Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
File: xcidUmDLNP27s7wlv0rbr0zcaKA.mft (raw, json)
Hash identifier: c7AxPf1KyDPQ2a+SnXMQNl7WC7/zxqhfe6SM/5IeA8A=
Subject key identifier: 49:D7:52:5D:46:46:86:59:7E:F2:14:4A:94:FE:08:A4:C3:A8:1A:3D
Authority key identifier: C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0
Certificate issuer: /CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
Certificate serial: 01A0ECD3A2E736FFC70065486787B8A5D2A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
Manifest number: 0A37
Signing time: Tue 29 Sep 2026 11:01:27 +0000
Manifest this update: Tue 29 Sep 2026 11:01:27 +0000
Manifest next update: Wed 30 Sep 2026 11:01:27 +0000
Files and hashes: 1: JD_hILTLs5WiN-GGz9cnjaMmPmg.asa (hash: w3ngbPPlSEh0i5ZlPs9dJQ8lVMYy1vGnqLwn37EOyHY=)
2: xcidUmDLNP27s7wlv0rbr0zcaKA.crl (hash: /Ov9xAfxTSMUn1P5lyj292VWMS+5MEMIWmuH4Htty8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:d3:a2:e7:36:ff:c7:00:65:48:67:87:b8:a5:d2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c89d5260cb34fdbbb3bc25bf4adbaf4cdc68a0
Validity
Not Before: Sep 29 11:01:27 2026 GMT
Not After : Sep 30 11:01:27 2026 GMT
Subject: CN=49d7525d464686597ef2144a94fe08a4c3a81a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8f:d0:19:47:d3:63:07:25:45:18:2d:22:d6:
3a:53:47:ac:a5:e4:ac:3e:b8:52:eb:32:8a:2f:48:
47:6e:b1:54:74:4b:8d:41:b4:b4:9f:a2:ad:21:4b:
28:8a:83:e2:ad:b7:a6:10:0f:be:df:92:65:4d:bb:
e7:76:58:93:6f:cd:ba:85:05:52:11:cc:79:a8:d5:
02:02:94:27:1f:a7:d2:7d:d0:e3:cf:66:f5:b9:68:
d4:e0:db:9f:ff:41:d8:e8:65:e4:d9:b2:57:c3:d6:
57:99:aa:d2:cd:dd:46:b4:70:74:62:b5:8e:cf:05:
3d:d7:e0:d0:89:ed:7e:71:86:f0:19:db:ea:4f:f1:
ea:f0:39:e9:b5:81:a0:9b:fb:be:9d:fb:fd:68:f6:
9b:80:cf:f7:2f:4c:61:3e:b4:8d:5c:b9:cb:37:85:
cc:91:b2:04:f8:e0:64:d9:1b:90:0e:fd:a2:18:1d:
7a:48:d2:dd:47:e6:1f:6e:7b:0e:49:1a:01:c4:28:
a0:ca:8d:5e:e0:2b:5f:b0:e1:cf:84:55:be:80:70:
e5:54:f3:cf:3f:6f:8e:94:1c:43:3e:d8:e5:33:dc:
15:f9:0c:81:14:7f:65:06:84:49:63:00:b2:37:03:
e1:e0:bc:62:73:7a:33:1f:3f:08:bb:7a:df:79:51:
98:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D7:52:5D:46:46:86:59:7E:F2:14:4A:94:FE:08:A4:C3:A8:1A:3D
X509v3 Authority Key Identifier:
keyid:C5:C8:9D:52:60:CB:34:FD:BB:B3:BC:25:BF:4A:DB:AF:4C:DC:68:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcidUmDLNP27s7wlv0rbr0zcaKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/623b14-4e6e-4c31-96be-8ebcd09b2bca/1/xcidUmDLNP27s7wlv0rbr0zcaKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:76:c2:01:2f:bd:0f:f6:bc:79:e9:47:df:07:f2:06:4d:3d:
28:24:3d:fc:89:85:88:97:30:f1:c4:4f:b8:75:09:7b:98:b4:
4c:a6:4c:ba:8f:4a:72:b3:15:78:04:1f:79:70:67:77:88:9c:
a7:68:34:ce:37:c1:15:06:28:5d:93:67:ad:c8:c5:20:a6:ce:
52:48:38:ac:d0:81:71:36:aa:db:d2:55:56:28:3d:1c:0a:ed:
ee:99:a5:2a:88:3c:0f:04:44:99:49:01:a9:ee:20:fd:25:52:
f5:4c:7f:d1:b8:37:a4:21:60:c8:24:5b:57:2c:88:31:2e:d9:
4b:94:2f:f6:43:1a:65:e9:43:2e:59:0e:87:9b:97:06:ab:b3:
b7:e3:47:44:23:0d:0a:59:51:14:83:b7:f4:11:d1:bf:5a:50:
c2:09:a3:19:d9:1d:f2:e6:2c:4b:a6:11:a2:93:3b:fd:14:5a:
b8:f7:89:8f:33:ea:82:35:a6:9a:32:17:9c:9c:76:c5:06:64:
01:d9:1c:31:a3:b4:73:1b:0a:17:c4:91:2f:72:60:fa:42:b7:
c9:25:f7:98:94:12:6f:1d:10:59:a0:32:49:6b:3d:c9:14:f8:
f5:86:0b:eb:d5:a8:bd:1f:1e:10:0c:b8:71:78:b4:37:5a:a3:
db:75:3b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:40:36 2026 by rpki-client