Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
File: Xo0HtF99gxJMn4wPrAO-wCRos34.mft (raw, json)
Hash identifier: 62y6cQ2r9Mjhdf3Lvu3UdwdMyGTzLrK9ly0TGoCc0Xk=
Subject key identifier: D3:96:69:7B:81:CF:ED:01:42:40:6E:5B:07:0F:CD:E9:43:9D:F5:8A
Authority key identifier: 5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
Certificate issuer: /CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Certificate serial: 01A0E399C5F853353470C696B8C0124A2A37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
Manifest number: 1A94
Signing time: Sun 27 Sep 2026 16:01:40 +0000
Manifest this update: Sun 27 Sep 2026 16:01:40 +0000
Manifest next update: Mon 28 Sep 2026 16:01:40 +0000
Files and hashes: 1: 1_GujOxczMIwwsPIRuZZ135IW8Q.roa (hash: r9N1NX13HUSdP2RDEYVlg+KFesYDMAwBdVyxzf9SF0I=)
2: 5Hw5SCG7_OPw7F7WvcmHt1ubypc.roa (hash: SMRdVTfHclZq4V+gvOodEyeG5zAH5sDMph36bqmt3rk=)
3: AtV2hA3YXGqznUtgR3uB6bOY8lI.roa (hash: E9jIH1WdWmHG5Hqaca5c+6ilzJbhu15ZC+JxJ/GcG+0=)
4: GqnKTDZ_mcrAatfkX8lGwoS2jzg.roa (hash: eSnwS1DQ7HdrWkTutWDxFLPnFL5oEqisvoEeBtrekYo=)
5: STKH0GmYkagldfyopz-70YJ69EQ.roa (hash: h88I+byL++CNYEweLeezPhZiJJxRIwysZUnB4MEC57E=)
6: WQ55TI7O_Y3_x9hkYSvF2UvokSE.roa (hash: TZOmAdpezSY7WR8DK0sxR8J5sP9pIOwu7JtZmeFi+dA=)
7: Xo0HtF99gxJMn4wPrAO-wCRos34.crl (hash: FC3KlUx5Gn2yReXLolKKy9rrvchEudt+LHlZIf7/ra4=)
8: gvzfKPjwNxS-AsBIh7ZgA5tTa0Q.roa (hash: j8wlfHeXoBqn/3pP04ScQRvLSMC6Ag5BftKcYosNfBM=)
9: hgl809tjaX7Gbv4DItgm3ScJV_4.roa (hash: 1spmr6hLWhe0MEAFi9Vr2mFMBf7qQUqSQroJeyohJqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:99:c5:f8:53:35:34:70:c6:96:b8:c0:12:4a:2a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8d07b45f7d83124c9f8c0fac03bec02468b37e
Validity
Not Before: Sep 27 16:01:40 2026 GMT
Not After : Sep 28 16:01:40 2026 GMT
Subject: CN=d396697b81cfed0142406e5b070fcde9439df58a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a4:32:77:16:50:2e:7c:bc:e7:bb:71:d8:ed:
e2:6b:00:ab:f2:1a:33:52:1a:6b:8f:dc:cb:74:6e:
2c:2e:71:ae:75:6e:56:af:4e:68:ca:00:df:81:6e:
19:9f:05:58:c6:cb:e5:2d:df:a0:82:07:36:fc:41:
18:24:ef:1a:53:a6:f2:0e:9a:92:27:42:d3:5d:19:
4f:19:d3:06:b0:f4:83:8a:b9:02:c4:3a:0f:df:5f:
cf:e2:d7:8d:4d:14:5c:0f:a2:c7:eb:07:9a:39:7b:
8e:09:e3:98:6b:0e:37:11:a0:30:e0:fb:a4:f4:55:
77:fb:97:a9:78:9c:27:9d:bc:2a:c3:f9:3d:4c:88:
89:a1:a4:ba:31:48:2f:07:65:65:7e:0d:37:64:79:
70:28:a0:8d:0a:2d:57:cc:c8:41:28:2a:d4:49:07:
8c:c0:d3:40:93:a6:6b:6c:c0:5c:f8:c9:62:69:e2:
4a:a0:66:88:65:f8:f3:14:a4:10:ad:26:f1:c2:9c:
9a:a6:23:23:ab:8c:69:ca:b0:0a:17:af:c7:e7:e5:
b1:84:67:7f:48:f0:39:bb:3a:76:41:81:2b:c5:ae:
4d:fe:97:3a:5a:e3:13:2a:e9:a0:6f:01:ae:a2:80:
6c:f7:4d:b2:40:46:8a:4a:a9:cb:ac:a1:2c:3d:da:
ee:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:96:69:7B:81:CF:ED:01:42:40:6E:5B:07:0F:CD:E9:43:9D:F5:8A
X509v3 Authority Key Identifier:
keyid:5E:8D:07:B4:5F:7D:83:12:4C:9F:8C:0F:AC:03:BE:C0:24:68:B3:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo0HtF99gxJMn4wPrAO-wCRos34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/a168e9-d070-44e0-94a4-6c8fd84bb5f5/1/Xo0HtF99gxJMn4wPrAO-wCRos34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3f:d0:37:f2:c1:7f:44:72:63:8d:35:10:06:de:dd:0d:1b:
8c:95:34:b9:77:ee:4f:f1:b8:39:d5:7c:b3:54:0f:7a:a9:04:
85:6d:c2:3c:32:51:9e:da:10:7a:58:d0:00:ad:59:47:0a:1b:
c7:ad:0a:da:0a:d1:90:66:f1:af:49:bc:e9:6e:dd:b0:f4:a2:
65:3c:d6:70:02:ae:28:37:8e:05:dc:d4:2a:67:e3:26:e9:2f:
0c:eb:6e:ef:55:b5:ae:32:4e:2e:1d:c0:c1:42:b8:9f:7b:6a:
d5:9e:37:1e:53:6b:51:f1:7e:41:ce:03:45:14:66:37:60:7e:
76:93:96:de:41:ec:64:2b:a5:99:1d:73:85:da:77:21:ce:fd:
36:8b:7e:c8:fd:e1:58:66:00:15:88:07:6a:c0:87:86:f6:bc:
2a:fe:f4:90:37:2e:61:32:45:f4:05:f9:d4:85:27:c7:e7:a2:
23:a7:69:bf:68:74:42:56:f4:d5:17:21:e2:c8:d1:34:5a:6e:
8e:73:f9:f3:04:b1:80:2a:66:74:d5:53:1f:e2:7d:ac:91:89:
a8:33:09:ed:5c:31:60:84:e6:d0:7e:bb:e6:70:60:4e:39:60:
ef:8d:5b:e0:e7:0d:b3:e5:eb:35:5c:dd:9e:79:43:ea:3d:e8:
f6:fc:cd:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:48:43 2026 by rpki-client