Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: q+Evr2VJMclh+2drj4O76h+tD3cPAW4gt43bvt9DONE=
Subject key identifier: 21:D1:17:C9:4D:85:FC:7F:8E:A5:BF:0E:2E:A9:B7:23:E6:89:A4:89
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 01A0D8DF106E24407325EF819DE64EED95EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 09F7
Signing time: Fri 25 Sep 2026 14:01:32 +0000
Manifest this update: Fri 25 Sep 2026 14:01:32 +0000
Manifest next update: Sat 26 Sep 2026 14:01:32 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: gPVLyb4J89wFjC4D+g3GR0gn1Q2m35HJIFiPoaLO5cA=)
2: xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa (hash: 4Tr8pcApL7OMPNYK6DHiqFf/BMOwe5lvOFY1rUx8z6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 14:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:df:10:6e:24:40:73:25:ef:81:9d:e6:4e:ed:95:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Sep 25 14:01:32 2026 GMT
Not After : Sep 26 14:01:32 2026 GMT
Subject: CN=21d117c94d85fc7f8ea5bf0e2ea9b723e689a489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d3:e9:3e:bb:1a:18:ce:45:d7:24:de:bc:c8:
27:3b:36:40:a4:86:d1:af:da:b5:8c:78:b4:18:b8:
25:82:6c:22:42:c2:9e:f4:9b:b7:95:a5:36:0b:80:
4b:5c:4d:74:b6:da:57:1a:7a:e6:04:36:9b:d3:69:
3c:65:02:51:80:3b:cc:ed:4b:97:74:15:3f:b6:2e:
e1:9d:28:0d:92:47:60:cd:9b:04:c4:e5:d5:84:f7:
95:50:44:83:98:f7:42:d4:9c:4f:0e:17:e6:17:0c:
bb:67:8d:35:f1:4a:a8:48:49:3a:6b:60:07:b0:d5:
93:3b:09:9d:ca:79:ac:8a:88:fc:59:2f:29:58:e9:
cb:79:1d:ad:eb:b2:99:c4:d6:b0:2f:3d:8e:e4:24:
8f:bb:41:59:92:ab:2f:75:51:1f:5c:eb:80:9a:b1:
c1:a1:f3:0b:e3:35:31:76:2a:cd:a3:cf:91:42:1a:
73:25:17:c5:26:4b:7f:68:f6:23:d5:20:26:35:04:
62:ee:1d:30:14:cd:79:dd:24:ed:8e:be:86:23:e8:
f4:e0:b9:e3:03:02:ae:07:12:85:05:30:c7:e4:a0:
dd:6e:bc:82:8f:46:96:7d:5f:00:32:53:c1:9f:5c:
00:bd:ab:18:ed:a4:ca:96:f0:1b:98:4a:0b:6a:e4:
82:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D1:17:C9:4D:85:FC:7F:8E:A5:BF:0E:2E:A9:B7:23:E6:89:A4:89
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:12:bf:51:88:03:b7:d5:ee:5b:1f:72:72:a3:31:fb:3a:e0:
56:08:4f:66:47:50:c6:a0:5c:d9:36:80:12:a4:f5:d4:18:0b:
83:9c:c6:6e:ba:04:18:b2:65:b7:06:dc:7c:85:65:5a:51:ed:
d4:a1:51:0e:47:b6:46:ac:3d:b1:c6:56:79:5a:3c:b4:5d:53:
4b:10:8f:eb:d3:61:27:af:26:ad:db:fc:a3:0b:52:9b:6c:ca:
46:b2:02:d3:b2:c5:d7:b3:34:f8:63:80:50:f4:1a:ff:6a:00:
bb:d0:ec:dd:11:2c:04:76:7f:15:5b:00:63:5c:43:2c:93:93:
09:7c:4a:b7:ff:52:32:5f:0e:e9:a4:8b:c4:07:ba:95:1e:fd:
14:b2:81:27:07:c7:b9:90:30:a8:96:99:e5:f5:d1:1f:f4:4c:
7b:f3:a5:84:69:63:a6:28:86:3a:f8:a9:6e:05:7c:3d:ac:52:
4c:e8:90:70:cf:92:d2:f5:cd:e3:e2:fd:8c:57:94:16:aa:0b:
67:27:b8:a8:9f:1c:2b:1f:04:3c:0b:a7:96:56:30:78:25:9b:
63:17:4a:1d:2b:bf:ae:9e:1b:9e:dc:7e:02:37:39:cc:2e:c2:
70:f8:68:ff:70:3b:83:2f:cc:95:cc:07:3c:98:af:f7:49:29:
de:58:94:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 22:48:49 2026 by rpki-client