Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
File: XSP6gsR1KG22BxT2A2Gg8crCPSM.mft (raw, json)
Hash identifier: Nk1FR/NxAS/XObSLY8dMuyog9m2nfseLQd+Td4Nt9+8=
Subject key identifier: E8:3E:17:9B:5F:21:CE:7D:DD:43:D6:80:BF:78:CA:53:1A:04:95:C5
Authority key identifier: 5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
Certificate issuer: /CN=5d23fa82c475286db60714f60361a0f1cac23d23
Certificate serial: 01A06BA76787B411736F383F8B4B05AD0208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
Manifest number: 01E6
Signing time: Fri 04 Sep 2026 09:02:07 +0000
Manifest this update: Fri 04 Sep 2026 09:02:07 +0000
Manifest next update: Sat 05 Sep 2026 09:02:07 +0000
Files and hashes: 1: 3Owi7w8XHfa2ETQQJKxPe5_2S3M.roa (hash: WxZPvj4Y/uFWaukPSMrNh1kQZIcODKf/xbXFTKHA6tE=)
2: XSP6gsR1KG22BxT2A2Gg8crCPSM.crl (hash: InEkloKxTLCkZ2pJw4uEE7y084I/u9QyC9mkcXtMquw=)
3: kHjyu0leWmEWJz4dGZNRuqPpKu0.roa (hash: xSmyUIXwxdKC/wUH6aKgbqf7oSMgpHlsL1OZu9Jw99Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 09:02:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:a7:67:87:b4:11:73:6f:38:3f:8b:4b:05:ad:02:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d23fa82c475286db60714f60361a0f1cac23d23
Validity
Not Before: Sep 4 09:02:07 2026 GMT
Not After : Sep 5 09:02:07 2026 GMT
Subject: CN=e83e179b5f21ce7ddd43d680bf78ca531a0495c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f4:8c:f8:35:ec:3c:d5:9f:51:56:2c:fc:6a:
bf:ce:49:77:45:1a:9e:39:f8:e1:30:22:3c:ef:31:
56:33:d5:35:d8:d3:1f:96:64:72:b4:43:7b:d5:eb:
89:84:7f:94:da:1e:73:aa:43:73:ef:aa:09:eb:8c:
33:63:8c:4e:38:62:33:ff:5b:17:c8:e0:86:19:06:
bf:4a:79:86:db:50:93:65:fe:69:2c:d7:79:c1:ce:
56:2c:2e:1b:21:ff:d1:af:9e:fd:42:4f:5e:31:84:
cb:26:9b:f1:9a:50:42:80:ae:ea:2b:2a:0d:74:8d:
0f:2e:40:9e:f4:e1:c0:ef:7b:f6:32:ba:46:86:bc:
a2:0c:f6:2e:6a:cd:36:ca:1c:71:e4:46:44:76:12:
48:25:13:d3:a4:56:9b:f8:3a:ae:73:c4:f8:be:8e:
61:1b:91:2d:64:fd:9b:9a:04:73:c6:dd:63:1b:08:
2d:5d:dc:42:94:34:a0:19:b4:75:60:00:89:34:a7:
3a:ef:27:38:5a:4b:b0:0a:39:87:e4:25:13:37:49:
44:3c:99:74:25:9f:a3:b4:95:25:78:0c:9b:d8:fe:
b6:31:d0:e0:61:4d:9e:72:24:6f:85:c8:d6:bd:9a:
12:c8:5e:bc:de:bf:98:72:b7:17:2b:16:2b:80:65:
64:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:3E:17:9B:5F:21:CE:7D:DD:43:D6:80:BF:78:CA:53:1A:04:95:C5
X509v3 Authority Key Identifier:
keyid:5D:23:FA:82:C4:75:28:6D:B6:07:14:F6:03:61:A0:F1:CA:C2:3D:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XSP6gsR1KG22BxT2A2Gg8crCPSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/bfce8d-0147-47ea-a279-b8f5708f2369/1/XSP6gsR1KG22BxT2A2Gg8crCPSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e3:74:d0:41:a8:95:20:1e:a0:94:c2:97:a2:d7:e1:35:10:
60:db:1a:ed:28:4a:5b:bf:e3:a3:34:7a:22:92:3d:bd:d4:f8:
bb:75:23:3c:5b:73:ec:54:ad:a9:31:5f:12:ad:b8:75:2e:3e:
ba:46:47:b4:05:a6:ee:a0:60:a4:62:f0:6e:f9:6c:f0:41:aa:
04:5e:72:41:ca:3f:4d:ee:a0:42:f6:84:8c:d9:b3:37:ec:d3:
86:85:b8:70:5d:20:fe:04:ef:e3:99:66:7e:24:a4:ae:b1:ca:
e4:d4:56:d1:fb:e3:e8:f5:5d:4e:9f:fd:24:21:74:25:c6:d6:
92:66:5a:91:5a:50:80:d1:69:2b:b0:6c:39:d6:5d:6d:f2:75:
b2:9a:93:5e:40:1a:60:ad:6f:a4:69:e1:d4:1b:12:00:05:de:
6a:26:48:0d:36:4c:9d:70:8f:6c:12:0d:43:f3:d6:11:3a:cd:
03:33:4a:ab:61:80:48:7b:ff:03:96:95:4c:e0:4f:df:bd:23:
e4:f8:74:af:3f:8f:14:a2:1e:c7:2d:40:ac:a4:f8:19:4e:95:
0e:5f:03:8c:77:ed:8b:e0:da:44:32:fa:1f:bc:d4:62:a5:35:
4a:61:43:9e:f7:99:4d:fa:75:ce:3a:42:35:80:08:e1:2e:8f:
cd:d8:70:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 19:02:09 2026 by rpki-client