Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: d5Uwx+gKq1bvLkpnu5kfDmI4o/BadNPinngy1uZBgmE=
Subject key identifier: 58:DD:DB:BF:63:CC:DB:C5:90:51:FC:06:A4:A4:1F:BE:CA:52:2D:5A
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 01A0D2DE0B61EE83CF28264D151AAE692CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 1A73
Signing time: Thu 24 Sep 2026 10:02:42 +0000
Manifest this update: Thu 24 Sep 2026 10:02:42 +0000
Manifest next update: Fri 25 Sep 2026 10:02:42 +0000
Files and hashes: 1: 2oiBg97yJfcku7AZ1xtBGexIP9I.roa (hash: ZkJc6vel+43QcyypXskCAIYVCyw1+ndC8Q1LjIoI34g=)
2: GWcwAEGL8dWNpctIdaHLmJt2F-M.roa (hash: icoIbE+7HxZrn6cToVlzjrHBi9MeFRezSthDAS8pPcs=)
3: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: 9XLcE5weM2+hbkHPGVxJIzRwVQK04yfc07cof40tZoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 10:02:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:de:0b:61:ee:83:cf:28:26:4d:15:1a:ae:69:2c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Sep 24 10:02:42 2026 GMT
Not After : Sep 25 10:02:42 2026 GMT
Subject: CN=58dddbbf63ccdbc59051fc06a4a41fbeca522d5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:0d:87:46:5c:66:11:44:3a:69:ad:d6:14:
1f:d9:78:37:1b:db:77:50:b8:96:f5:76:d0:5a:40:
e6:fa:3b:2f:3b:a3:29:73:a2:f5:82:ee:af:75:8f:
ed:c3:07:f8:50:1f:26:96:f9:8a:20:fa:2c:88:67:
b1:18:4c:67:ca:e7:f9:cd:17:f5:07:f3:2b:81:85:
aa:76:a3:c0:99:33:28:67:04:0a:05:d5:f1:5a:d7:
43:7e:92:1f:9b:56:f1:ab:78:d3:ac:62:4a:3a:c0:
8f:32:5a:3b:12:04:c6:39:20:ce:1b:7c:4a:58:5e:
39:d7:2e:cc:2b:c3:17:8a:da:37:3e:b3:73:4a:a3:
86:32:82:fe:af:f2:2b:98:7d:38:27:e3:7d:bb:54:
71:5b:eb:dc:48:96:60:5e:86:dd:24:e4:8d:89:e7:
5e:43:f7:c8:ac:66:cc:6d:82:d9:80:eb:d0:ff:2e:
45:8e:91:35:24:db:70:f6:8c:c0:d2:3d:2e:f2:ce:
ca:d1:94:e2:61:1e:e2:53:fd:8a:1f:97:8e:e8:ee:
c0:8f:35:24:09:d9:25:8f:ba:a9:bc:a0:ec:27:02:
6f:83:4b:7d:47:9a:bc:5c:bb:75:b4:13:e1:2c:6e:
d6:ed:1d:a3:d7:cb:f3:b5:4d:b9:57:eb:5b:42:e1:
9e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:DD:DB:BF:63:CC:DB:C5:90:51:FC:06:A4:A4:1F:BE:CA:52:2D:5A
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:69:42:60:5d:e6:3e:2f:1e:6c:7b:22:69:33:05:a8:06:0c:
73:cd:d9:2c:71:4c:e0:9e:c3:65:f3:ca:ca:23:6e:c9:1e:18:
b1:a0:43:b2:6e:a8:68:41:d6:2d:27:dd:c9:1c:f5:95:f0:f4:
33:bc:e1:ee:d0:9a:ce:44:50:8b:c2:4f:68:50:72:53:35:c7:
01:da:84:dc:1a:ce:0d:d4:44:ca:90:3d:2b:b6:3f:ea:fa:c4:
ce:25:fe:5b:86:37:d9:d1:15:75:78:c8:2b:01:ec:1f:bf:ab:
90:1a:a2:7a:83:82:38:d7:e7:f2:f7:ca:d8:a0:7c:d1:60:dd:
a9:5b:67:a4:bc:b2:7a:60:a2:06:b9:75:ce:c3:c4:14:80:30:
55:82:a5:36:b3:77:58:6f:52:69:b2:c4:07:91:91:c2:a8:fd:
ea:a0:1e:40:42:cc:f7:f7:a4:71:0a:2c:6b:3e:9b:c6:1f:2e:
01:2a:43:cf:b1:a3:d6:62:93:94:1b:9e:99:52:26:62:ed:85:
12:e4:b7:b8:10:cf:aa:4d:21:ef:b6:55:e7:09:62:63:53:8f:
04:c9:cd:4c:d3:b6:a5:e2:f0:a2:36:ce:2e:88:e7:51:37:e7:
11:ae:bf:ea:bc:a2:9b:7d:fa:d5:b4:c5:d3:b5:60:63:4c:dc:
38:5e:61:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:13:38 2026 by rpki-client