Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json)
Hash identifier: x64Le8nwiPf3YUfxg0S+uZhU13IXuB/eaSpmHo8wiVk=
Subject key identifier: 28:7A:B9:5F:18:19:CF:C8:79:1C:43:1F:63:06:F3:F6:50:7C:D4:E8
Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Certificate serial: 01A0E4753C0EF3E8745D6CC7C183BD6E0E15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
Manifest number: 1A75
Signing time: Sun 27 Sep 2026 20:01:23 +0000
Manifest this update: Sun 27 Sep 2026 20:01:23 +0000
Manifest next update: Mon 28 Sep 2026 20:01:23 +0000
Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: 2vYl7HetGAuULZO5BYR566ZUxVwOyd0pB02eZ/Puv8Y=)
2: xsHwN39t7Lg_0JrvQJX-o8s4wJc.asa (hash: uUROjO5Wuy6f76sPTNQEiOJg9EZNcnwz3IXWyZD8TU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:75:3c:0e:f3:e8:74:5d:6c:c7:c1:83:bd:6e:0e:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Validity
Not Before: Sep 27 20:01:23 2026 GMT
Not After : Sep 28 20:01:23 2026 GMT
Subject: CN=287ab95f1819cfc8791c431f6306f3f6507cd4e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:12:ba:10:91:75:0f:88:66:b7:5d:e2:b4:8d:
d9:2a:89:76:a2:d3:b5:0d:e1:1e:48:1f:72:3b:dc:
60:17:7d:cc:ac:a3:92:8f:cc:28:eb:53:71:2c:71:
e5:71:dc:00:9d:8a:9f:ce:d3:a2:b7:4d:91:b8:fb:
76:7f:f3:7f:f5:95:29:84:83:45:28:12:a1:41:05:
b4:4c:81:ad:b6:c9:0a:79:99:74:cd:0c:a1:63:f6:
0c:f2:20:db:fa:4b:8a:89:e7:af:61:e2:04:25:c3:
d0:6d:f1:45:92:17:db:40:d9:2c:35:e3:15:68:66:
51:e8:53:a4:f3:88:70:f1:fd:09:d3:22:e2:62:4a:
85:8f:71:b5:c5:bb:26:42:28:5b:91:b6:f5:00:15:
a8:d4:67:d7:51:5d:2c:d7:e4:4f:24:f2:a3:06:60:
e5:a6:54:05:b2:d6:49:87:9e:a7:75:06:e1:25:a1:
fd:52:c6:cb:38:c1:ea:e5:f6:d6:aa:bb:b9:f8:ec:
97:ef:fd:d0:05:77:48:e3:54:cc:bd:15:69:13:c7:
53:70:25:c6:ec:86:56:2d:4f:18:d2:bd:09:0d:1b:
c8:95:11:b2:49:f4:cb:05:25:4f:2a:0a:3c:ce:fc:
95:ba:d0:bb:48:61:a1:1b:d4:9f:03:b2:0a:60:17:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:7A:B9:5F:18:19:CF:C8:79:1C:43:1F:63:06:F3:F6:50:7C:D4:E8
X509v3 Authority Key Identifier:
keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:dc:31:96:b3:5a:ae:80:5e:c3:9f:e8:c2:bc:65:d6:5b:57:
8f:0d:98:57:de:7a:b1:3e:68:a7:ff:31:73:be:18:a4:47:b5:
20:f3:86:39:f8:e2:f1:d1:66:18:fa:7b:65:26:25:a3:65:06:
3d:ac:a1:ae:2f:4b:81:41:5e:c8:16:dd:ba:58:cd:bf:72:c6:
10:db:81:0e:54:45:e8:35:94:03:52:30:96:a9:a2:dd:fa:ee:
56:18:f8:47:52:40:df:c4:b1:cd:ad:5b:ac:74:d9:43:ad:89:
4b:2c:cb:6f:5d:50:a0:e5:17:80:97:53:d1:e5:7e:c6:86:72:
1e:47:a2:ee:7f:d7:56:07:46:e0:9f:6a:16:f7:f1:df:c2:dd:
d1:5e:77:0d:a6:2e:06:71:70:3e:f5:61:29:ee:ab:01:92:c6:
bb:0b:5b:71:2d:e7:eb:be:96:d0:b3:06:60:89:4b:1d:8b:47:
c8:1b:30:b0:53:8d:f0:ed:54:e5:c0:1b:cd:5a:fb:ec:a7:aa:
d5:7f:e4:fb:b3:95:a1:3e:3d:d8:43:60:4a:72:5f:17:7e:13:
cf:7f:6e:7f:d2:7e:76:12:18:cb:10:c0:17:ab:71:93:94:c9:
e0:8e:89:e5:bc:d9:70:9a:86:6a:65:5a:79:f6:a2:1c:59:0e:
c5:48:a4:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:05:12 2026 by rpki-client