Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: bvnVmxxIehdLXk605q0qo7wDB5HZxsgRG88s8Tdk/+U=
Subject key identifier: 82:26:20:2F:9B:30:21:B0:93:8B:09:46:6A:7C:E8:42:CC:04:5C:6A
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 01A0D61484A80FE5931693FBA9CB2C69D25B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0E05
Signing time: Fri 25 Sep 2026 01:01:03 +0000
Manifest this update: Fri 25 Sep 2026 01:01:03 +0000
Manifest next update: Sat 26 Sep 2026 01:01:03 +0000
Files and hashes: 1: EmJaWy9ErTq18djeUNfT6TYwXlA.roa (hash: 4n7tztgrwrUxD6WI3OMeFvCbZPJYYWR7ZCZusKoAv2Y=)
2: I-K9nqaL8isdaQPATdz15jV472A.roa (hash: IzWVmalHZuVa9srOGb7K8LfnsGA4gkEh+RLBEqMh0oM=)
3: RcwVn60BAjXaSKd54kN8HvE9mEI.roa (hash: HMzOnWY8MpFn7ebVHAu3c09I2xVaAKGb1gijWHIVX6I=)
4: VMEOZBTbdat5Ej2FDGSSyvWxON4.roa (hash: il5PH5NsJiNfZtmLceTZARbKmqNBVyPmTfnq15PGTB8=)
5: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: jrMcyGVqvYvBkGdlaUfn4ZGZboxfwfD508vrZXothBs=)
6: lIxTSYsNmmcqNIHLrqXgnkuovB4.roa (hash: KyCy7f0RC+Gah0kPcXWSGeJFDqftrveXwrbOBQUq7gE=)
7: n6hUs8ScD2JiUwNfl89-e_tCc6w.roa (hash: /7fv2sWCDJbqb4l7iyEbmK73ArodpdBZ+jyH4nyo2WE=)
8: roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa (hash: HW4LBYiaQzfwjk4eYDYDeite6KGRHXlfiOHLKtkmNeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:84:a8:0f:e5:93:16:93:fb:a9:cb:2c:69:d2:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Sep 25 01:01:03 2026 GMT
Not After : Sep 26 01:01:03 2026 GMT
Subject: CN=8226202f9b3021b0938b09466a7ce842cc045c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:f8:8b:20:da:20:47:4a:78:de:fc:d9:4f:
74:b1:b7:d9:8d:a2:69:25:e9:9b:1f:39:bd:d7:b4:
b3:47:fe:de:48:1c:8d:c7:4f:79:85:75:22:98:d1:
51:19:ed:27:fd:01:14:5d:d5:65:6f:c1:70:03:a6:
dd:59:3c:f0:5a:b4:7c:c5:77:ef:45:aa:fc:37:af:
14:11:19:c1:3a:46:d5:bc:87:6c:9a:91:30:92:cc:
e8:02:4f:08:6e:87:2c:07:50:f9:e4:9b:35:e4:f9:
28:a8:41:eb:40:c5:56:37:66:79:f7:c1:bf:d4:61:
45:c0:b6:35:6b:13:e5:27:7e:9c:d5:a0:76:2b:25:
1d:5d:65:7a:56:31:5f:e3:1d:e1:65:be:ce:d5:77:
40:37:1a:42:34:c4:e8:50:d5:37:66:71:04:f7:9b:
b2:07:dc:5b:84:9d:d1:26:3e:72:40:45:9f:eb:86:
91:55:27:99:8e:69:71:b1:09:cb:05:ce:8e:6e:37:
f1:65:b9:7b:25:5f:d7:b9:35:69:f3:b7:2c:d1:0c:
68:40:79:13:f4:46:91:99:2e:56:3a:4f:07:44:b2:
b9:d2:1c:1c:8b:06:62:e7:e7:8d:00:6c:87:44:fe:
39:e8:0f:4d:9d:f5:da:f6:0e:cc:96:6f:6c:c8:aa:
b8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:26:20:2F:9B:30:21:B0:93:8B:09:46:6A:7C:E8:42:CC:04:5C:6A
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:be:86:34:82:40:d6:18:7f:93:3d:f3:db:55:a6:4b:7a:f5:
69:71:9f:6f:4b:c6:ef:e2:93:c8:e9:d7:2e:10:f4:33:19:15:
31:09:7a:1f:72:15:22:6f:56:28:86:90:97:69:ab:56:88:78:
22:c2:4f:92:ac:65:bc:9b:ec:a9:9f:c3:b5:7c:c1:8f:7b:e7:
e9:e6:26:59:73:14:4a:ed:94:0e:5d:5f:b6:9e:f8:48:29:d4:
12:f9:a1:d9:52:aa:52:24:fc:e0:30:b8:a8:94:b9:0c:42:9d:
c3:2b:0b:09:e9:38:37:c4:89:b9:6d:18:d8:5e:b6:1e:1f:86:
cf:20:2d:d0:c8:b0:d8:76:4a:8e:1f:76:e9:09:ed:57:ff:fc:
84:9a:33:c2:82:84:d4:29:ff:ca:3b:77:b1:2b:6a:e0:2b:d9:
0f:70:08:b7:fb:d4:d6:96:1d:a4:f2:6d:d2:a2:20:b5:b7:06:
43:56:90:5e:29:02:2c:31:18:d8:8c:f5:90:cc:b7:29:bb:89:
fe:27:50:24:29:c6:d3:82:d8:bd:1d:23:af:20:b1:a6:ed:3f:
96:87:aa:45:6c:92:e0:de:5f:84:d0:eb:18:e6:2e:3a:4b:a6:
cf:45:a8:13:51:ee:9e:e2:a8:46:f0:61:15:f8:18:28:07:5a:
e8:ed:98:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:13:56 2026 by rpki-client