Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: VEFRcq9l0Cp9hh7Kp4Cnm5hkRAS98QjMcnZpGJ+j1lA=
Subject key identifier: 12:D4:78:F2:2E:19:10:76:FF:E3:7F:46:94:22:BA:40:62:FA:01:79
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 01A0D3EFEDB41862437C8976A3FA25506564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 0A2E
Signing time: Thu 24 Sep 2026 15:01:51 +0000
Manifest this update: Thu 24 Sep 2026 15:01:51 +0000
Manifest next update: Fri 25 Sep 2026 15:01:51 +0000
Files and hashes: 1: 1-N-Z3cPVFu_Om0GHK2AgOkgXdoM.roa (hash: fr16WHaKP/dmz7kwPH4GVwwXFVV/SyIEEVY49/wQV+U=)
2: 1aw8Nv97xOelgCP3-YnwnaxEm5Y.roa (hash: jy29WIgwdNl8op/0r93ONPzqQSdB42DU8p3Gs7efZY0=)
3: 2PxDuTNSWd2nVBQOyZp7w-a3G48.roa (hash: nuRMk74zjQwmTzVhehj6QjrkhW4+qo+fGCHLFEBJBC0=)
4: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: MmahYWDeWlIgZetiVYmsu8EgpTejdQDLf7zmV9Dh7H4=)
5: c9R4pyYEgXuth8LibhVlQrijaqw.roa (hash: GjJoF2AKi6roB+eJMggN2owFvnp/FEnfdBtdPLGnDgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:ed:b4:18:62:43:7c:89:76:a3:fa:25:50:65:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Sep 24 15:01:51 2026 GMT
Not After : Sep 25 15:01:51 2026 GMT
Subject: CN=12d478f22e191076ffe37f469422ba4062fa0179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:cc:ee:e4:d5:c0:25:c5:bb:78:26:51:27:6e:
62:f1:a3:78:b7:60:a9:e9:0d:4b:8b:d0:f5:4b:a3:
1f:07:14:e9:0d:4e:3b:cd:49:9b:ee:af:56:50:7e:
21:bf:da:51:d6:cd:7c:71:a0:83:60:46:ca:8e:40:
20:ad:be:e6:d3:99:67:ce:16:d4:24:ef:b6:a9:07:
9b:e0:9f:47:30:f4:c9:d7:e8:99:97:65:43:13:9e:
95:d2:13:cf:3f:58:37:0c:36:82:6c:f3:17:68:2e:
57:16:74:17:0d:e5:b4:3c:27:d8:27:41:bb:fe:cf:
c4:99:31:51:f1:88:de:d9:cb:c5:02:af:e9:05:a2:
2d:db:2a:a4:98:25:88:09:b9:74:b5:96:db:2c:77:
a6:81:c8:da:e4:84:ad:6d:39:cc:c2:00:3e:4f:b0:
f5:1d:df:1a:86:60:95:18:64:e4:9a:a0:a5:0d:e1:
6f:03:98:07:05:19:08:70:0e:bc:b9:7a:3d:2e:a0:
3c:d0:fd:33:9a:f3:bf:b4:a6:96:cd:f8:91:78:8d:
cc:dd:ae:c8:68:08:9a:22:04:31:07:a1:d5:00:ef:
5f:c5:52:4a:68:67:8a:ed:19:b8:fa:02:2b:f5:36:
00:a7:90:a6:da:45:0b:60:b9:37:03:15:f3:f4:b8:
0e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D4:78:F2:2E:19:10:76:FF:E3:7F:46:94:22:BA:40:62:FA:01:79
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:ec:eb:4b:1c:be:19:9a:50:1d:bc:15:9d:bc:e0:ea:f8:af:
6e:9b:8f:3b:bb:84:b4:04:69:59:90:5f:62:55:dc:e4:f5:79:
92:73:24:66:e9:47:79:2c:bd:07:b9:9d:55:7b:91:8a:0b:1b:
10:d9:15:f1:0c:70:45:7f:bf:b5:24:05:16:47:8c:8b:97:e4:
de:c1:ff:3f:4e:e5:6b:27:ed:cd:50:82:49:cc:55:c1:7e:d1:
e7:3c:83:4f:1f:0e:d2:50:02:f2:d0:13:94:71:aa:8d:66:93:
08:67:11:6f:11:e5:ab:74:a3:0d:b7:37:d2:5a:ef:2a:fb:0b:
37:e9:da:f5:04:2f:9e:79:68:9d:37:a0:e9:07:a5:92:98:06:
41:b2:ac:de:f7:93:82:6f:0e:88:01:e9:3c:ec:30:18:07:7c:
25:f2:18:a3:c9:13:3e:61:42:13:e5:46:13:8b:96:d8:a3:6d:
66:56:fb:9f:8d:37:b5:87:90:00:62:31:3d:21:a0:31:d4:b5:
13:f7:10:a9:c3:04:49:6f:5e:66:e8:f8:41:d4:6a:4e:dd:ca:
c6:64:d7:7f:8c:3f:d8:8c:5a:29:9b:22:d7:0a:b5:09:35:1a:
05:79:80:1e:3b:5b:63:c0:69:5c:29:64:71:9e:cb:d3:88:5c:
f1:27:00:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:09:55 2026 by rpki-client