Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
File: XwImpwTPYg6yAA8n56kZznMJkb4.mft (raw, json)
Hash identifier: e4y9pY1ozUIpj5rqI5+rSvegcduczKUdDsCreww/aIY=
Subject key identifier: 33:BF:F3:B9:CB:10:37:E3:41:1A:A1:CB:0C:B7:CF:29:29:62:43:5B
Authority key identifier: 5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
Certificate issuer: /CN=5f0226a704cf620eb2000f27e7a919ce730991be
Certificate serial: 01A0D1C916158BEB1382C2811FF6E4D7A4C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
Manifest number: 12CB
Signing time: Thu 24 Sep 2026 05:00:11 +0000
Manifest this update: Thu 24 Sep 2026 05:00:11 +0000
Manifest next update: Fri 25 Sep 2026 05:00:11 +0000
Files and hashes: 1: FZ2f92Yx1P8FuW9L83SaK0nZGI4.roa (hash: SOp6FmNQwKe5awPkwCN8XsDRwjQMyGX3OeocNtPC8cc=)
2: Huv8_F7CU0_Jslnzwh9x9lhwpc0.roa (hash: que/wANCXPBVboi+Ao6/Mhrzm4uO58lF/bE0KnuyKBc=)
3: TyZ-EN3ZikEP3O1aIGeCGjgK3LI.roa (hash: rGtYPfugPBoAr+vznSLu3abrcQ5ZUu7nfMCulcJMbYg=)
4: XwImpwTPYg6yAA8n56kZznMJkb4.crl (hash: iDKQmKK5VKUDJOsl5hVhsliuIjgl41P2B7b4IFMlXc0=)
5: YcTggkw1dIIwon9zpxmI36qcgzY.roa (hash: hJIPq4cJhvmtr5AA2Y+pzfZ+vAbq2fL2IZZMCvtTNqY=)
6: qGL8RTzpNc9QMzJ4mB1cjE85xJ4.roa (hash: ABpLHA3uxkTxF69tefDioKBR4SIb/ghL74K+XaKX/Ag=)
7: wDhMGJ9NzXfEad9sT6Le_xs3iaE.roa (hash: zPKoEOiN3uariB64Rf296KkD/lWfDnDeFg2GGweepII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:16:15:8b:eb:13:82:c2:81:1f:f6:e4:d7:a4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0226a704cf620eb2000f27e7a919ce730991be
Validity
Not Before: Sep 24 05:00:11 2026 GMT
Not After : Sep 25 05:00:11 2026 GMT
Subject: CN=33bff3b9cb1037e3411aa1cb0cb7cf292962435b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d8:d1:57:98:9f:1e:37:4e:fa:f6:5f:80:8a:
c0:0a:f8:cb:7d:57:d0:d3:2f:c9:0c:13:b7:9a:d0:
5d:44:5c:fa:c3:fe:e7:cd:78:e5:10:56:8a:95:98:
a7:30:e2:f7:cc:ef:10:b1:57:1b:00:44:97:b6:4a:
5c:d5:12:4a:5d:c6:9f:82:76:df:c8:92:e1:04:54:
8e:3b:ee:fb:c2:da:a1:12:0e:5c:b2:ca:c8:c5:15:
aa:d5:ee:8e:f5:c3:e8:06:ed:fa:b3:31:fb:08:5e:
74:1b:b3:69:5b:6b:2d:08:b1:e9:f0:2f:06:e7:d6:
82:cb:e4:22:d5:c4:96:e9:bf:df:f9:9d:af:4c:9d:
6d:bf:64:cb:20:80:3d:d8:4d:1c:2f:15:ad:1e:a1:
f5:11:91:7d:7a:95:59:74:b9:45:49:3a:73:f5:77:
c7:ea:aa:e0:81:8e:e6:b8:a5:90:30:5a:29:ad:3f:
7f:41:39:e8:73:09:8e:f2:1f:07:37:3d:91:c3:81:
b0:f1:83:09:84:b1:b3:45:3a:58:36:f1:04:c6:59:
19:68:f6:60:72:a0:b7:52:6e:68:94:07:ee:1e:8b:
f3:d8:2b:0c:66:af:9e:46:7b:38:ef:a1:47:55:0f:
e9:9c:3c:38:69:ff:b8:7a:68:cb:b1:ed:5b:a2:e9:
f2:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BF:F3:B9:CB:10:37:E3:41:1A:A1:CB:0C:B7:CF:29:29:62:43:5B
X509v3 Authority Key Identifier:
keyid:5F:02:26:A7:04:CF:62:0E:B2:00:0F:27:E7:A9:19:CE:73:09:91:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwImpwTPYg6yAA8n56kZznMJkb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/63efb8-bf24-48c2-8c50-75d9ce5b8d9c/1/XwImpwTPYg6yAA8n56kZznMJkb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1d:6b:05:43:b9:0c:94:de:ef:0d:27:e4:63:8d:01:3e:e0:
18:e6:99:da:34:f4:4f:e5:53:5a:78:c7:a5:ff:14:2b:4e:9f:
ed:8a:12:5d:de:a7:bf:95:fb:89:de:13:c8:11:e6:91:e6:a8:
a8:f4:08:f5:b2:84:1a:dc:76:9c:0b:3f:28:71:7d:f4:38:0c:
00:fc:3f:4f:05:93:d9:a2:a7:45:18:ae:df:9b:51:d6:02:07:
fd:36:81:6c:c2:9e:52:3d:ff:d8:c0:c7:7c:dc:df:c5:ec:98:
01:ce:75:c2:55:f8:39:1e:05:d5:0f:90:c5:bb:9c:95:30:2e:
62:73:31:eb:d3:22:85:48:c2:9e:24:16:2a:2c:95:02:4f:46:
34:12:61:86:34:67:11:df:6e:59:0c:22:3f:a1:ed:cc:47:43:
a4:af:71:c6:d2:1a:4f:bd:36:21:c0:9b:5a:dc:c3:b8:90:2b:
b5:06:5f:5a:35:4d:cf:9c:18:45:ba:11:28:fb:59:47:03:49:
b1:2b:e9:16:46:9a:c4:f3:92:94:0d:2c:c8:0b:27:b0:f2:0a:
fc:9e:56:6e:f1:cc:81:6f:98:fe:8f:cc:71:bc:61:52:eb:82:
11:b6:bd:72:d6:dc:59:2f:1e:37:db:20:ef:c9:c0:cf:c6:75:
d2:aa:0f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:59:37 2026 by rpki-client