Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: NdT/mbpDmKH3kaQofbZNF6sIj6i5leSCBKI/h3gEfX0=
Subject key identifier: 6F:35:B7:E3:4F:88:44:45:02:29:39:A2:23:5F:24:65:AF:2B:20:11
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 01A0D20156992A92EE81D9F461CE43269F16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 09A2
Signing time: Thu 24 Sep 2026 06:01:38 +0000
Manifest this update: Thu 24 Sep 2026 06:01:38 +0000
Manifest next update: Fri 25 Sep 2026 06:01:38 +0000
Files and hashes: 1: O9do_tpuJS2IYg238tFeLgPwuLo.roa (hash: inPkQd2M/OOC4cE+kZAGV36qocuoxkiJ2VIdZgql1s8=)
2: OQMR_FkQfBmNWWsOByMgzVQchtc.roa (hash: E+VXuwQXys0IVzb1O36G+Zcgxr0/sBSG/vjRsxKVhO0=)
3: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: BxwmAFwE3tAXRxQthE5QVHIw1aHSKF6aIiAApyJU5vs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:01:56:99:2a:92:ee:81:d9:f4:61:ce:43:26:9f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: Sep 24 06:01:38 2026 GMT
Not After : Sep 25 06:01:38 2026 GMT
Subject: CN=6f35b7e34f884445022939a2235f2465af2b2011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4c:1c:14:61:1c:64:8f:51:88:f3:d8:2f:49:
fe:6c:81:52:1d:bc:e5:63:c2:6c:d8:21:00:9d:79:
1a:ce:28:9e:7e:08:78:cc:03:22:37:e5:a1:3e:03:
69:93:6d:4f:61:00:e8:c0:c5:bc:68:7f:5e:2a:02:
b9:ba:95:17:9a:c8:aa:e2:21:9b:d8:af:b8:2a:b8:
88:80:7b:c9:4c:32:c6:f0:c6:19:1b:98:54:ef:50:
41:75:81:3a:b1:62:5f:5f:95:69:1f:b7:8e:ca:dc:
6a:65:a9:c9:1c:25:0f:5f:75:35:7d:e0:52:9a:4b:
b2:9c:7e:d9:8b:d8:bb:ae:7f:0b:b4:b9:98:7b:e9:
42:65:23:66:3a:92:fd:f4:ea:9f:74:c3:12:28:29:
41:44:f7:7a:12:39:9d:d5:0b:f8:91:2d:fe:f7:22:
b6:14:5c:fd:5d:cd:44:5f:e6:84:76:ef:67:69:7a:
6d:c2:80:9c:de:95:fb:b5:62:0c:dd:19:78:7d:7b:
4a:8b:c5:cc:c2:25:1a:2c:c0:54:de:79:b2:44:61:
6f:d4:16:61:bd:ed:20:05:c3:f9:6e:27:d8:1a:43:
48:fd:bb:aa:48:3f:d0:50:73:d8:54:fe:0e:88:13:
d8:fa:b3:92:30:8d:0b:ad:21:ff:f4:f7:5b:ec:9b:
c0:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:35:B7:E3:4F:88:44:45:02:29:39:A2:23:5F:24:65:AF:2B:20:11
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:73:1c:28:85:6c:21:cd:f4:37:68:ed:cf:73:12:2d:e8:47:
93:30:26:dc:c2:57:f8:21:58:8c:db:40:85:a7:7e:a7:92:36:
de:8b:67:9d:1f:0d:b5:10:3d:06:13:bf:dc:23:0d:61:f6:ad:
28:84:63:d9:f6:18:8c:73:e8:50:ea:4c:75:2d:b6:32:39:95:
85:51:fa:10:b1:b7:e2:83:fe:43:ca:22:e9:54:2f:92:92:8e:
3b:6f:47:84:23:e1:19:a3:2d:17:97:dc:04:34:2a:cd:cd:c7:
76:ba:a5:8b:a1:ca:d1:f7:0d:91:a4:ed:dd:67:4f:bb:d4:a7:
c8:a0:de:92:88:6e:21:23:f0:27:c3:72:07:d2:dc:59:57:10:
b7:4d:95:4d:a2:ba:cf:7d:72:fe:36:7e:2a:eb:c7:5e:25:14:
76:32:f2:79:0d:4f:34:82:55:b6:3e:d2:e1:1e:2d:ec:92:99:
ee:5b:ec:c2:07:e4:4c:37:fe:64:b1:aa:60:7e:6d:25:3f:57:
12:d5:2d:df:86:f1:4f:6f:cf:1b:22:d2:93:8e:a3:fe:d5:5d:
41:3c:1f:f9:81:d1:04:65:c0:5c:1d:7c:5c:a0:a8:59:5d:bb:
16:d5:4c:c8:90:b7:ea:e1:68:db:fa:e3:3d:e7:69:c5:ce:4d:
3f:53:b8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:21:24 2026 by rpki-client