Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
File: XXg76LX3rdAI1xK0N72fmXwIT98.mft (raw, json)
Hash identifier: TazZnS4iY/VSTAETOtVEbGPx2aoZAw6Jrom5VaFjr8Y=
Subject key identifier: C3:19:B0:94:66:5F:E5:EE:5B:FC:BF:99:1A:85:CE:A7:5A:0E:5A:B7
Authority key identifier: 5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
Certificate issuer: /CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Certificate serial: 01A0DBE065DE6F2167C4E5A326750C36847B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
Manifest number: 1A75
Signing time: Sat 26 Sep 2026 04:01:51 +0000
Manifest this update: Sat 26 Sep 2026 04:01:51 +0000
Manifest next update: Sun 27 Sep 2026 04:01:51 +0000
Files and hashes: 1: 80ddEu08r1uFh6uix50N7d9F0o8.roa (hash: DtyowyLw2dVPCBg0r3cdDO/1HWaqkm/fNKE6IcB/i2Y=)
2: XXg76LX3rdAI1xK0N72fmXwIT98.crl (hash: refFZENR1AZYrBGxQrCYtrAK5r30swFn0P7tf0cJ/4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:e0:65:de:6f:21:67:c4:e5:a3:26:75:0c:36:84:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d783be8b5f7add008d712b437bd9f997c084fdf
Validity
Not Before: Sep 26 04:01:51 2026 GMT
Not After : Sep 27 04:01:51 2026 GMT
Subject: CN=c319b094665fe5ee5bfcbf991a85cea75a0e5ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1a:06:7d:e0:3d:b0:38:94:7d:2f:31:b7:84:
50:af:0a:77:c7:6b:1a:47:e0:24:cd:7e:f1:c9:08:
58:00:54:f8:d4:5b:7d:a4:4d:54:a8:00:ea:17:11:
84:02:94:42:0d:60:d1:aa:dc:c8:70:7a:b1:40:9a:
31:94:3e:cf:d4:fd:65:c5:94:98:90:7f:1c:50:41:
23:a3:57:a3:65:64:aa:7a:32:ef:99:09:b1:1e:14:
7a:53:c8:ae:c5:c9:08:65:c8:6d:df:1f:16:27:b6:
da:73:60:b4:d2:41:d5:df:0a:4b:47:5b:9c:5c:5b:
44:22:7a:33:b5:51:b0:39:73:cf:de:f9:82:fa:7c:
5b:6f:78:8d:26:ea:8a:cd:f4:6c:5f:fb:a6:7b:df:
56:64:1e:d7:eb:aa:2a:9e:b6:8d:89:4f:69:83:e4:
36:14:bd:d8:d9:8b:31:9a:e6:5c:5c:20:e8:a7:ff:
5f:cf:d4:c5:ed:f3:9f:6b:6a:ec:c0:d8:11:fc:0e:
69:5f:d4:e9:08:42:cd:2f:da:c6:e2:8c:7b:cb:95:
c2:49:c2:03:fe:60:02:48:7e:fa:e0:bb:be:7a:b8:
ae:14:05:ab:6d:90:13:e0:f2:85:ca:07:4d:19:de:
65:76:d8:9e:cd:d2:59:8d:bc:a8:a3:47:d7:b1:7c:
8e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:19:B0:94:66:5F:E5:EE:5B:FC:BF:99:1A:85:CE:A7:5A:0E:5A:B7
X509v3 Authority Key Identifier:
keyid:5D:78:3B:E8:B5:F7:AD:D0:08:D7:12:B4:37:BD:9F:99:7C:08:4F:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XXg76LX3rdAI1xK0N72fmXwIT98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/6065db-93b2-41ec-b19a-688ce013671e/1/XXg76LX3rdAI1xK0N72fmXwIT98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:9d:7e:91:b2:ab:98:d2:06:39:a6:2e:73:2a:63:ba:f9:f5:
44:20:47:82:60:04:b5:59:46:df:fe:29:9e:33:34:67:c8:9f:
71:1c:76:c9:22:87:fb:fa:56:80:33:2a:69:a6:5c:de:b8:cf:
08:38:c0:10:05:50:ca:f2:d2:1b:0c:6d:9c:92:9b:bd:7d:7f:
8b:86:77:f3:fd:b1:91:b7:73:76:0b:a2:63:a9:b1:26:bf:5a:
f3:9e:96:46:20:1e:88:3c:12:4a:ee:69:d7:5c:0b:8b:74:10:
fe:5d:a2:38:ed:5a:e2:51:e4:a4:02:08:9b:ae:26:e4:4a:4f:
51:46:fb:9d:63:3f:6b:1b:aa:77:47:bb:99:46:1c:09:a5:68:
34:ef:39:30:c6:12:90:7e:b5:c2:28:f7:d9:36:c0:60:76:2b:
56:bd:33:1d:c1:ca:a1:b1:89:7f:cd:4e:28:1b:3e:7a:3f:8c:
c1:49:a4:9f:ae:0e:e2:8c:82:14:bb:a2:a8:b5:1c:03:5f:e5:
6e:d4:8a:a1:2b:35:81:0c:c7:dc:15:68:17:d9:8f:af:4d:b7:
6a:30:58:3b:4a:2c:96:f1:3c:57:81:37:c8:8e:f8:b4:f9:7e:
a8:d3:2d:f6:1b:4f:ca:a9:1d:76:c7:98:f6:5f:48:11:a6:08:
08:3d:a6:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:53:27 2026 by rpki-client