Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
File: Xhd799BDVEHRrbFIoizv4dbcwPs.mft (raw, json)
Hash identifier: SvEIN8nM0v6zUBdBp7U4QZnsPTTYEXh+U21G5jBaqkk=
Subject key identifier: 22:8F:34:00:A9:34:20:06:7A:20:CE:B5:B6:4F:21:FF:2E:E8:65:23
Authority key identifier: 5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
Certificate issuer: /CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Certificate serial: 01A0E475536464E82F5E35571C49FAD94491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
Manifest number: 01A8
Signing time: Sun 27 Sep 2026 20:01:29 +0000
Manifest this update: Sun 27 Sep 2026 20:01:29 +0000
Manifest next update: Mon 28 Sep 2026 20:01:29 +0000
Files and hashes: 1: TYV20I1tmXmrFyD5hD9FE4IPKWU.roa (hash: cuvSEP8hQjrQh4a+NJD6WQS8i4OZ31Rtmx8MtCDraCQ=)
2: Xhd799BDVEHRrbFIoizv4dbcwPs.crl (hash: tJX4rm5nhM3TZgBvdSMxWnNo/JSOduVv9mxhWcCKo8E=)
3: s8rf2tML831KhZ_f-0fAXEJkgew.asa (hash: vKjVcHxuUGRJ3DxPFJJe7VWqTLEgv9kq3d3TeM8pLOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:75:53:64:64:e8:2f:5e:35:57:1c:49:fa:d9:44:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Validity
Not Before: Sep 27 20:01:29 2026 GMT
Not After : Sep 28 20:01:29 2026 GMT
Subject: CN=228f3400a93420067a20ceb5b64f21ff2ee86523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:77:74:c8:a1:9c:1f:e8:05:51:48:5b:52:
2f:b3:a3:7c:e5:c2:27:2f:42:fd:37:5f:fd:f5:e2:
1a:21:4d:18:aa:40:37:d8:8f:3f:c5:99:7a:14:46:
47:00:15:66:f2:61:6a:25:db:ce:fd:6f:cc:64:27:
63:99:86:1b:96:33:10:c5:1d:99:6c:a6:d5:77:00:
9d:a9:4c:39:e8:2b:bd:25:a2:ce:b3:6f:8f:de:42:
6a:a7:a4:54:8d:0c:c0:e2:02:9e:b1:a1:72:c8:63:
4d:68:47:49:47:c8:01:f6:d3:ab:de:30:1d:01:e0:
5d:74:32:41:b1:ac:05:66:c9:ce:f7:c0:6d:79:3c:
e5:4b:bb:b7:82:30:92:b2:78:6d:09:54:83:3d:fc:
ad:c6:9a:06:f1:ad:37:a7:c5:61:cd:d8:11:c9:45:
ef:aa:69:a1:f3:cb:f3:c4:a0:11:59:70:78:3e:f7:
8a:b7:aa:f6:46:ab:19:f7:c0:da:c5:d1:ce:11:c3:
22:53:e7:36:e3:1e:fc:ab:82:4a:9d:3a:d0:b9:4f:
f2:81:67:29:1a:5b:f6:1f:e4:23:e0:32:fc:57:5e:
f7:46:3f:07:f4:6d:55:10:c8:25:2e:74:39:55:a1:
6e:48:98:ca:bf:c0:8d:ab:c6:4d:4e:e5:63:16:f5:
10:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8F:34:00:A9:34:20:06:7A:20:CE:B5:B6:4F:21:FF:2E:E8:65:23
X509v3 Authority Key Identifier:
keyid:5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c1:39:ba:07:bf:b6:9f:d3:de:64:e2:18:dd:4c:d1:2d:54:
27:6e:5f:0c:3d:b9:f5:2a:f2:10:a0:b9:48:d9:8e:f8:98:26:
ed:4b:e6:ae:e4:5f:0c:8d:26:2e:cb:a1:30:2a:74:30:97:3f:
86:49:c6:5b:39:db:1d:16:25:0f:36:bd:d8:22:b3:cd:a0:60:
16:c4:5f:58:ed:04:53:eb:7d:39:99:ce:cb:b6:a0:00:ce:7d:
b7:9b:09:97:fa:09:64:9f:c3:8e:8f:05:c6:69:c5:fc:61:f4:
ca:99:84:38:d0:a1:cb:e6:67:3a:d0:11:c6:9c:b1:a3:f9:6e:
fd:94:2d:67:02:54:6b:8b:b8:e7:75:15:7b:3a:55:74:ad:05:
5f:f8:74:4c:d0:18:40:92:d8:b7:a2:f9:b4:ab:d3:14:57:27:
72:4f:5a:23:8b:cf:2e:1d:9a:00:ba:18:f2:75:37:02:1e:ac:
64:d5:33:84:e5:74:67:35:2a:5b:d0:f8:2a:d8:43:33:a9:fa:
77:80:9c:fd:11:43:65:12:aa:8f:4c:41:f2:f1:50:39:43:88:
d9:10:92:b7:f3:37:c1:72:56:d6:c7:97:3c:12:0a:fd:11:53:
81:ef:70:cb:1d:67:e0:0a:3a:62:b9:99:1c:07:e6:02:32:30:
11:b4:5a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 03:56:35 2026 by rpki-client