Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
File: Xff7OeIB66Y00CA8TyjeWuB5Wog.mft (raw, json)
Hash identifier: SU4jOn++GX2CClOPuZ+64yIoNvY9y147Yma0cUfw+X8=
Subject key identifier: BD:26:84:30:FF:27:C8:D4:7A:F2:12:49:6F:A1:B8:88:45:99:DB:EF
Authority key identifier: 5D:F7:FB:39:E2:01:EB:A6:34:D0:20:3C:4F:28:DE:5A:E0:79:5A:88
Certificate issuer: /CN=5df7fb39e201eba634d0203c4f28de5ae0795a88
Certificate serial: 01A0897A39DF76C3C02AB9DB1CE8B57F84F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
Manifest number: A6
Signing time: Thu 10 Sep 2026 04:01:23 +0000
Manifest this update: Thu 10 Sep 2026 04:01:23 +0000
Manifest next update: Fri 11 Sep 2026 04:01:23 +0000
Files and hashes: 1: VcA3UckODLoz1S7R5MoctsVXluU.roa (hash: RqMqQLgcmTKOOjU1HEo17gZOBmti+5lxR7MDDBpd4a8=)
2: Xff7OeIB66Y00CA8TyjeWuB5Wog.crl (hash: ouSuFPi90e+yyo1NH677fivFDnOZrc4FktWSzcbjEbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 04:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:7a:39:df:76:c3:c0:2a:b9:db:1c:e8:b5:7f:84:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df7fb39e201eba634d0203c4f28de5ae0795a88
Validity
Not Before: Sep 10 04:01:23 2026 GMT
Not After : Sep 11 04:01:23 2026 GMT
Subject: CN=bd268430ff27c8d47af212496fa1b8884599dbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:18:91:dd:11:67:35:ee:ad:25:27:f2:c6:60:
a9:6b:96:ad:74:f2:8b:0d:14:46:c9:42:a5:ac:2a:
c5:e8:ed:f6:53:e3:5f:25:68:59:ec:43:7c:80:0a:
3d:ce:39:5d:c3:a4:b9:48:61:71:ee:f3:60:a5:21:
05:d9:7a:15:6f:30:5f:6a:57:e1:25:73:06:5d:21:
7e:fc:48:4e:f8:36:1d:e6:30:56:3a:3c:12:27:9a:
79:90:68:d5:20:09:6c:48:41:62:d3:18:c3:bc:a9:
31:c3:3e:92:b4:09:4b:d0:9b:d4:78:c7:47:6a:82:
63:9b:94:4d:11:e1:9a:f9:e8:c1:b2:7b:98:3a:30:
c2:16:ed:dd:d9:3e:51:ea:cc:08:4c:15:69:7b:46:
a2:e8:8a:f3:d8:5a:1b:1d:ad:47:f5:28:14:d4:00:
b6:16:59:70:f2:ff:5a:fa:ab:a0:2a:d3:7a:5a:34:
f0:bd:ae:e5:2d:a5:7a:b5:a2:f1:16:63:73:30:be:
e4:7e:b4:80:06:91:1e:38:1f:1c:23:47:05:81:dd:
e4:82:01:ae:a6:06:de:19:ef:c8:20:6d:5c:f4:6e:
86:37:df:00:18:2e:1d:2d:c4:e1:4d:6d:b5:13:4d:
d4:8d:54:e8:17:16:c4:8a:bd:16:e8:34:d1:85:ac:
a5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:26:84:30:FF:27:C8:D4:7A:F2:12:49:6F:A1:B8:88:45:99:DB:EF
X509v3 Authority Key Identifier:
keyid:5D:F7:FB:39:E2:01:EB:A6:34:D0:20:3C:4F:28:DE:5A:E0:79:5A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xff7OeIB66Y00CA8TyjeWuB5Wog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f4de90-a312-47c2-a28b-3eb5f06b9717/1/Xff7OeIB66Y00CA8TyjeWuB5Wog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6f:7d:c9:99:5e:a9:d2:8b:9c:4c:f7:10:de:b8:a6:17:bb:
5a:ba:c1:17:9d:b5:6a:0a:1b:13:b8:79:9d:37:83:93:ca:6b:
03:7d:e4:8f:47:fe:5d:8c:34:81:07:03:31:95:d2:fe:2c:f1:
d9:5c:1b:a9:b5:c3:2a:5b:ac:56:ac:d9:a2:f2:be:82:86:66:
58:d4:a4:c9:4f:99:84:80:08:7c:52:3a:cb:2d:92:52:52:bd:
34:f2:ec:38:0e:f2:a7:3c:eb:80:ea:e7:e7:d2:ff:51:56:6a:
4a:57:f3:ed:cc:f4:47:fd:90:11:37:8b:9e:44:f0:d1:73:eb:
18:02:6d:70:57:5e:72:e3:a1:f3:23:73:65:cb:72:ae:bd:eb:
1f:2c:fa:69:f2:43:f6:aa:b0:c8:14:d0:2a:a9:12:33:b6:d0:
19:18:a3:cc:a1:27:0a:d8:f2:a0:e4:ec:26:a0:94:b4:b5:73:
73:93:0a:85:5b:2e:5c:ee:ac:1a:20:fe:b1:2a:65:0d:ae:ca:
22:d0:46:e6:36:13:1a:ee:82:86:25:14:cd:bd:65:79:bb:a2:
69:17:51:3d:cc:56:b3:a8:3a:38:6b:3c:f6:3f:f0:3a:2e:be:
4c:9f:a9:7a:eb:c0:aa:7e:71:80:7a:8a:10:34:e0:de:f8:68:
7f:d5:5c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:33:02 2026 by rpki-client