Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: JIcity3f3M8IkTCzp3ACM3vCDwzsRtHvMZsDJY/ZZ00=
Subject key identifier: A9:2D:26:CC:03:39:93:70:20:35:0E:2F:2E:DB:47:4B:27:F0:9D:C4
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 01A08A8C6F22E20AA15DACB208E342F7E859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 1A46
Signing time: Thu 10 Sep 2026 09:00:54 +0000
Manifest this update: Thu 10 Sep 2026 09:00:54 +0000
Manifest next update: Fri 11 Sep 2026 09:00:54 +0000
Files and hashes: 1: Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa (hash: Ykk34DqNXHApsE9nxxAgQ38pONoyVUESYWMP39kBFzk=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: 6NvXMVvjYBwEgAL5qSDhWZADrgeMDHrkhhxunZi5ZbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:6f:22:e2:0a:a1:5d:ac:b2:08:e3:42:f7:e8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Sep 10 09:00:54 2026 GMT
Not After : Sep 11 09:00:54 2026 GMT
Subject: CN=a92d26cc0339937020350e2f2edb474b27f09dc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fb:7a:12:48:22:d6:44:4f:9c:f5:26:00:3c:
07:32:2d:66:fb:92:5c:76:b8:78:c3:f1:c2:c2:94:
57:ec:7e:c2:3e:8e:77:35:d7:a3:97:14:6f:83:6a:
83:ea:3b:86:e8:4e:3c:39:2b:79:bc:3b:81:a6:0c:
03:74:c8:47:8a:79:98:c8:42:82:06:c4:cc:f9:14:
27:51:e8:8a:46:5d:54:7b:c9:a4:49:6a:d0:b4:a8:
ba:ce:9d:74:a4:cd:bf:1d:62:3b:ff:10:6b:a7:65:
93:32:13:63:51:c2:ba:33:bf:ae:b9:98:6c:88:d2:
80:56:3e:0b:0c:18:80:92:7f:3b:cc:90:1e:62:5d:
56:05:7b:19:20:34:bd:ba:ea:ab:96:54:9a:c9:33:
03:06:71:b7:fc:61:7f:2f:ae:9a:a6:93:74:22:9d:
94:32:c7:69:89:e0:3e:de:7e:b1:0e:b3:f3:73:f6:
2a:23:5c:d4:c5:6e:bc:87:8f:47:69:88:27:0b:21:
37:46:b4:05:9f:aa:28:fe:ce:be:d2:1f:af:10:84:
3c:e4:d0:43:60:d1:b3:2b:7a:94:66:58:f1:12:83:
3f:0b:ca:42:56:3a:b5:4c:bf:dd:bc:52:02:2a:93:
e1:fe:b4:5a:e0:14:a6:d1:17:e3:ef:10:d8:bb:4f:
40:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2D:26:CC:03:39:93:70:20:35:0E:2F:2E:DB:47:4B:27:F0:9D:C4
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ac:a4:64:6f:2b:bc:9d:af:62:12:d1:a0:2e:3a:47:39:e8:
45:c6:06:f1:7e:d0:41:6f:80:e2:a9:87:1e:12:ce:1e:b8:27:
22:4c:19:01:ee:f8:b4:78:a3:f2:a3:4e:1c:36:3c:ab:f5:67:
80:8e:ab:98:f8:6e:c3:de:05:f8:56:7b:04:2e:37:a4:f9:2f:
ff:e4:26:f7:32:8b:9b:5f:9e:c0:8e:17:93:b9:28:a6:e3:a6:
00:d5:f9:24:eb:1c:aa:87:3c:b2:a6:e4:53:79:54:7e:52:e2:
02:59:b0:3a:ad:03:a5:5a:1a:77:83:0e:06:3f:63:e7:4d:c7:
d8:32:de:79:01:5c:48:92:94:16:f1:95:a7:33:5d:d5:ae:31:
e0:05:6d:f3:46:4a:c7:b6:48:72:55:e4:1f:33:13:dd:ab:dd:
07:36:70:01:94:80:00:c6:74:3f:b4:69:fc:c5:ff:49:82:b7:
23:8c:bc:bf:d5:5c:aa:27:b5:53:cf:96:8b:a6:8d:1d:98:31:
52:b4:2d:19:f9:27:56:29:6e:4d:a0:9c:5c:cb:11:af:70:24:
dc:2c:18:fc:26:30:66:cb:e2:b0:53:92:97:4c:eb:f1:d4:88:
a8:6b:9a:a5:98:42:cf:19:2a:d9:9a:08:45:c4:77:8f:5b:61:
17:e9:9d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:01:15 2026 by rpki-client