Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
File: XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft (raw, json)
Hash identifier: UiN0a/MzqGKwkNWPkXg2d6e2HQ8GjFh9vPtLl/osU/4=
Subject key identifier: 74:95:25:F9:FE:B1:A7:4B:63:BA:EF:CB:9D:A5:99:AD:4B:18:71:AF
Authority key identifier: 5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
Certificate issuer: /CN=5c61dcd3eb50c83d68060bcba4af152204193503
Certificate serial: 01A0B98A515E0A7F074682C39B6751162489
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
Manifest number: 121F
Signing time: Sat 19 Sep 2026 12:00:44 +0000
Manifest this update: Sat 19 Sep 2026 12:00:44 +0000
Manifest next update: Sun 20 Sep 2026 12:00:44 +0000
Files and hashes: 1: 2LxanPXEt-Ah2tA9EYIfUY7a7ZY.roa (hash: Uywc9u8hm/WxjQy7SxAxxYIxsP7UM6R3hTnst6UR3yE=)
2: XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl (hash: vjn5jZ3SrSKRLFQks4po/lnTDtvfKFrmAQEerkhAgFI=)
3: XN_BGWEzxZjhg6iXlmQqSDhpeZU.roa (hash: nt1Dqzzch0xHlTVsHiqUIJZJJ7P5OL+fpAG1RALu8GE=)
4: cDTj5s606sVgmgpZ3n6Z3dU4zwA.roa (hash: Tz/Xa89Xe7rgKjUL5hIFqnaSfDilwgGaKsizO4oAEvI=)
5: fQWCmfLdQl9kgPQ8VBdW1T6y5WQ.roa (hash: c6z+qlka4njKh+KsSdKsKGpsRerVkXlOyNamnYTlXAw=)
6: hVXu442W8sHVh8F2wI339U-u6hw.roa (hash: tfQAfvgbfBIutk9LhU3LMYfREhO9WhUNbbEaKiJKIO4=)
7: pwg2Pcu7xQM-Nr6mzrIBgEt_XFI.roa (hash: lF7Ckm/bTHOWi8Xtom4+V7QF19TxeutNBXq6gqp0Yv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 11:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b9:8a:51:5e:0a:7f:07:46:82:c3:9b:67:51:16:24:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61dcd3eb50c83d68060bcba4af152204193503
Validity
Not Before: Sep 19 12:00:44 2026 GMT
Not After : Sep 20 12:00:44 2026 GMT
Subject: CN=749525f9feb1a74b63baefcb9da599ad4b1871af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e9:eb:de:41:e3:bc:c0:99:06:c3:13:0e:56:
30:da:9f:3c:ae:28:68:45:18:4a:a7:aa:a9:b8:7c:
2e:34:35:a8:3f:fd:69:9a:43:41:64:5a:65:1e:fa:
31:5e:a7:cf:20:17:ee:6a:e1:34:78:c2:94:25:f7:
0f:31:82:cd:fd:12:0d:11:c0:b0:9c:a4:7b:83:86:
eb:85:75:01:5d:95:7b:7f:b0:96:ba:16:99:6c:a5:
0b:13:4c:47:3c:16:79:55:da:cb:38:6a:e4:0b:d0:
ae:b6:46:dc:91:bd:d0:ce:10:22:2c:43:52:ea:fb:
ef:fc:21:7c:98:4c:bc:4b:e1:4d:ad:25:71:79:58:
72:86:be:77:92:7e:37:c0:8b:75:3e:2c:fd:1e:90:
22:a8:46:19:42:d1:af:85:f3:c8:2a:d9:0e:0e:be:
ba:9b:21:41:a2:ea:ec:cb:7c:16:16:0f:39:46:3a:
dd:91:49:e1:79:90:e6:6f:19:08:aa:49:e2:94:5c:
4a:c8:eb:94:31:dc:3c:fc:7a:c0:22:09:b2:31:99:
64:50:2a:f1:a2:77:a2:a1:33:ff:23:f8:43:4d:7d:
16:92:3d:d9:84:3b:ac:53:e1:66:a2:13:8a:6c:6c:
c1:94:49:97:30:18:2f:8e:0d:a6:c2:70:2f:26:b5:
44:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:95:25:F9:FE:B1:A7:4B:63:BA:EF:CB:9D:A5:99:AD:4B:18:71:AF
X509v3 Authority Key Identifier:
keyid:5C:61:DC:D3:EB:50:C8:3D:68:06:0B:CB:A4:AF:15:22:04:19:35:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGHc0-tQyD1oBgvLpK8VIgQZNQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/44a155-4d02-4002-8f3d-c36d1c460e2f/1/XGHc0-tQyD1oBgvLpK8VIgQZNQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1b:69:1c:f1:f5:01:9e:fb:35:24:5c:cc:55:dd:ae:d9:72:
da:f0:50:e6:60:98:96:f1:63:5c:a1:d6:84:db:45:cb:01:e5:
49:2e:b4:7e:0f:b4:b3:eb:a8:22:41:e8:1b:b7:dd:f6:ca:9c:
c2:8a:b4:81:64:2a:dd:11:ec:e7:d3:c6:af:9c:58:bf:7f:92:
a6:0a:90:40:76:67:bb:e7:44:b9:93:76:16:44:a5:e5:b3:0b:
66:a6:e9:26:81:a7:35:b0:a5:e6:dd:ec:92:25:21:3c:05:08:
5b:52:85:cb:e7:b5:f8:13:22:94:db:7f:5f:0c:d1:10:de:2e:
3d:59:ee:ba:6e:00:f0:1e:97:66:67:a6:1c:e2:d7:bb:fb:6f:
d8:24:f3:b3:e1:f1:92:6d:d2:1c:9a:ca:56:37:77:ac:c9:f3:
b1:0c:11:8d:53:8c:42:64:87:53:82:65:b9:c2:b5:3c:88:92:
ce:02:bb:db:47:d3:43:6e:84:27:db:42:e8:cf:c5:d4:d0:37:
46:eb:98:4a:4b:7e:42:b4:43:79:63:b7:16:49:d7:ed:15:11:
e8:1a:90:9f:e6:11:e3:93:5f:dc:27:f9:44:16:66:c1:36:75:
18:a8:b3:6d:65:2c:e0:21:22:3f:d4:31:ff:e2:f0:b7:c7:d4:
79:c2:a6:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 22:47:10 2026 by rpki-client