Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
File: XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft (raw, json)
Hash identifier: 3IAx9wT4NjbFDq8O5OsJIlMDVhZ1+cxH1aZ88u9YE48=
Subject key identifier: 1D:C3:CD:9E:04:7C:5E:06:A4:47:4E:B8:1B:9B:E1:75:4D:4E:DA:FD
Authority key identifier: 5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
Certificate issuer: /CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Certificate serial: 01A0DBE0146C82DE3A9E504DF29ACCFC30F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
Manifest number: 1AB1
Signing time: Sat 26 Sep 2026 04:01:30 +0000
Manifest this update: Sat 26 Sep 2026 04:01:30 +0000
Manifest next update: Sun 27 Sep 2026 04:01:30 +0000
Files and hashes: 1: CZ1LSUniiHGNKwvHak6fSDmBxdc.roa (hash: Mosbvu2i3W9lRSEMHDa5n4kbGcSkA8mN4bx3wDReYfc=)
2: JhlPUIaiuE2YohDfzMjZESoyDBM.roa (hash: 7exMhOdMj9M/aNI0j3yYX3O6VN6kNC8RAmHhooROzJc=)
3: XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl (hash: MJhsjfw7Ij3FbsgCsW46Q5GFON2gQCty4KekMDdWfe4=)
4: i9Jjligy-EqoCiaFX_JoZgf9dZ4.roa (hash: XW8rc6v037pilJaZxg9f1SStjDu20ZBHUdc/h3ZDPqs=)
5: j2M12KSK7yupbk2QrIFnkpZ-KPM.roa (hash: yQynIUWOty/ocy5JzISGlHN5/AewbIRpARiMe1+4m+I=)
6: kSIrlNkYtxjevrUOWqXwGaCeFxQ.roa (hash: P1EFKe/doBtEMdSkydhZWieCIypvlDRY3TVJIkRt4p8=)
7: rgypQg1mq_y1PkBJTzbgugJszfU.roa (hash: 2UJiTYNC2SMcM+K20BC59uzzBZrc7ob9nA7WO1YUWjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:14:6c:82:de:3a:9e:50:4d:f2:9a:cc:fc:30:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf4501b755002d9143e8fa6736815e9f0f93695
Validity
Not Before: Sep 26 04:01:30 2026 GMT
Not After : Sep 27 04:01:30 2026 GMT
Subject: CN=1dc3cd9e047c5e06a4474eb81b9be1754d4edafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4b:84:00:b8:d6:6d:3e:71:ca:4d:d3:c2:15:
d1:6c:57:34:93:2f:6d:82:19:ee:1d:9b:38:11:02:
b6:b7:67:08:fd:60:c9:e9:eb:c5:09:36:e2:08:da:
81:5a:dd:e0:07:c5:eb:bb:c5:08:33:b1:d2:98:76:
15:a8:6d:0e:43:73:f1:0e:c4:58:a8:28:83:c0:d8:
6e:b7:27:70:ad:b9:20:67:bf:eb:c6:51:0d:08:80:
83:c3:dc:96:70:95:8c:94:8d:05:ba:a3:7d:75:4e:
02:5d:ad:19:8e:33:86:01:54:cd:d3:29:98:66:ab:
2b:72:a1:15:34:1f:55:fd:e0:e6:ea:d1:9c:4f:50:
aa:33:31:51:26:37:04:6e:71:3e:a5:8f:89:5e:22:
1e:33:0c:ee:0b:4a:99:9e:69:1d:14:d5:e7:e3:0d:
2f:93:ef:c2:7c:10:47:7a:bd:d6:57:de:b7:80:e1:
ca:ac:cd:57:3c:cb:80:1b:9d:f2:ad:40:30:68:bd:
c1:ce:d0:9b:38:8b:0d:2d:41:c2:64:27:7d:5e:05:
b5:bf:75:a5:56:c8:b1:23:81:eb:c2:06:cb:7d:b6:
b5:d9:40:40:bf:d2:92:a3:a8:e1:b9:fa:90:98:08:
79:b3:37:e3:bb:62:a9:a2:7a:e8:59:1a:28:1f:64:
c2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:C3:CD:9E:04:7C:5E:06:A4:47:4E:B8:1B:9B:E1:75:4D:4E:DA:FD
X509v3 Authority Key Identifier:
keyid:5C:F4:50:1B:75:50:02:D9:14:3E:8F:A6:73:68:15:E9:F0:F9:36:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPRQG3VQAtkUPo-mc2gV6fD5NpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c1ca07-9658-4446-8cb5-60cf9ab1b13e/1/XPRQG3VQAtkUPo-mc2gV6fD5NpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:7c:43:dd:bf:e5:aa:c5:77:31:58:b5:91:f4:b6:fd:8f:98:
88:0b:f8:e7:7c:56:b5:19:9c:c8:d3:39:c0:7a:be:d7:2a:bd:
95:e9:d4:f4:39:57:a7:b1:9b:a9:40:24:66:30:ec:04:b8:b5:
d0:d5:8e:dd:54:60:a4:d2:6a:b5:bc:f0:6e:a3:bf:8d:fd:0a:
f5:5a:78:0a:c9:3e:73:48:1f:18:0d:0d:3c:93:ae:ad:8a:13:
f4:64:ac:b9:da:16:49:40:63:05:7a:76:f3:43:e5:b4:c8:f1:
34:20:99:d5:f0:f2:7d:bd:c9:f2:4d:3b:6c:a4:d6:ae:d5:31:
a1:75:99:bc:a9:d8:55:12:43:89:cc:7a:b8:a0:f6:38:a4:a6:
ec:b5:dc:06:9f:b6:21:8c:b7:bd:86:18:7f:53:d6:bd:52:77:
aa:96:78:08:7e:45:45:cd:1a:d2:85:a6:5f:d0:6a:f0:d0:58:
7a:d3:a3:b2:86:e1:e3:66:8f:a5:fd:e2:92:c9:cf:a7:75:05:
58:a1:35:07:79:db:af:d9:87:be:02:86:fa:59:b3:18:5d:42:
d1:64:e5:43:ea:0a:7f:c9:e5:34:ea:9d:42:6a:07:fc:8e:72:
5a:4f:bb:55:78:da:d9:7a:44:c5:ca:1f:88:a1:a0:9d:a9:e7:
cb:49:d2:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:32:33 2026 by rpki-client