Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
File: XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json)
Hash identifier: Y4+jhWyZnb0WLUPTnGhFHLiRzLZKVb3ku+I7dwrETc0=
Subject key identifier: 50:95:2A:B2:E5:DE:C3:FA:AA:65:51:FC:F6:62:13:61:DC:E1:2C:FD
Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
Certificate issuer: /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Certificate serial: 01A08B68ABDC872D2112C868BB7B62F1911A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
Manifest number: 0373
Signing time: Thu 10 Sep 2026 13:01:27 +0000
Manifest this update: Thu 10 Sep 2026 13:01:27 +0000
Manifest next update: Fri 11 Sep 2026 13:01:27 +0000
Files and hashes: 1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: AZlFit0PYVX2H8Mhzoeigf2dh8oguNxk6K/OJ8IWxCA=)
2: _a7gNZLlQxgHn1SWkyljxM4Vp8E.roa (hash: riqb9ZgtO6K145lOcaQYpYRovN3sqPG5Tn86hViYkIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:ab:dc:87:2d:21:12:c8:68:bb:7b:62:f1:91:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Validity
Not Before: Sep 10 13:01:27 2026 GMT
Not After : Sep 11 13:01:27 2026 GMT
Subject: CN=50952ab2e5dec3faaa6551fcf6621361dce12cfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4b:b4:e8:44:06:d0:7c:76:1c:74:9c:1e:76:
27:85:04:0d:ab:ad:a1:e3:81:cd:e6:05:75:72:ca:
cc:a0:7e:e7:34:7e:a7:e6:31:fb:73:07:1a:4b:6b:
e0:3c:4d:fa:6a:41:11:9b:45:68:30:be:19:6b:f6:
75:9d:27:84:d8:c6:eb:08:14:fe:42:ca:86:fc:1c:
e4:c0:6b:58:ae:3f:c9:6e:2c:4d:79:1a:de:4e:9a:
56:5b:5c:4c:e7:34:1f:28:36:01:7e:53:fb:01:b3:
5e:02:c2:36:d1:8b:ba:59:e7:97:63:e8:03:10:27:
0c:ba:2a:18:79:23:77:cf:d4:7f:4e:0a:8c:80:c1:
3a:0b:9e:9d:f9:1b:38:33:74:21:66:39:4e:03:00:
04:ae:20:a6:e5:ca:1e:7a:46:4a:0d:3b:c2:81:6b:
df:ee:32:e6:74:94:28:dd:0b:e4:15:25:a0:a0:1e:
92:68:04:88:29:ca:df:07:92:2c:b4:1c:0b:e5:85:
34:4a:b7:87:2f:58:7a:f3:2d:16:31:72:6f:63:c5:
1a:26:6e:b3:5f:cb:42:9d:5c:7f:59:b4:e5:61:3a:
67:a7:77:68:32:ec:dc:8d:66:e1:47:01:3e:2b:52:
26:a0:91:09:e5:8c:63:ac:bb:ff:33:5c:d6:88:90:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:95:2A:B2:E5:DE:C3:FA:AA:65:51:FC:F6:62:13:61:DC:E1:2C:FD
X509v3 Authority Key Identifier:
keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d4:03:4a:fc:5f:33:3f:21:04:af:da:e3:2a:9e:ef:f8:ed:
c0:a5:78:5e:eb:d1:06:cd:a4:10:2e:44:f8:c4:a5:86:a1:34:
ce:55:64:06:6a:61:96:a4:d5:32:cb:8e:84:65:42:9d:34:36:
c9:e0:75:aa:7e:42:ee:c5:b1:5e:42:ae:1c:8d:82:49:7c:af:
f5:61:96:59:93:17:02:bd:4a:9c:23:05:d9:3d:19:59:62:59:
bc:a9:f9:46:af:c9:9e:23:02:6b:ed:1a:35:cf:e7:fc:10:fa:
ea:4f:12:c1:f4:51:cb:d3:2f:63:52:86:b4:80:95:14:ce:89:
97:32:81:40:e4:5f:4a:ec:5a:eb:bf:70:03:85:72:4e:4b:f9:
7e:2e:38:ae:23:22:92:67:03:1b:c8:25:a2:f3:36:e6:c5:e0:
6f:32:f9:87:90:ec:5f:98:0f:5e:57:5b:1b:54:94:dc:0a:d2:
da:c4:f5:a2:99:03:79:96:a2:ae:d4:59:2a:43:46:ec:99:49:
23:8b:57:ca:10:e0:a7:c5:4e:90:7a:29:9b:71:be:4c:c9:0e:
d6:b9:4f:31:1c:ae:4a:51:97:ce:37:82:ce:e5:55:8e:fb:74:
77:1f:db:3c:c8:b4:11:59:dc:04:ea:d5:b6:d9:2e:85:07:22:
a9:dc:ca:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:55:36 2026 by rpki-client