Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
File: xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft (raw, json)
Hash identifier: NMXEMuzQwFNtMAtYTfe76PCXdYuC9eSiQECSCifbrxM=
Subject key identifier: D6:9E:03:99:EE:0F:2A:36:B6:DC:10:DD:9E:52:29:B2:07:B3:B5:F2
Authority key identifier: C7:3E:16:3A:37:87:05:48:D6:96:EF:03:30:64:6B:84:25:32:8F:28
Certificate issuer: /CN=c73e163a37870548d696ef0330646b8425328f28
Certificate serial: 01A0D20082B8D5153F68110A45A80133D799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xz4WOjeHBUjWlu8DMGRrhCUyjyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
Manifest number: E6
Signing time: Thu 24 Sep 2026 06:00:43 +0000
Manifest this update: Thu 24 Sep 2026 06:00:43 +0000
Manifest next update: Fri 25 Sep 2026 06:00:43 +0000
Files and hashes: 1: WSJBCh2OsvZcrdAL-2hq6pN9tFg.roa (hash: PeDCYtSLNPlYm/YRPC7P1Ngc8lvfXH2IT/iFWw8s2T4=)
2: xz4WOjeHBUjWlu8DMGRrhCUyjyg.crl (hash: hdj1PwKEksVUAZs8sIDQMjm8Gk4OILNH5cppim/UOr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xz4WOjeHBUjWlu8DMGRrhCUyjyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:82:b8:d5:15:3f:68:11:0a:45:a8:01:33:d7:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c73e163a37870548d696ef0330646b8425328f28
Validity
Not Before: Sep 24 06:00:43 2026 GMT
Not After : Sep 25 06:00:43 2026 GMT
Subject: CN=d69e0399ee0f2a36b6dc10dd9e5229b207b3b5f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dd:f2:58:bc:22:98:16:c6:f5:99:e9:7c:86:
42:f4:c8:e1:5d:2d:9e:29:66:11:65:56:11:78:10:
58:68:2e:be:84:a6:3d:19:35:d1:38:c6:10:17:74:
bf:2c:2e:f0:04:30:fe:14:6c:7b:9a:7c:d0:f1:71:
5e:2b:2d:ca:dc:2c:45:7e:ca:f2:29:b5:74:2b:cf:
90:85:d1:aa:84:b6:5d:6b:36:a6:ab:03:c1:c2:33:
90:54:3b:af:c7:27:74:0a:90:9b:a7:0a:74:31:c8:
49:14:f9:57:82:46:4f:b4:cc:b1:37:91:cf:bd:f3:
49:07:14:33:fe:28:18:b9:70:30:e3:15:23:2e:e2:
6a:33:83:e4:b9:65:9a:6a:95:5c:de:96:c5:da:58:
24:5e:4c:e4:5e:96:86:04:d6:d3:95:ac:82:70:56:
11:4e:02:7c:6d:e4:80:e0:fb:d1:01:7b:37:a8:39:
b7:5e:a3:80:41:c3:20:b1:03:9f:f3:1f:b7:1b:2e:
c6:3c:97:46:e8:f1:fb:e9:ed:f8:c0:3d:27:a4:42:
45:d8:01:1d:10:3d:0e:44:89:c4:1d:f6:e5:0d:14:
ae:e4:10:ff:72:3d:5e:a0:76:fe:fe:2f:a3:17:5e:
c8:a1:9c:54:b6:a9:f4:ab:e3:1d:4c:85:53:d1:6d:
46:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9E:03:99:EE:0F:2A:36:B6:DC:10:DD:9E:52:29:B2:07:B3:B5:F2
X509v3 Authority Key Identifier:
keyid:C7:3E:16:3A:37:87:05:48:D6:96:EF:03:30:64:6B:84:25:32:8F:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xz4WOjeHBUjWlu8DMGRrhCUyjyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/xz4WOjeHBUjWlu8DMGRrhCUyjyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:f7:9d:0f:77:52:7a:cd:54:4b:9d:ef:6f:7c:28:5e:1b:ed:
9c:17:fd:f0:ba:9e:d8:1b:a9:b9:a2:ec:23:50:d6:02:89:58:
ba:c9:16:d1:16:72:9c:89:bc:94:84:f8:cb:46:93:bc:89:a4:
6e:4a:14:50:53:5e:84:bc:f9:e7:c9:f7:38:9a:7f:2e:e4:5d:
f1:08:98:df:63:39:d0:24:fa:cf:26:ad:77:e3:9a:3a:d7:b9:
84:a4:07:2a:7c:63:86:21:88:b0:4d:06:cb:57:10:c0:27:59:
2d:8c:0d:19:5c:33:a5:26:ef:d5:75:66:68:fa:77:e4:be:e3:
36:f9:15:5f:c6:29:4d:cf:b5:26:9c:37:b5:47:4c:eb:eb:c7:
89:67:9f:1c:f8:3d:82:05:49:56:04:b9:16:a2:18:3b:da:87:
d2:5d:c5:1b:9d:c3:33:a5:29:a7:50:63:15:70:17:57:07:c6:
f5:ab:51:3e:09:42:1e:6f:92:57:89:10:35:cd:63:99:88:94:
cc:05:36:4c:6b:24:32:d6:5e:e4:36:f5:48:ef:b7:4e:eb:f1:
ae:13:a4:7d:92:f9:0e:4a:04:f6:0c:49:e7:3d:0c:11:59:89:
96:be:1e:7f:d9:40:33:16:36:d1:40:fc:48:60:ab:01:ef:8b:
3d:39:b7:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:28:37 2026 by rpki-client