Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
File: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft (raw, json)
Hash identifier: f8f53FagJFRxtMPnuGFJkhmDoxUgh9i7OFuhNWEt+Qs=
Subject key identifier: E0:07:C0:AB:E4:E6:58:E9:7B:6A:79:CF:C0:E8:63:8A:81:EF:E8:EC
Authority key identifier: 5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
Certificate issuer: /CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Certificate serial: 01A0D6B9A579A900DEB90179B5D5FF50ACB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 04:01:25 +0000
Manifest this update: Fri 25 Sep 2026 04:01:25 +0000
Manifest next update: Sat 26 Sep 2026 04:01:25 +0000
Files and hashes: 1: 1-KKEOWBhq-Xin1u07sp8fmHrvqc.roa (hash: PYl3rvHgnbdTXI4oGxGWGnIZl/efX3OeaWnZ83sqU1U=)
2: Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl (hash: +QjaO7O80KZq3o5sea67dNgI6qJu/NP4ouOmalcXgho=)
3: hRCE6LdZkeQzF92rmCQdMQvaaL8.roa (hash: UB0DT/MFY2dNlWf8e/9nwn7NarMnjJ7fyxrd+zzOII8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:b9:a5:79:a9:00:de:b9:01:79:b5:d5:ff:50:ac:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1768e26ff4f9a2a8a56da4dcb7e1ec0c2e4a93
Validity
Not Before: Sep 25 04:01:25 2026 GMT
Not After : Sep 26 04:01:25 2026 GMT
Subject: CN=e007c0abe4e658e97b6a79cfc0e8638a81efe8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:40:73:df:ba:76:d5:d0:47:ce:28:93:0a:a5:
5e:51:36:28:c4:82:05:79:06:0f:6d:a3:8b:76:8a:
fc:f5:10:2b:fe:18:0a:32:27:57:92:4a:48:d1:ce:
fa:6f:1e:ab:c1:82:ce:5e:3a:2d:c0:b9:68:68:63:
15:a9:c8:f4:34:52:55:fe:ef:d9:1a:a1:df:db:c1:
ef:8c:61:e0:c5:9e:3c:14:42:32:11:be:61:cf:6d:
e5:23:94:21:10:c5:2e:bb:6c:20:4c:ab:e5:ef:85:
aa:d1:e2:91:fc:72:61:00:ca:03:65:b6:98:a5:cc:
2c:d5:6e:9d:7a:ad:e5:ba:50:31:7b:9c:f5:11:ea:
3e:fd:c0:fd:f2:6d:75:64:e6:45:ff:19:2d:af:64:
8c:e2:4a:c3:57:76:1d:0b:a9:3a:77:c0:fb:d5:a0:
f3:d4:c2:f4:4e:c8:b3:02:58:ff:ff:10:01:6b:64:
05:e4:e2:f5:7e:ae:3d:8d:0c:4d:d2:7c:d0:a9:6b:
8b:d7:f0:22:5c:91:c9:d7:80:fa:1f:37:43:31:55:
cf:1b:13:ed:40:52:40:5f:45:09:3b:99:1e:b4:6b:
c1:a0:26:3b:8e:87:58:1a:51:10:9b:f3:45:fc:5c:
e3:0f:a5:05:45:bc:5d:79:f6:6c:82:6e:17:fe:b2:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:07:C0:AB:E4:E6:58:E9:7B:6A:79:CF:C0:E8:63:8A:81:EF:E8:EC
X509v3 Authority Key Identifier:
keyid:5F:17:68:E2:6F:F4:F9:A2:A8:A5:6D:A4:DC:B7:E1:EC:0C:2E:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/e5e53a-dfe8-4e99-85a8-1e0367c07d46/1/Xxdo4m_0-aKopW2k3Lfh7AwuSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:04:27:f2:2a:55:85:f3:be:98:b3:71:ef:0c:96:40:34:c6:
3c:bf:10:e5:24:ac:93:89:bf:a9:94:81:fa:ee:5f:a0:a9:8b:
1e:d6:e1:c9:09:9d:e8:94:83:87:96:a2:18:a9:d5:c7:ca:c3:
df:b8:d8:f4:fc:db:a5:41:8d:52:35:5e:2f:1c:3b:c7:9e:87:
7d:0f:ee:97:07:1f:ac:aa:dc:68:66:c6:3c:55:5c:22:9f:6f:
fe:70:8a:7d:05:f9:db:01:f0:22:43:23:6d:b9:c6:62:0d:4a:
a8:ec:59:2a:cf:0a:2f:0a:46:42:99:ba:d3:26:45:36:73:16:
34:4a:a6:7f:87:e4:d8:5b:fb:b9:2a:b4:01:63:aa:85:b7:d3:
25:0a:35:94:41:38:fa:19:ef:b8:9a:47:63:ac:21:d6:75:31:
14:29:39:8e:52:13:56:6c:64:94:f1:bb:ac:ac:78:c4:e9:05:
a6:5d:bb:da:15:ac:d8:a2:67:aa:60:2f:29:bb:44:a4:d9:92:
48:60:b1:5a:ef:d9:05:cb:1d:7d:f3:60:b1:d7:c8:95:a5:85:
eb:23:87:df:59:55:d6:c3:b1:dc:45:85:fb:83:83:91:c3:3f:
af:27:ad:f3:cc:9e:fc:f8:69:65:d6:74:0b:2f:95:30:0b:52:
59:2d:51:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:45:04 2026 by rpki-client