Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File: XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier: tmnmAfeNLMQJWWS3KgEO5q2YpjL8yLUcBjijeVn86lQ=
Subject key identifier: A2:87:09:95:6B:C0:79:12:87:A2:0E:09:BC:7A:05:C3:B7:A5:3B:A1
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial: 01A0E02ADC96C7176AC302E3C10BFB632447
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number: 1A73
Signing time: Sun 27 Sep 2026 00:01:40 +0000
Manifest this update: Sun 27 Sep 2026 00:01:40 +0000
Manifest next update: Mon 28 Sep 2026 00:01:40 +0000
Files and hashes: 1: PnV6MRrCbEDbUgZOWZkw0F-5fTw.roa (hash: gpEq7vfgynN+KUY61gV3ilXsbaQKj+P9YjZ3SCCvLxo=)
2: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: TZZVzZAyNy1kpEogJfMfjdVlsVrPEvkxG9WcxcjmrPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 00:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:2a:dc:96:c7:17:6a:c3:02:e3:c1:0b:fb:63:24:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Validity
Not Before: Sep 27 00:01:40 2026 GMT
Not After : Sep 28 00:01:40 2026 GMT
Subject: CN=a28709956bc0791287a20e09bc7a05c3b7a53ba1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9c:21:5b:30:01:c4:27:7e:d6:d0:38:04:ae:
0a:fc:09:75:02:d3:69:09:65:44:eb:87:7a:a5:de:
f8:92:6c:0a:28:4d:87:54:54:d7:7c:c4:66:0b:9a:
2c:5f:c9:11:f8:46:9f:a3:7d:a7:d5:07:d1:60:56:
83:3c:d2:61:a3:37:cf:cc:a8:07:f5:2f:4e:80:50:
32:40:6a:b4:b9:bb:91:da:32:44:09:d4:e5:ea:13:
95:68:cc:26:d2:63:3e:2a:bf:dc:05:d1:2e:71:d4:
b2:10:60:92:5e:15:a2:d9:5a:0e:69:c1:a1:57:42:
d3:2b:53:7c:6e:cd:6e:e1:03:a6:ee:29:75:da:83:
51:3c:37:c5:3f:72:e8:a6:52:9f:fb:1f:61:c7:36:
a4:2f:8b:50:9f:6e:24:cf:82:90:47:08:95:ef:81:
c1:bf:5a:9d:2f:e0:20:0a:87:73:70:f3:47:28:d3:
df:7d:03:63:44:65:c7:db:64:e0:dd:5e:52:66:49:
33:16:f8:62:66:8a:e2:a5:30:98:42:3f:f8:e7:a5:
af:85:db:63:b9:a4:71:0c:fd:78:51:a5:08:16:e5:
d3:25:d6:c3:db:33:c9:80:0b:0c:f5:e3:41:7c:dd:
ab:3e:2c:92:58:bf:df:f5:ee:d1:d6:a4:3a:4d:e7:
c3:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:87:09:95:6B:C0:79:12:87:A2:0E:09:BC:7A:05:C3:B7:A5:3B:A1
X509v3 Authority Key Identifier:
keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:5b:88:c0:7c:da:5c:4b:e1:fd:c4:5a:79:0c:bb:85:86:df:
f0:9d:6a:f7:b0:94:f3:f7:41:42:a3:e4:76:98:91:73:e6:f7:
96:fd:52:15:ae:a4:39:ce:88:6a:2d:1c:09:1d:cc:43:98:ef:
01:11:71:78:9b:24:cd:ec:4a:06:57:0e:d4:4d:86:92:b1:5c:
93:1c:89:58:0b:ce:92:fc:92:ff:02:d8:1b:57:88:56:b3:2a:
c0:0e:f1:0b:db:96:38:45:a7:b5:24:7d:d5:cf:90:61:4d:ad:
d4:74:81:26:3c:cc:54:f7:a4:a7:eb:cc:0e:de:d5:0c:e2:df:
d7:7a:02:d1:e5:d1:5e:4a:d0:3d:ae:75:0a:cc:54:38:81:19:
6c:3e:b8:f2:76:05:7d:c3:74:43:5f:9b:e0:b0:24:1f:63:1d:
5d:54:df:91:76:53:9e:2e:4f:29:d5:3c:59:7f:36:46:93:aa:
5a:39:44:45:cb:d1:75:ba:a7:10:21:22:43:a6:29:08:b1:ec:
ef:b4:3b:20:1e:f0:b3:d8:2c:4a:d6:38:e5:3f:f5:bd:8f:23:
5d:39:12:11:2f:c8:99:b9:f0:21:e5:18:ee:5c:c0:5a:f1:c4:
4c:2c:4f:14:34:29:31:91:04:51:d0:8a:b8:45:34:a1:33:47:
8a:95:1f:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:11:04 2026 by rpki-client