Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: fZxpB5yfo4MC2N/RKK1NCZftPu8iGB/vwdKyT5KkMBA=
Subject key identifier: 9C:09:6A:21:EF:B2:BD:9D:55:32:96:C3:34:79:9C:93:01:74:32:87
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 01A0E098A90703690094AA21A422DB915B50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 1AB2
Signing time: Sun 27 Sep 2026 02:01:36 +0000
Manifest this update: Sun 27 Sep 2026 02:01:36 +0000
Manifest next update: Mon 28 Sep 2026 02:01:36 +0000
Files and hashes: 1: A68FGxDlgvGi2ExLVyu1Rtus6jY.roa (hash: OAq7I962/haIw/8uA0XXyCPjF4pVghhaZk8tZjEL3zU=)
2: VKOQ1y_Uw5fzQd8b1Hdd3EKQAlM.roa (hash: 32JiiJLEtTayhYhvmHeuz5r0x6saNvGEu+svv9Ba2PA=)
3: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: +/5ocLKyseivIxeKzhJR/tpC5nmTSjBakXbGLe1Uruw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:98:a9:07:03:69:00:94:aa:21:a4:22:db:91:5b:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Sep 27 02:01:36 2026 GMT
Not After : Sep 28 02:01:36 2026 GMT
Subject: CN=9c096a21efb2bd9d553296c334799c9301743287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:90:68:fb:2f:dc:33:0d:96:71:7a:76:12:e6:
25:49:46:a9:fd:3e:d6:d3:22:8c:10:d8:1e:c0:80:
45:6a:78:06:00:14:17:52:dd:4a:80:38:d0:7b:5a:
ed:ec:ef:b9:a2:e1:95:e9:bf:2a:06:0f:66:bd:5a:
b4:e4:58:4a:53:a4:ec:a3:e1:3f:37:ec:07:eb:69:
44:11:b6:96:6d:ba:86:4c:c6:25:a9:52:1c:ae:c0:
27:6c:08:37:5e:cb:43:54:7b:05:15:0e:13:d8:be:
4a:74:09:29:d5:bc:32:5a:fa:30:dc:61:6e:f0:d8:
61:b4:f1:eb:9d:49:8d:86:e0:d1:f4:44:45:b8:7f:
6b:09:d9:7c:18:c6:67:99:c6:0f:ba:07:d7:94:25:
f0:0b:24:2e:1d:43:b5:8d:18:6b:c5:88:17:59:4a:
c8:8c:a9:5d:77:78:dc:f1:07:b9:e9:0e:f7:d9:ed:
71:17:e7:f6:4a:10:39:0f:6f:4f:28:70:9e:66:01:
f8:5f:60:1e:5f:7d:69:b1:c4:14:48:8d:ee:4d:c7:
0b:48:1a:01:b0:6f:63:c1:85:9f:2b:ad:57:d9:f4:
d5:fd:7d:b2:6e:10:73:c0:49:19:f3:04:5d:2a:09:
3c:b8:08:c3:32:c3:2b:02:01:fb:f2:af:8d:08:a2:
1f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:09:6A:21:EF:B2:BD:9D:55:32:96:C3:34:79:9C:93:01:74:32:87
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:39:d9:65:63:df:de:21:51:98:47:f8:41:79:26:be:a0:50:
42:d5:7b:89:52:3e:10:8e:fa:e4:b2:e3:41:19:42:e0:ae:70:
60:8e:38:ce:63:d4:47:a1:a6:4b:7e:93:bf:0c:5c:80:6c:4a:
94:1b:33:e0:0e:f6:2f:4c:fb:8f:d3:03:9a:f7:b6:e4:fb:ab:
7a:54:b8:91:6a:48:fe:ac:b1:e3:d0:57:9e:9f:6c:ec:56:59:
02:e6:3e:b6:31:d2:2d:5e:27:87:dd:ca:dd:05:77:f9:ae:49:
90:14:43:56:ba:52:94:8b:2c:6f:ab:81:06:13:ff:52:d5:e6:
3f:78:03:36:d8:7f:81:c9:88:e5:20:46:82:ba:0f:23:af:c3:
01:1e:a1:e0:bd:66:12:06:93:0e:94:1f:a6:ef:ef:a2:e9:41:
f2:5d:2d:1b:28:a7:69:fe:97:a7:66:97:0d:36:19:69:ac:84:
b5:81:95:df:78:e4:1b:fc:ad:bf:a4:82:b0:d9:05:4b:ed:b3:
30:60:80:b4:08:80:9e:72:31:f6:08:3a:cb:37:74:5d:fb:97:
8b:79:46:07:fd:73:94:c9:a6:f5:bc:90:13:ff:3c:6c:32:91:
91:3f:97:87:96:6c:81:02:07:67:65:09:af:5a:fa:43:c8:ca:
67:2b:59:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 06:52:12 2026 by rpki-client