Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier: fQdriGINZtbz2btYIeoLojMsELHOQ9CsXdm/XdyQIVc=
Subject key identifier: F4:9F:30:A1:B4:CB:13:6F:52:65:47:7F:D0:5F:18:A2:D9:07:65:1B
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 01A06D95B2959BE7DBAB6E8CF9F406856D47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number: 1670
Signing time: Fri 04 Sep 2026 18:02:02 +0000
Manifest this update: Fri 04 Sep 2026 18:02:02 +0000
Manifest next update: Sat 05 Sep 2026 18:02:02 +0000
Files and hashes: 1: Sg_4XUAI-4zoY2AzgRoGFITRYgE.roa (hash: J1EWDPsgpuehOfFX0CglsLJx+tt5cw97sY3WgurbJXo=)
2: TeQy6kFDHKNYmWvI94KK1SajumM.roa (hash: 9uvICF7tqz4KyCQG2zRzp+9JspsGn3aZOu1Zg1a40nY=)
3: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: tQu3ozTPF75RihCD9dQKvn7XppCEuAsGwhDdvnGab8I=)
4: dhOZf_4fAgQZi4_moQSI8o9EFj0.roa (hash: 5T/3rUQwrhAAxuFwErHVP6jvrc57b61OVidSPKCnMBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:b2:95:9b:e7:db:ab:6e:8c:f9:f4:06:85:6d:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Sep 4 18:02:02 2026 GMT
Not After : Sep 5 18:02:02 2026 GMT
Subject: CN=f49f30a1b4cb136f5265477fd05f18a2d907651b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5b:91:65:7d:f0:d6:f0:5b:f4:ce:15:c6:e3:
fb:d8:02:df:34:88:a2:1e:34:ef:83:4b:28:c0:bb:
a6:04:61:21:62:96:c9:34:42:1c:3d:b3:bb:6e:c3:
41:ed:d5:a8:b9:95:94:3a:54:de:16:9f:70:c1:f5:
ec:ca:23:81:ff:28:ee:7a:f0:8f:95:5d:f4:3f:dd:
03:f6:eb:df:a8:56:4b:db:97:07:10:18:d2:44:20:
4a:8c:ee:99:f3:55:65:96:88:48:3b:18:7f:1e:4e:
f2:34:7c:9b:a7:da:d7:16:be:38:0d:93:07:92:45:
d9:7c:12:65:bc:52:3e:34:94:80:b0:e7:3c:46:2e:
d7:49:0a:cd:a9:dd:d9:15:6e:70:1f:2b:41:73:fd:
8c:55:4b:f2:6e:84:10:0d:f1:3a:19:84:93:63:b2:
3e:2d:ab:6b:69:f2:83:f7:ab:55:37:a2:3e:44:bf:
69:04:cf:c8:0d:7b:a8:f3:29:10:2b:87:1a:41:7d:
f6:22:87:0f:a9:99:b1:26:cf:7c:7d:15:06:92:43:
55:e2:88:74:e2:7a:f1:e2:48:04:15:e3:0b:c2:2b:
2c:b8:ee:d9:a4:cd:b8:3a:7f:7b:57:95:28:f2:f1:
97:5c:b2:61:e6:9a:bb:b8:d6:d0:f0:2c:bd:75:e5:
54:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9F:30:A1:B4:CB:13:6F:52:65:47:7F:D0:5F:18:A2:D9:07:65:1B
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:46:9c:63:05:2e:3c:92:f8:dd:78:d3:80:01:15:ec:2d:f8:
3a:d0:96:72:90:28:5c:2e:a6:37:86:06:d5:c0:83:73:18:60:
a4:97:51:dd:a9:bc:03:71:39:47:6e:1d:5a:2e:58:3b:85:d7:
a9:75:0d:c6:68:fe:45:f8:9f:1f:ea:5a:b8:f7:5e:20:60:77:
37:3d:64:d2:f0:c0:c7:be:1f:b2:47:96:ed:ca:2b:b9:d7:23:
a2:cb:fc:2e:fa:7f:e3:2e:43:2b:bf:9c:d3:71:4a:1e:65:f1:
4c:1d:fc:6b:ec:20:fa:98:74:0a:57:26:98:f4:39:47:d5:c4:
72:f4:f2:4a:f0:f9:d9:e1:44:c4:09:a6:50:fb:3a:18:f7:da:
93:14:02:1b:93:d7:5b:61:c1:69:5a:f3:c1:43:82:28:33:b9:
5d:de:02:2b:1d:b8:a2:99:fd:20:61:93:c7:41:6f:1e:06:7e:
89:86:fa:53:23:67:70:92:9b:e1:49:8a:b1:ef:60:27:87:f8:
37:cf:0a:09:f6:c8:42:b9:50:c8:85:b3:40:67:13:12:61:19:
97:6e:3b:36:18:81:bc:ba:7d:02:4d:09:91:56:45:1d:ce:e3:
5b:01:15:30:b3:4e:98:48:4a:b4:32:27:0f:b2:f8:f3:38:64:
cf:36:18:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:58:12 2026 by rpki-client