Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
File: XigJUGU6fsWMUzhdALOB77tGWCQ.mft (raw, json)
Hash identifier: XTWhwccueERqGM8y8nWgl750uWZxE5/yf/CWaubhASk=
Subject key identifier: 69:27:00:6F:ED:BA:D9:F2:E1:05:20:80:2A:AA:E7:F6:E3:B8:40:31
Authority key identifier: 5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
Certificate issuer: /CN=5e280950653a7ec58c53385d00b381efbb465824
Certificate serial: 01A06D95AB64C2179ADC9210DA970DBF4C8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
Manifest number: 09F9
Signing time: Fri 04 Sep 2026 18:02:00 +0000
Manifest this update: Fri 04 Sep 2026 18:02:00 +0000
Manifest next update: Sat 05 Sep 2026 18:02:00 +0000
Files and hashes: 1: 1-N-Z3cPVFu_Om0GHK2AgOkgXdoM.roa (hash: fr16WHaKP/dmz7kwPH4GVwwXFVV/SyIEEVY49/wQV+U=)
2: 1aw8Nv97xOelgCP3-YnwnaxEm5Y.roa (hash: jy29WIgwdNl8op/0r93ONPzqQSdB42DU8p3Gs7efZY0=)
3: 2PxDuTNSWd2nVBQOyZp7w-a3G48.roa (hash: nuRMk74zjQwmTzVhehj6QjrkhW4+qo+fGCHLFEBJBC0=)
4: XigJUGU6fsWMUzhdALOB77tGWCQ.crl (hash: 9FDW3ZME2yVyljAATyUg1+KTnx9pzPno5p2ZnhHrZuE=)
5: c9R4pyYEgXuth8LibhVlQrijaqw.roa (hash: GjJoF2AKi6roB+eJMggN2owFvnp/FEnfdBtdPLGnDgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:ab:64:c2:17:9a:dc:92:10:da:97:0d:bf:4c:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e280950653a7ec58c53385d00b381efbb465824
Validity
Not Before: Sep 4 18:02:00 2026 GMT
Not After : Sep 5 18:02:00 2026 GMT
Subject: CN=6927006fedbad9f2e10520802aaae7f6e3b84031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cd:04:71:af:5f:79:e6:18:c7:ab:75:6a:6c:
54:aa:64:70:7a:11:ff:57:ec:79:a3:62:0e:e7:35:
db:a0:3b:a0:b4:70:a9:3d:ef:8e:c2:5c:6b:26:6d:
a6:75:38:5b:4c:c6:a7:22:d6:1b:2a:0d:0d:50:2b:
fd:a1:b4:46:68:d8:87:78:c8:d1:38:aa:86:8d:09:
8c:c7:40:41:a5:3e:ba:33:a4:89:3b:dd:2c:16:10:
d0:2a:f4:9d:5a:65:3d:67:cd:1c:6c:93:40:f0:74:
16:fe:a5:5b:b0:a3:75:93:df:82:31:d8:6f:dd:f9:
88:4b:83:8a:8c:79:3b:05:97:8e:08:1a:1c:e7:53:
1e:04:19:ab:73:00:f7:6a:ed:84:cb:db:25:a3:e6:
2f:73:58:3a:e6:da:07:37:f2:18:8c:97:c2:31:60:
25:05:98:f7:21:d8:61:b9:e8:f3:a8:b3:cb:11:07:
25:0f:cb:27:93:0f:ac:1a:9f:3b:30:2c:6d:b6:ae:
24:47:c7:c5:66:b1:f4:40:11:06:90:27:6a:02:4b:
b9:a9:a2:c3:78:fa:2f:25:7f:55:af:ae:6b:96:1e:
29:6f:e3:bd:8e:79:58:a5:23:05:0a:a9:bf:fd:b5:
e3:4f:3c:6f:04:b6:f5:79:fa:79:72:3a:87:ae:ec:
41:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:27:00:6F:ED:BA:D9:F2:E1:05:20:80:2A:AA:E7:F6:E3:B8:40:31
X509v3 Authority Key Identifier:
keyid:5E:28:09:50:65:3A:7E:C5:8C:53:38:5D:00:B3:81:EF:BB:46:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XigJUGU6fsWMUzhdALOB77tGWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/72c587-c5cb-40e4-8ce1-e1b53556c1c3/1/XigJUGU6fsWMUzhdALOB77tGWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:2d:68:84:c4:38:1f:e5:ad:ec:d3:ee:db:a5:ec:f8:c9:65:
14:da:21:55:ff:39:95:7a:61:7b:03:00:3c:26:24:32:1b:38:
e5:0d:f7:e4:c5:3b:b6:65:d7:c8:8c:23:84:1b:c8:0c:65:67:
46:29:76:04:d0:cc:f0:f5:8f:53:2d:5f:cf:b4:2f:d5:71:fe:
e5:b3:ea:b4:82:47:f7:26:b6:b9:3f:31:cf:a9:0d:63:c6:4c:
2a:5c:3b:36:5f:be:db:af:c8:9a:cf:13:84:75:f6:2b:3f:87:
11:35:6e:76:2b:6f:ba:27:cc:d0:72:c9:7e:48:40:bb:dc:b2:
00:58:68:c9:55:61:b0:b3:1c:5e:09:ea:57:3c:de:e5:f7:7a:
84:b2:aa:a3:d2:f5:7f:cb:85:a6:af:17:90:2d:b2:f0:9d:24:
d2:40:58:86:1c:a0:af:8a:f7:3c:24:db:a9:c7:87:a9:93:f0:
44:4b:d1:9e:82:1a:e1:b2:63:b6:8d:3f:66:a2:c1:bf:06:56:
b9:5c:ce:b8:6c:72:9f:74:57:35:21:d0:b2:29:3d:c2:a7:1a:
7b:36:97:5d:8c:78:eb:09:5d:b0:c3:fe:13:dc:69:d6:fa:37:
e9:33:9d:9d:61:4a:54:e9:93:54:03:70:53:61:41:31:da:b8:
cd:f2:86:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:29:41 2026 by rpki-client