Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: S/OUZrilXXQJH8q3kQNVGw0mnfR/SHKEzkYw6WDk3ew=
Subject key identifier: 5E:D3:CA:EF:2A:4E:EC:BB:1D:74:85:0B:CB:EA:35:E1:11:B2:0A:73
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 01A07095F881071872B7834A2FF57190A06F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 1A78
Signing time: Sat 05 Sep 2026 08:01:11 +0000
Manifest this update: Sat 05 Sep 2026 08:01:11 +0000
Manifest next update: Sun 06 Sep 2026 08:01:11 +0000
Files and hashes: 1: A68FGxDlgvGi2ExLVyu1Rtus6jY.roa (hash: OAq7I962/haIw/8uA0XXyCPjF4pVghhaZk8tZjEL3zU=)
2: VKOQ1y_Uw5fzQd8b1Hdd3EKQAlM.roa (hash: 32JiiJLEtTayhYhvmHeuz5r0x6saNvGEu+svv9Ba2PA=)
3: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: V4QYLE2GL5BBF9ie39XQn22nIMg/z295DGKU5UIYm2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 07:28:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:95:f8:81:07:18:72:b7:83:4a:2f:f5:71:90:a0:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: Sep 5 08:01:11 2026 GMT
Not After : Sep 6 08:01:11 2026 GMT
Subject: CN=5ed3caef2a4eecbb1d74850bcbea35e111b20a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:8f:4d:35:62:87:4f:f3:79:2d:1e:a3:f1:33:
18:6b:18:9b:2e:40:11:19:2a:ad:67:83:b5:9f:30:
53:05:ab:15:ec:2a:f2:c4:60:4e:c6:57:46:56:22:
c4:8f:85:6b:4f:4e:23:e3:85:44:f6:f9:94:96:21:
cb:02:15:71:e7:1a:27:29:d2:3f:52:d5:0f:85:09:
d5:57:e1:0a:f1:d0:98:18:6b:e4:d4:f5:e9:d5:ed:
84:a7:6b:5f:2b:54:fd:95:e0:eb:a1:bf:cb:80:db:
65:e1:69:0f:69:6d:77:91:bc:61:e9:b8:3c:f8:db:
51:da:5b:3a:6d:e5:7f:6d:75:1b:85:c3:8c:c2:b5:
e8:41:72:43:89:e0:a5:92:27:d7:72:6f:71:75:68:
b6:46:26:2e:79:13:6a:b2:ac:80:16:53:41:83:4b:
a1:e8:03:91:94:8a:3f:b0:dc:ea:9f:7a:b4:ef:53:
26:44:f9:a6:93:d4:09:a2:b6:01:44:65:79:f5:2a:
bb:5d:eb:3a:c5:c2:b3:5e:a1:a5:97:c4:3a:02:8d:
f9:7a:a0:49:fa:f0:6f:b9:4e:ee:9a:83:c8:1d:b5:
27:e2:af:8b:a6:76:85:cd:ac:37:8e:1f:87:a3:e1:
39:ae:6b:b4:0c:7f:72:03:47:1d:a3:a2:97:d4:80:
61:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D3:CA:EF:2A:4E:EC:BB:1D:74:85:0B:CB:EA:35:E1:11:B2:0A:73
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:be:04:20:53:15:dc:70:ff:fd:67:fe:07:91:e9:e3:83:92:
e1:f4:47:aa:d1:43:f8:94:3b:b8:39:05:7c:03:da:44:f9:70:
34:67:dd:9b:3d:be:ea:99:54:b8:cf:21:62:9f:69:11:0b:7c:
53:b3:62:2d:a5:de:7e:31:6b:b6:10:f1:9d:42:c6:be:09:34:
d0:6e:8e:79:8e:3a:83:e1:81:91:b9:b9:d3:83:97:c4:77:77:
e2:39:9f:e8:1b:0a:42:d4:ae:dd:ef:e0:22:0d:cd:25:a8:99:
4c:f0:6f:dd:b8:cc:48:b6:46:56:22:ef:7e:92:14:2d:8b:25:
12:a6:57:bc:70:9b:df:52:5d:eb:ed:94:f5:9a:62:02:d3:df:
13:da:bd:2e:4f:31:69:86:65:b4:fc:2e:5a:fb:17:0c:22:15:
ea:2d:10:f9:c5:63:6e:79:9f:7e:5d:15:2a:87:1f:2f:8a:4c:
24:4b:dd:88:00:26:6c:02:8b:61:91:00:bc:bb:cb:6b:85:4a:
06:09:60:99:bd:cc:00:13:58:96:9c:9f:0e:3a:b7:75:55:c9:
7b:12:ad:73:7e:b2:0a:e9:3e:3c:47:ad:51:d8:6d:81:43:1f:
e8:7d:cf:35:44:6c:4c:c1:04:77:a2:cd:e5:e4:0b:bf:23:84:
2a:bb:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 13:32:45 2026 by rpki-client