Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: uMV/LxEZUsUTehX8ZABBEX7kcdSt9jLyvyzBE94b/4I=
Subject key identifier: 47:09:A8:27:D7:9B:C4:21:AF:D9:BC:01:39:71:C3:7E:43:A6:17:DC
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 01A0EAADF1250386BE8C9F18F958C0100736
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 1A7D
Signing time: Tue 29 Sep 2026 01:01:03 +0000
Manifest this update: Tue 29 Sep 2026 01:01:03 +0000
Manifest next update: Wed 30 Sep 2026 01:01:03 +0000
Files and hashes: 1: MsnqFaljx-vLs6R1klCk-k4mqbE.roa (hash: 9w5Fj/ix8Y1oWU+nhqJcIUFjp29qAgz5fs3U3GbWExc=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: 5iq5sasb6oLOqgkSjRKhQQ+I+LR0vbfeXkClS4JixXc=)
3: Y-0LFW4QQXme0gq1FoIF-wZ-SQc.roa (hash: wu/R/xhocC/i/LlV9UK65CdEa6/Nxe99KI2JumwUKlc=)
4: a_XjHLHQF6uE4SSOtjsOa8f4-2Q.roa (hash: m3nX1Uyzi87lTewY/HPBoiE0m8iVkIMnK/iQX/3hwYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ad:f1:25:03:86:be:8c:9f:18:f9:58:c0:10:07:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Sep 29 01:01:03 2026 GMT
Not After : Sep 30 01:01:03 2026 GMT
Subject: CN=4709a827d79bc421afd9bc013971c37e43a617dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e0:f7:0a:fb:b5:f9:03:da:8d:d4:90:f2:d9:
28:4b:23:70:98:fb:51:b1:1b:33:1d:5c:5e:5a:f1:
e7:63:62:87:c9:30:f4:bb:c1:68:88:9a:29:b4:b1:
7b:02:a3:f9:04:77:08:b4:40:f0:1c:ac:bd:55:84:
42:a5:9d:f9:b4:95:e0:45:6e:65:9c:28:ba:c2:81:
aa:3c:1c:5c:a8:ab:4c:f0:ae:c6:ec:de:0e:c9:50:
19:da:c4:5d:04:5c:db:07:30:e0:1e:6e:dd:67:ad:
65:6d:aa:e1:09:7a:9e:9e:d0:6a:44:3d:23:93:44:
54:56:71:ad:c4:cc:46:13:d2:16:4e:67:29:6a:a7:
cf:ea:e7:d1:87:04:d5:84:76:f1:a5:4b:bd:4b:77:
68:bb:ee:ee:93:cd:af:88:87:7f:fe:05:ce:8e:56:
94:a0:4f:f3:90:9d:01:68:ca:bc:64:a3:49:85:48:
50:53:2b:72:20:ce:ed:37:87:6a:e1:10:b5:48:dd:
5c:80:16:b5:76:63:d3:ed:1c:26:14:db:fb:e5:ca:
65:f8:f5:2a:5e:5b:4a:b4:0a:17:62:29:94:50:c7:
5b:23:98:a9:3e:98:d7:11:7a:97:ac:60:f5:60:0e:
ae:1e:e9:78:80:db:23:a8:79:6e:c8:ac:74:a7:2e:
35:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:09:A8:27:D7:9B:C4:21:AF:D9:BC:01:39:71:C3:7E:43:A6:17:DC
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:a6:99:3f:0c:4f:b5:b4:69:15:d5:b1:82:99:d0:f2:5c:c0:
f0:cb:2f:21:93:67:b9:82:61:20:af:0f:ae:c8:18:8e:89:1f:
83:f0:72:c6:10:51:0a:f8:5f:d9:dc:5b:84:97:16:a0:d3:82:
22:b6:9d:5c:6b:c2:38:74:da:87:12:19:3e:42:92:e7:51:54:
80:9c:ff:c7:60:8c:74:33:7e:f3:5e:23:0f:9c:ea:ba:7a:58:
95:6e:61:87:62:c4:67:51:29:5a:bb:f7:04:35:6a:3d:8f:0d:
b1:6e:9a:62:cc:ff:d8:be:91:a7:da:77:c4:97:74:92:bf:79:
ff:ac:6a:bb:f3:37:0a:cf:35:30:ec:a9:36:45:78:2e:ec:dd:
bc:24:d4:42:d6:67:37:29:86:7b:f0:08:24:22:90:21:89:a6:
a8:0a:a8:a4:e0:0b:8d:7e:11:67:97:0c:ef:05:41:c5:03:aa:
75:2d:eb:63:54:5f:2b:ee:a8:b3:33:b4:bb:ec:8d:f6:e5:79:
ef:43:e4:02:43:94:09:19:49:95:61:50:da:47:ee:fd:74:96:
29:38:b9:ec:49:00:04:bc:53:44:51:9f:fc:0d:4f:6b:18:88:
88:72:c7:6d:4d:4a:6b:bc:ea:54:d0:78:03:24:67:0b:e3:67:
9f:e7:05:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:33:29 2026 by rpki-client