Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: 1HWQGkuHjqYBpORM6SH1OzQVrGoyIcmEtTX5178B7cw=
Subject key identifier: D0:C0:BD:71:22:7B:7B:8D:33:D2:E2:BF:71:0C:5D:BB:71:68:ED:0F
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 01A0D200E30075DEA0AF717F0C5F55981998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 0A2D
Signing time: Thu 24 Sep 2026 06:01:08 +0000
Manifest this update: Thu 24 Sep 2026 06:01:08 +0000
Manifest next update: Fri 25 Sep 2026 06:01:08 +0000
Files and hashes: 1: 1-N-Z3cPVFu_Om0GHK2AgOkgXdoM.roa (hash: fr16WHaKP/dmz7kwPH4GVwwXFVV/SyIEEVY49/wQV+U=)
2: 1aw8Nv97xOelgCP3-YnwnaxEm5Y.roa (hash: jy29WIgwdNl8op/0r93ONPzqQSdB42DU8p3Gs7efZY0=)
3: 2PxDuTNSWd2nVBQOyZp7w-a3G48.roa (hash: nuRMk74zjQwmTzVhehj6QjrkhW4+qo+fGCHLFEBJBC0=)
4: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: Mhm2bH6eqwHSW8JtCxaJ7TM13QPwD1yjw3g7/JCjoKQ=)
5: c9R4pyYEgXuth8LibhVlQrijaqw.roa (hash: GjJoF2AKi6roB+eJMggN2owFvnp/FEnfdBtdPLGnDgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:e3:00:75:de:a0:af:71:7f:0c:5f:55:98:19:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Sep 24 06:01:08 2026 GMT
Not After : Sep 25 06:01:08 2026 GMT
Subject: CN=d0c0bd71227b7b8d33d2e2bf710c5dbb7168ed0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:31:40:8a:7a:7b:cf:a7:e4:01:2a:6f:ee:89:
95:a6:16:e2:5b:94:9f:b5:f2:9f:51:cf:7e:5c:50:
65:13:30:57:1d:d9:c5:86:d3:f6:0a:c4:37:92:50:
73:3e:d2:c2:cc:d9:e4:68:68:32:10:a0:e2:d3:2f:
79:5a:04:a4:32:77:52:6b:42:2c:04:79:55:5c:9c:
78:e5:6c:78:ef:b8:d3:d6:94:62:f8:74:02:d2:91:
31:0a:35:50:42:d4:c8:08:d4:47:be:ad:65:7d:ac:
e5:76:91:89:d5:cf:b7:df:3b:6a:dd:6d:94:82:d0:
7c:cc:89:3d:06:e5:26:bf:f9:48:13:6c:38:7d:24:
8a:96:ce:e5:82:50:c3:03:22:a0:fd:56:9a:6d:ee:
50:b6:8c:17:fb:8b:f4:f2:f9:e4:8a:27:02:1e:ee:
6f:33:89:4d:3c:19:5c:0d:d1:75:b7:e5:c7:a8:80:
ff:bc:50:fa:d8:ec:b6:9c:89:ef:c2:20:6c:3d:db:
a5:f5:b0:2c:5e:ab:66:f4:f9:c1:d8:69:d1:9d:f4:
b7:7f:63:11:64:1e:ae:f9:82:fe:40:1b:4a:63:c3:
32:d4:09:43:55:20:45:76:ec:bd:6c:9d:80:2a:f9:
e3:c7:32:d5:68:19:74:3f:a9:1e:ec:cb:1f:db:98:
81:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:C0:BD:71:22:7B:7B:8D:33:D2:E2:BF:71:0C:5D:BB:71:68:ED:0F
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:6c:78:93:b1:da:09:1a:5e:9e:4a:20:bd:28:10:e8:bf:b4:
d0:bb:59:79:cb:71:8b:f4:23:0f:0a:79:59:61:c0:93:a2:d1:
d2:94:1e:d9:11:c3:49:74:0e:c6:7e:a6:88:ba:22:fc:38:f1:
a9:ef:eb:62:d5:99:80:b4:6d:3b:75:ce:08:de:a9:1a:77:7f:
49:dc:11:62:0c:1f:d0:95:b3:53:23:97:ca:95:e0:d7:05:81:
a2:b8:c0:bb:f2:93:bc:54:3a:5e:4a:78:6d:a7:e9:57:84:b1:
85:c0:3c:7d:10:0d:cd:a1:5b:f4:70:b4:6d:2d:68:98:9e:55:
98:50:44:4f:33:f1:82:be:c0:0d:19:fa:03:ae:e7:cb:50:73:
5b:e1:e0:97:5c:ed:ce:6c:d0:35:45:42:79:ce:95:cb:fa:9a:
a2:71:74:8a:0e:eb:f4:4b:98:65:75:2f:ff:72:f9:20:8b:06:
34:76:e7:da:96:13:ac:fb:d4:6f:e6:13:85:5f:16:7e:5d:cb:
d8:15:bf:e0:5d:ce:06:64:d8:98:f5:4a:fc:43:16:0a:68:49:
54:4a:07:c6:2d:6b:91:78:23:30:2a:39:dd:e0:9c:f6:d5:49:
1f:af:72:52:ff:ad:58:a4:61:d1:65:02:d4:75:95:73:72:9b:
94:2a:58:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:30:04 2026 by rpki-client