Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.mft
File: Xx0htjXMvXDmTKZR9atINcrjufk.mft (raw, json)
Hash identifier: caIgqyqmKkUO0/sPhaQH1tOHnQkXDEzJtlu0i63xmUc=
Subject key identifier: C1:69:DB:D2:B6:8E:68:BE:33:CC:3E:DC:34:19:04:A7:F6:1F:3E:9D
Authority key identifier: 5F:1D:21:B6:35:CC:BD:70:E6:4C:A6:51:F5:AB:48:35:CA:E3:B9:F9
Certificate issuer: /CN=5f1d21b635ccbd70e64ca651f5ab4835cae3b9f9
Certificate serial: 01A087F932304E2479F07A4D50256739AA65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx0htjXMvXDmTKZR9atINcrjufk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.mft
Manifest number: 5E
Signing time: Wed 09 Sep 2026 21:00:50 +0000
Manifest this update: Wed 09 Sep 2026 21:00:50 +0000
Manifest next update: Thu 10 Sep 2026 21:00:50 +0000
Files and hashes: 1: 7bWbVotUtv52xOiDEME3dz5_e98.roa (hash: sHchAOAFmNObQRTRvZeViPzc8t8WH0mwLDZ2MCC81Ag=)
2: Xx0htjXMvXDmTKZR9atINcrjufk.crl (hash: 3YLJpoRrgsbNAnmKqBbXLr2Mz3a64imy/dDJ1pnP+XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx0htjXMvXDmTKZR9atINcrjufk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:f9:32:30:4e:24:79:f0:7a:4d:50:25:67:39:aa:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1d21b635ccbd70e64ca651f5ab4835cae3b9f9
Validity
Not Before: Sep 9 21:00:50 2026 GMT
Not After : Sep 10 21:00:50 2026 GMT
Subject: CN=c169dbd2b68e68be33cc3edc341904a7f61f3e9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fe:83:ae:e0:ea:01:4f:83:a6:67:8a:e8:c1:
92:e4:c3:3b:98:51:d7:d3:f6:25:fa:38:f4:c7:66:
85:81:97:f5:78:31:5a:c0:05:7c:89:64:64:f1:5b:
93:e6:91:f0:31:16:ce:3a:f4:c2:b2:1b:f1:f4:19:
e1:67:bd:35:b6:5d:ad:96:2e:bb:49:18:3b:99:87:
99:b0:1d:44:a3:c9:6f:bb:c3:a7:47:9f:32:7f:71:
02:e2:7c:cb:1c:50:c0:00:10:b5:24:84:71:f6:3d:
de:90:b0:1c:13:70:56:f5:ec:a4:33:06:92:0d:6e:
09:b3:78:42:83:be:34:8d:01:c0:9e:d6:0e:c8:72:
8e:29:4d:1a:72:ad:6c:d4:06:f8:bd:0d:57:a7:f5:
55:df:97:77:43:ce:c5:8a:a4:49:82:94:8d:10:de:
e1:bb:2d:ea:b3:6f:f1:6c:61:d4:bd:5d:e2:d7:b0:
92:44:1c:ac:5d:ef:f6:33:50:4c:68:a4:a4:6f:b1:
80:1d:8a:d2:b3:74:fc:ef:6a:b3:19:b0:e9:35:44:
31:c2:8b:73:3d:40:56:b6:2a:0a:5c:6b:eb:98:98:
91:9f:88:d6:b5:00:4f:f4:c9:7c:1f:dd:c4:c9:bf:
fe:cc:88:b8:b2:55:08:6b:02:73:d8:21:34:52:ac:
24:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:69:DB:D2:B6:8E:68:BE:33:CC:3E:DC:34:19:04:A7:F6:1F:3E:9D
X509v3 Authority Key Identifier:
keyid:5F:1D:21:B6:35:CC:BD:70:E6:4C:A6:51:F5:AB:48:35:CA:E3:B9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx0htjXMvXDmTKZR9atINcrjufk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/914e11-8abf-4e19-9647-a410cac23d13/1/Xx0htjXMvXDmTKZR9atINcrjufk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:1d:73:46:a2:92:e5:d7:3a:dc:4d:17:f2:28:b5:4c:ac:25:
4e:df:da:2f:bb:1e:8b:85:13:70:18:30:27:4b:7b:6a:96:ef:
98:08:d1:79:52:71:aa:53:21:89:eb:22:8e:c6:94:c8:f9:26:
be:fa:da:68:43:61:02:83:48:9b:11:1b:7e:a5:8d:f1:d8:e2:
75:39:54:a8:fd:ef:d2:45:1f:82:33:f4:b5:46:70:80:6a:26:
d9:b4:ce:1e:b9:b2:f5:7b:2a:00:ad:4c:0b:aa:52:84:97:59:
11:ed:4c:06:fb:87:11:84:a4:3b:7b:89:6e:ef:8a:75:21:9e:
c4:85:1f:2e:64:9d:e7:f4:6e:d6:9d:7c:ff:d8:90:75:ea:8b:
92:98:aa:9b:67:b0:5e:d2:f8:42:bf:ae:85:06:58:35:fc:65:
e9:f6:1a:61:b1:59:0c:88:7b:e9:e3:b9:bf:99:ce:82:55:f2:
e9:73:7f:6d:7f:d2:e8:97:ba:a3:10:e8:22:3f:02:9d:d2:20:
1d:7f:65:c6:fb:76:6f:dc:da:3b:57:84:d7:13:a9:3c:41:39:
17:94:a6:b0:21:f7:5b:83:bd:f5:d7:60:7d:4c:07:e1:a9:ca:
10:32:8e:9f:bf:e7:b8:46:6f:a1:e2:92:8c:05:26:5e:78:44:
3b:ce:97:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 03:40:31 2026 by rpki-client