d7:83:f8:49:cd:46:96:c2:ba:8d:49:e9:b5:12:e8:2a:ea:
59:f9:dd:e9:1a:5e:fd:39:cb:0f:d7:2c:33:de:cd:90:b7:db:
4b:5e:c9:88:b8:27:7e:6c:75:52:56:7e:1c:60:a5:21:08:d8:
f0:e3:8e:58:5a:9d:f7:1a:78:f4:bb:c0:0e:ec:64:83:30:0a:
cd:94:bd:24:8b:fc:d1:86:31:98:dc:35:ed:b7:48:c3:93:ae:
4e:1a:67:1c:32:2a:9d:af:f8:9e:f0:81:83:38:30:0d:cf:99:
65:84:66:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 05:09:22 2026 by rpki-client