Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
File: Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json)
Hash identifier: w14h3rKwnP3MrkMn3WbYWbJgZNlVWDm/wbF9zCpRz9A=
Subject key identifier: F7:6E:E8:34:A4:3E:BC:A2:3A:71:64:DF:85:2D:D2:83:A3:9A:29:B8
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial: 01A0E219363273512805ADEDD84D2BF2EC55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
Manifest number: 0C39
Signing time: Sun 27 Sep 2026 09:01:38 +0000
Manifest this update: Sun 27 Sep 2026 09:01:38 +0000
Manifest next update: Mon 28 Sep 2026 09:01:38 +0000
Files and hashes: 1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: a389Nzp88YVWAwe7RTCMZtCJHdY64OExL+eMCDi0nq8=)
2: ez3ZuiMIYx6XAooxqgacpm5fhZg.roa (hash: vk/HfV9yv0+3WHPw2z2Am2j60UpVLAvpD1nYGFaREig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:19:36:32:73:51:28:05:ad:ed:d8:4d:2b:f2:ec:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Validity
Not Before: Sep 27 09:01:38 2026 GMT
Not After : Sep 28 09:01:38 2026 GMT
Subject: CN=f76ee834a43ebca23a7164df852dd283a39a29b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:5b:f5:f5:23:66:48:01:7f:69:02:46:59:
3c:68:e5:f1:ed:cf:5b:6d:5b:d7:9d:ee:f9:65:63:
94:6a:79:06:ae:42:2c:4a:44:89:b1:ba:e8:f8:a4:
ab:3f:0f:d8:4a:c5:06:84:6e:df:51:ad:5c:e4:11:
ff:11:3f:9f:fe:2b:d0:7e:e8:1e:99:4d:fb:15:55:
6d:cd:5f:3a:4e:da:d9:02:00:91:15:c7:f5:8d:e6:
91:09:3a:50:6a:81:07:f3:e0:0b:f2:8b:1a:ef:ef:
e9:31:b2:8f:51:e6:1d:74:3f:1f:b3:ed:8b:da:7f:
ad:9f:36:b4:62:66:eb:29:79:43:e8:31:6c:4d:f1:
b7:60:30:8b:51:ec:dd:0a:5c:9a:b4:35:86:b3:39:
85:b8:59:31:ad:35:26:c4:28:c1:ee:c2:dc:13:f6:
30:72:e6:9a:a8:fb:33:c3:3e:d1:54:84:0b:f5:03:
2a:1c:46:bd:a3:9e:75:99:d4:29:88:df:b6:c9:52:
03:00:2c:e9:2d:4f:a5:1f:1b:85:74:bb:b7:13:8c:
75:02:4a:e9:0e:82:c4:61:b1:39:b7:11:a7:ab:17:
64:3f:af:3b:3e:92:aa:22:df:8b:c8:05:10:01:88:
b6:a2:ba:c2:9d:ee:34:37:73:f3:d5:f0:da:84:6c:
67:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:6E:E8:34:A4:3E:BC:A2:3A:71:64:DF:85:2D:D2:83:A3:9A:29:B8
X509v3 Authority Key Identifier:
keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:14:bc:63:38:53:91:7b:38:66:d4:7a:ef:59:e3:bc:f7:0e:
bf:05:d9:14:44:62:e0:e4:b5:47:1e:04:32:ca:2f:96:54:5a:
cd:0c:24:46:9f:e9:f2:f2:55:1d:fa:16:14:d0:d2:5f:cc:1c:
aa:23:38:a5:1c:18:b1:f2:70:8f:70:40:dd:56:49:3b:b3:ec:
15:96:f0:2f:b2:3b:5f:f5:1c:fe:2f:c5:10:8b:8d:ca:48:f8:
72:7c:b8:d2:a9:fb:12:83:dd:41:06:b5:88:14:2c:f0:7b:ea:
63:0a:93:89:be:c3:d1:41:20:3a:ca:43:8d:5d:02:50:2f:6e:
f2:2b:62:13:7c:69:8e:89:05:c1:bc:2c:0b:a0:29:9e:0c:a6:
94:cc:92:0b:e2:91:93:c2:d8:a3:75:7e:01:11:0e:0c:3f:7b:
13:02:0f:1e:01:5a:00:09:61:b0:89:ce:64:ba:5b:76:a2:15:
d8:f1:78:59:e8:26:55:3c:c6:8a:ef:f8:0f:7a:2a:46:2d:ac:
e8:28:2b:94:b3:5d:8d:4d:5d:95:40:af:92:81:bb:92:48:f5:
5a:18:d1:a2:63:f4:7f:60:f3:84:f4:43:76:97:95:d5:c9:09:
70:7a:27:24:4c:ac:72:ac:8d:e1:3d:d0:9c:65:32:82:fc:15:
44:c8:b1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:51:55 2026 by rpki-client