Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/6b6575-e662-49cd-9d33-2dc46cf19a90/1/XhaJMumSpccwToD1-CkHmJrYwNc.mft
File: XhaJMumSpccwToD1-CkHmJrYwNc.mft (raw, json)
Hash identifier: 0+KVQdZ4g5ttIGczg1ABpTrJlsjvcXZbQS/17MoxI+s=
Subject key identifier: BF:62:8F:0A:B7:5A:EE:99:36:75:14:C4:4D:CF:CA:AD:61:DE:4D:86
Authority key identifier: 5E:16:89:32:E9:92:A5:C7:30:4E:80:F5:F8:29:07:98:9A:D8:C0:D7
Certificate issuer: /CN=5e168932e992a5c7304e80f5f82907989ad8c0d7
Certificate serial: 01A0D0124F666E89AF89FBD595D9792836C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XhaJMumSpccwToD1-CkHmJrYwNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6b6575-e662-49cd-9d33-2dc46cf19a90/1/XhaJMumSpccwToD1-CkHmJrYwNc.mft
Manifest number: 4E
Signing time: Wed 23 Sep 2026 21:00:55 +0000
Manifest this update: Wed 23 Sep 2026 21:00:55 +0000
Manifest next update: Thu 24 Sep 2026 21:00:55 +0000
Files and hashes: 1: ILeh6Huhdup9mR-qLiQM2r3lrTc.asa (hash: 8Q7JzepY7r1QcHb7lBjTf+YJ5FcsdksDq0U3Zwxf+aU=)
2: XhaJMumSpccwToD1-CkHmJrYwNc.crl (hash: lq/H5L0RtYmTEUcLPq55pegBzWSUIL+UbFJVtTUUJWk=)
3: boRhZVyNzTtQrhq6J1aYSk2GjKM.roa (hash: LIseartS47lRMk+dEHbSSZoRBqTh2IA2PDPDZVtqNv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6b6575-e662-49cd-9d33-2dc46cf19a90/1/XhaJMumSpccwToD1-CkHmJrYwNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6b6575-e662-49cd-9d33-2dc46cf19a90/1/XhaJMumSpccwToD1-CkHmJrYwNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XhaJMumSpccwToD1-CkHmJrYwNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:4f:66:6e:89:af:89:fb:d5:95:d9:79:28:36:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e168932e992a5c7304e80f5f82907989ad8c0d7
Validity
Not Before: Sep 23 21:00:55 2026 GMT
Not After : Sep 24 21:00:55 2026 GMT
Subject: CN=bf628f0ab75aee99367514c44dcfcaad61de4d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:73:95:fb:b5:cd:d9:1a:af:71:8d:d5:13:
2d:06:1a:86:3a:3e:11:08:58:33:30:38:57:11:0d:
5d:42:14:ce:6d:fd:b7:5b:5a:8d:4c:c5:ad:72:74:
e8:3f:5e:98:53:ee:c4:71:e1:85:57:85:30:20:d5:
a3:34:5e:ac:01:74:46:9e:e5:89:5e:5d:df:8c:f5:
b0:51:0f:83:d0:07:5b:95:66:0f:02:fa:0b:c1:c5:
bc:59:d3:4a:5f:a3:d0:7a:9d:2d:c5:64:04:9e:13:
d2:82:8d:c5:45:c1:3c:07:7a:d1:49:df:e9:a5:bf:
11:89:5d:ba:39:01:02:f2:5e:76:21:36:9a:88:09:
9d:16:85:82:da:68:13:80:73:4e:96:c7:4e:32:97:
78:47:5c:54:de:40:16:be:80:40:82:86:9c:5d:97:
2b:67:ec:e4:f2:e9:09:0d:3b:96:d1:6d:97:4f:ff:
d3:03:3f:c8:01:21:78:92:b1:15:86:76:28:9d:be:
ec:0f:3b:5b:d1:59:97:24:93:23:76:a7:19:15:d9:
76:85:f0:af:f4:8b:06:06:c6:b0:e8:c9:8a:39:9d:
b0:11:d0:42:39:f3:87:35:f6:90:ac:50:24:92:94:
21:a7:09:dc:0f:8a:7d:91:f9:80:90:46:1b:d8:7d:
2e:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:62:8F:0A:B7:5A:EE:99:36:75:14:C4:4D:CF:CA:AD:61:DE:4D:86
X509v3 Authority Key Identifier:
keyid:5E:16:89:32:E9:92:A5:C7:30:4E:80:F5:F8:29:07:98:9A:D8:C0:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XhaJMumSpccwToD1-CkHmJrYwNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6b6575-e662-49cd-9d33-2dc46cf19a90/1/XhaJMumSpccwToD1-CkHmJrYwNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6b6575-e662-49cd-9d33-2dc46cf19a90/1/XhaJMumSpccwToD1-CkHmJrYwNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:f1:3d:1c:e5:7a:0b:ef:ff:a6:08:e2:a3:78:d3:a9:f6:9b:
f7:31:4e:2d:84:be:6f:43:97:0d:8a:0e:08:07:57:01:fe:2f:
ce:9b:bd:24:01:97:f7:55:7a:42:3a:10:f2:18:e1:35:2e:34:
95:cb:aa:86:52:45:27:12:f9:07:0d:9f:94:2c:2b:29:b9:bf:
49:08:20:f1:df:1e:46:73:60:7b:2f:0b:61:b9:8a:0a:2c:c0:
95:c4:a8:32:d6:f2:bd:33:16:d1:28:3c:14:fd:53:30:1b:00:
22:7e:bf:75:97:fc:65:14:1a:21:1e:69:53:d8:7b:e3:a9:1d:
ec:7a:7c:74:55:08:cb:88:5e:36:d4:a3:09:5b:b0:86:60:f2:
13:0a:53:4f:d4:d1:fe:25:c3:a1:16:4f:0f:83:ce:6d:41:36:
e1:9c:a1:76:4b:ef:4d:9d:3e:8b:79:8e:c6:71:ca:d9:fc:03:
7d:76:40:b3:0a:93:4b:9d:4f:7d:0e:eb:c1:d9:e1:50:0c:65:
88:f9:78:92:5d:e7:2d:8a:a6:c6:ee:2f:54:ae:a4:7f:9d:ee:
ea:19:d5:25:3f:19:41:f6:fc:f4:f6:a1:66:94:45:d3:58:63:
d8:a8:90:2c:3c:75:41:ff:31:68:6a:d4:ed:2d:b1:f8:fb:5f:
bd:90:9d:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:03:54 2026 by rpki-client