Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: rTOqzdN6uTxDax2GV2zmnPuuTAaTkyO9J8QFY7qVrkw=
Subject key identifier: 91:8F:9D:14:10:EA:46:0C:27:18:F6:1D:AF:96:65:9C:13:69:DC:3C
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 01A08A8C54490486CE00517FB3D6C225E437
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 1683
Signing time: Thu 10 Sep 2026 09:00:47 +0000
Manifest this update: Thu 10 Sep 2026 09:00:47 +0000
Manifest next update: Fri 11 Sep 2026 09:00:47 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: HBIfPIbHJmlcCS6Xte2vkrEnPfFDCINMnxvuwSSUj8E=)
2: fDzIkCC4HQZF8d8gvy277WuuRYM.roa (hash: TzMFdxwnyUIL4oJ9MUVrNEjKX81ekLEZoq92hFxo3V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:54:49:04:86:ce:00:51:7f:b3:d6:c2:25:e4:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Sep 10 09:00:47 2026 GMT
Not After : Sep 11 09:00:47 2026 GMT
Subject: CN=918f9d1410ea460c2718f61daf96659c1369dc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e4:c1:1b:08:ca:e4:e4:ea:75:af:9d:cf:11:
f0:30:21:49:3b:90:ad:16:d7:71:70:6e:70:99:b9:
25:72:07:15:2a:b8:46:25:18:c8:76:e6:4a:3d:31:
19:bf:3a:31:4d:d5:7d:9f:d5:35:21:da:b4:94:37:
73:ef:f0:98:db:a3:38:6b:19:98:28:38:ac:8d:d1:
3e:01:69:5f:27:da:a1:36:bb:97:a8:1b:da:80:0f:
2a:3c:3a:5d:6b:d3:79:64:ca:7d:e8:53:97:44:26:
af:fa:66:06:79:b3:61:10:12:ec:19:26:22:fd:d6:
5d:bc:9d:cd:01:a2:da:4e:bb:23:55:d8:e0:33:04:
0f:3d:00:0e:c0:07:84:80:93:cd:64:2f:f7:ee:1f:
85:fa:30:e9:e9:95:06:02:4b:43:a5:92:c1:b7:1f:
44:f6:b6:de:ce:ec:18:3f:48:30:bc:ea:c9:7f:75:
35:30:c7:f5:7f:a1:d9:52:f9:c9:e3:8e:6b:0a:fd:
10:94:b0:61:30:97:e8:ef:ea:b3:42:84:07:84:f6:
4b:2e:6c:cc:f4:97:72:6c:28:75:52:fd:bc:fc:ee:
a6:31:d8:dd:e3:05:dc:a7:ac:fe:2d:12:5e:ad:55:
54:68:92:0b:b5:a9:a8:b3:f5:e6:5c:27:22:c3:94:
a8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:8F:9D:14:10:EA:46:0C:27:18:F6:1D:AF:96:65:9C:13:69:DC:3C
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:aa:ad:91:59:23:ce:82:8e:e7:41:07:d4:db:bc:65:3e:51:
44:c8:d4:6c:56:30:c6:bb:3f:28:9c:e7:0d:03:42:1a:27:b6:
f2:59:d7:4f:cb:0d:b7:ca:d4:98:51:53:21:ae:19:a0:cd:62:
7e:aa:4b:2e:3f:d3:fb:06:38:bd:4f:08:a7:c0:22:e4:b4:de:
8e:a0:ad:31:2f:94:98:8e:a0:7d:74:d7:46:27:41:aa:af:5d:
b2:1c:6a:6b:1c:97:20:29:86:2c:3d:c6:1f:ed:5a:40:48:a5:
9f:39:05:1d:61:40:5f:0b:1f:7d:5a:b5:c2:2e:0a:b4:d4:07:
3a:93:0f:31:d4:4e:8e:0f:6e:10:41:0e:77:f8:a4:f6:46:a8:
58:7b:de:f6:3d:50:04:d6:98:ac:40:fe:16:4f:63:06:c9:e7:
1d:4b:f6:24:10:d8:15:be:6e:52:65:7c:b4:8f:61:a5:b8:28:
72:36:52:02:0e:1b:4a:8d:68:e9:16:a5:30:15:af:e0:23:98:
9e:b8:10:f6:e1:05:84:ff:6c:12:bf:7e:99:e0:01:58:32:a3:
26:79:0d:a0:97:78:f7:e3:dc:f6:96:d8:71:e3:6f:d0:bf:47:
35:ad:3e:98:f1:29:48:12:9b:92:d8:98:98:cf:b7:54:31:96:
d2:78:c4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:10:21 2026 by rpki-client