Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: lHBOWx+jDn19a7O4OyKcg4lkPae2UgjN6sbB9qyF8pk=
Subject key identifier: 73:A9:26:54:A9:0F:64:33:A9:59:11:70:F6:70:0B:57:01:0F:AE:44
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 01A0DC8458D237DCEDC1FD29207E41EB4DC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 1A73
Signing time: Sat 26 Sep 2026 07:00:55 +0000
Manifest this update: Sat 26 Sep 2026 07:00:55 +0000
Manifest next update: Sun 27 Sep 2026 07:00:55 +0000
Files and hashes: 1: O0e9J99nDHDBcPP1W09ssXrN96E.roa (hash: aQvYlglowNCiS102CJiAb4sYyaW4lZND2gALby9zlgw=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: uLVC0iIkCHORWGbl2wm5rR6TevD16YwwvuFlqHZ2w7Q=)
3: x58D33wXY03IBALkfNVEewlOjxI.roa (hash: l4BRaOtR+rQZWBsP3tk/LVs3kvHtYkV6QExE7KMTpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 07:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:58:d2:37:dc:ed:c1:fd:29:20:7e:41:eb:4d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Sep 26 07:00:55 2026 GMT
Not After : Sep 27 07:00:55 2026 GMT
Subject: CN=73a92654a90f6433a9591170f6700b57010fae44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d1:66:40:06:7d:ff:d4:53:8d:2d:3f:e6:46:
29:1f:17:11:85:60:5c:88:9f:7d:02:c2:39:01:80:
8c:fd:f2:dd:62:1f:d2:b6:98:a4:c5:75:3f:07:b0:
a4:99:4b:74:3c:03:70:87:57:00:06:c3:7f:29:ad:
56:c8:93:36:11:9a:d8:95:55:03:03:6c:0f:cf:44:
6e:e9:13:de:c6:0d:bb:07:32:72:3a:48:35:46:9a:
ae:44:cb:01:ad:c0:21:dc:cf:b6:12:e4:84:92:5d:
b8:0b:e4:66:19:8b:f3:0d:59:80:00:18:5e:c3:b8:
df:79:a3:7e:5c:f8:18:e2:22:c8:ca:d0:ac:28:11:
cc:f6:3c:ac:f8:68:a6:a6:46:cb:01:99:a7:7a:2f:
ce:3a:a6:77:e3:11:a9:f4:e4:c0:80:83:38:0b:b1:
b1:45:a6:05:ef:51:09:cd:ca:a7:db:e0:3a:8a:aa:
5b:a5:5f:65:d8:60:e7:a6:4f:83:52:2d:1e:04:07:
e4:07:d3:6f:09:3a:25:3b:b3:06:84:a5:53:f7:a9:
37:58:bb:f8:80:fd:b2:e7:c4:00:31:d8:39:1f:91:
37:0b:63:1b:3c:d3:15:e9:d3:13:fb:9f:18:65:d3:
d8:de:cf:b6:28:ad:24:62:64:c8:83:e8:ec:92:46:
17:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:A9:26:54:A9:0F:64:33:A9:59:11:70:F6:70:0B:57:01:0F:AE:44
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c6:ce:a5:8b:86:b0:43:ab:89:8a:09:69:26:33:ff:17:8e:
10:dd:7a:fc:bd:d6:f6:34:96:fa:1d:10:6f:a5:2b:bf:3d:c4:
dc:a6:27:1c:5d:a5:49:25:4e:57:fb:6f:82:df:cb:ba:27:f3:
49:8b:40:52:0a:49:27:44:7f:48:8d:88:9e:90:dc:0b:e8:a1:
6d:22:16:ef:38:0f:6f:f5:de:82:49:c1:bf:01:a6:4f:95:da:
4a:39:49:82:58:bf:2d:18:b4:d7:83:95:84:c0:af:5a:ff:a5:
f1:f2:c0:6c:da:95:96:a9:e0:f1:dc:30:30:5a:45:be:34:bb:
77:cd:1c:ab:6c:58:4a:f2:7b:10:fc:6e:db:c8:f7:d1:1e:eb:
3c:1d:95:57:1a:35:eb:f7:0c:0b:28:6c:86:22:a2:47:28:ce:
59:f2:14:bc:a8:49:64:f5:bc:80:bb:c8:d4:39:88:89:cc:37:
d9:d5:d5:d0:0d:3f:93:18:38:ed:d1:fb:16:4f:0f:67:4a:5c:
9f:0e:c4:25:62:ab:bd:da:12:97:27:14:66:d5:ae:22:b3:d4:
0b:ba:b2:65:47:20:d3:7d:fe:01:f7:ec:6e:2c:3a:a4:59:91:
23:6d:4e:7e:1b:40:26:27:c8:d7:80:fc:c7:54:94:52:0b:60:
c9:83:a4:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:13:22 2026 by rpki-client