Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
File: xU9qEXeCbFq2S9OvATiptXpLkeU.mft (raw, json)
Hash identifier: 40pgtrZEJD4BIyZ6/Ig16F2WHoJhmc4CV98DgQvjRNI=
Subject key identifier: 0F:4E:43:35:44:E8:76:BE:D4:FB:90:08:6B:10:CF:8E:80:BB:E0:18
Authority key identifier: C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
Certificate issuer: /CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Certificate serial: 01A0D192861E4CC34AF4BA56E51C2A4FBFF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
Manifest number: 02FF
Signing time: Thu 24 Sep 2026 04:00:35 +0000
Manifest this update: Thu 24 Sep 2026 04:00:35 +0000
Manifest next update: Fri 25 Sep 2026 04:00:35 +0000
Files and hashes: 1: AAL-YY9GVuWqbLX5GG1k3ImctWA.roa (hash: dOcDqpARrTucPUNtlVinnlKcwBaTZo2MLnDCrG84YIw=)
2: xU9qEXeCbFq2S9OvATiptXpLkeU.crl (hash: ju1lONXc/4DqNneZHyadt6Z+W/4LN2EEwv8sLdPxCfQ=)
3: x_VjdL15EqUB70pwRzrAehHyTNo.asa (hash: roR1zfTDox/ACVmuA2wDu2cHX32k232PLN3hkotoI04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:92:86:1e:4c:c3:4a:f4:ba:56:e5:1c:2a:4f:bf:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c54f6a1177826c5ab64bd3af0138a9b57a4b91e5
Validity
Not Before: Sep 24 04:00:35 2026 GMT
Not After : Sep 25 04:00:35 2026 GMT
Subject: CN=0f4e433544e876bed4fb90086b10cf8e80bbe018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:af:c3:b8:25:ee:11:45:f1:26:88:2a:be:75:
0b:bd:9f:e3:94:4a:f4:99:7f:46:d2:47:94:e7:be:
f6:d5:77:96:b0:4b:0c:6f:51:2a:22:a0:0d:1e:5c:
cc:16:a2:bb:6f:38:8a:b9:fa:e8:cd:f7:d2:c7:77:
83:93:f1:12:5e:fc:b6:65:18:f0:76:04:de:cc:85:
f8:44:65:26:3e:9a:3c:a0:d1:f2:5b:2e:72:9a:37:
99:2b:d9:af:01:e7:52:8b:8c:98:ff:fe:92:4e:d8:
d6:e3:e4:d2:4d:6b:de:e7:d7:44:9d:b8:f7:6b:fc:
33:82:ae:67:43:cd:4c:88:7d:d8:71:93:d3:9d:fe:
b1:44:5f:f2:33:19:e6:68:35:c4:7f:88:2d:6f:91:
4f:71:8e:70:33:ca:cd:d4:0b:de:2e:c9:56:2f:46:
89:1b:1b:50:13:6c:f4:2c:95:43:27:12:a7:77:e5:
ef:44:19:b0:3d:da:89:b3:f3:49:9a:98:1d:da:10:
9e:71:3d:3b:ab:35:35:56:14:6c:7a:24:e3:a6:6e:
e6:0c:64:d1:7c:b1:de:f1:3b:e7:6f:b8:af:93:07:
c8:1c:4b:7d:a9:6b:d4:53:ac:6a:3c:17:83:47:f4:
ba:65:16:ec:85:81:b9:13:4c:5d:12:08:f6:2d:75:
0b:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4E:43:35:44:E8:76:BE:D4:FB:90:08:6B:10:CF:8E:80:BB:E0:18
X509v3 Authority Key Identifier:
keyid:C5:4F:6A:11:77:82:6C:5A:B6:4B:D3:AF:01:38:A9:B5:7A:4B:91:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xU9qEXeCbFq2S9OvATiptXpLkeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/14f367-3b9e-49d4-9686-2ea8ace5b95e/1/xU9qEXeCbFq2S9OvATiptXpLkeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:86:e9:7f:08:52:cf:a2:75:7c:a0:83:9f:c1:24:cc:8c:98:
fc:be:23:da:9b:f9:4a:0d:13:ae:0b:c5:51:bc:b9:6b:e3:04:
a0:59:09:ec:4e:27:97:23:27:91:fe:4e:2b:b0:83:9e:c9:17:
58:72:ae:3f:a7:94:5f:d6:d8:43:e8:a4:2e:a4:f9:9d:8d:4c:
6c:e7:b5:ef:b5:a9:a2:5a:a9:a6:99:1d:92:d4:e0:c5:17:2d:
d6:68:30:68:be:25:bc:2f:95:09:8c:6b:d2:80:93:cb:86:ed:
9f:8b:45:97:71:84:11:cf:eb:35:7f:6c:96:73:95:64:c2:62:
80:07:b4:b4:8e:5f:60:c2:3a:19:37:5e:2f:af:0e:90:b7:c7:
54:cf:fa:0b:b4:c5:b1:ae:19:ac:3c:ea:71:4f:b4:a4:f3:41:
e6:4b:67:a8:5a:50:d8:de:7f:d7:db:60:b3:83:4f:02:d8:08:
46:fa:94:bc:c2:2c:bb:99:31:c7:0c:c1:2e:d8:a6:d3:47:05:
be:a7:ff:89:61:40:03:ed:85:a1:e9:22:88:e4:d2:9e:79:06:
fe:9a:6e:3c:92:9b:1c:02:9c:c5:a3:fd:00:4c:3a:99:25:7e:
5e:05:ef:c7:a6:b9:69:fe:20:2f:fe:2a:21:a9:26:97:2c:e2:
02:0c:ba:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:54:23 2026 by rpki-client