Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
File: XGGrSm35u5XP3orwdmaKWVs0HeE.mft (raw, json)
Hash identifier: KxJyoJvlbrMpUbgM2q/Mr2Bb1YDaJzDmzgYReA0LdYU=
Subject key identifier: D9:EA:37:98:67:22:7A:9C:CB:F5:CF:DF:45:E7:FB:54:69:56:0F:45
Authority key identifier: 5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
Certificate issuer: /CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Certificate serial: 01A08EA05F57675BF77EEC0AD4D9F2FF3A12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
Manifest number: 0731
Signing time: Fri 11 Sep 2026 04:01:09 +0000
Manifest this update: Fri 11 Sep 2026 04:01:09 +0000
Manifest next update: Sat 12 Sep 2026 04:01:09 +0000
Files and hashes: 1: XGGrSm35u5XP3orwdmaKWVs0HeE.crl (hash: assBnh4Lm08jxrsM+jyt6KUxp4kmbJtqrn6ILnMwH/E=)
2: d9ad6eSfGOCAtJCyfx5T80LXc84.roa (hash: l8TnxH7nYsbi9OkxC5kgX4fiX1lQ108inFjyeEj/BH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:a0:5f:57:67:5b:f7:7e:ec:0a:d4:d9:f2:ff:3a:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c61ab4a6df9bb95cfde8af076668a595b341de1
Validity
Not Before: Sep 11 04:01:09 2026 GMT
Not After : Sep 12 04:01:09 2026 GMT
Subject: CN=d9ea379867227a9ccbf5cfdf45e7fb5469560f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:db:c6:41:9d:c0:7d:e3:af:f7:35:ce:59:bb:
00:4a:2c:35:6e:5f:a4:56:3c:41:bf:9a:31:63:16:
01:a2:1c:e5:7a:b8:f2:fe:2d:fa:da:bd:af:fd:5f:
5c:f1:6e:fc:6f:e5:66:41:20:f0:bd:38:f9:8a:a5:
fe:30:fd:01:3d:8d:0d:8a:52:2c:60:e8:3b:80:0c:
e3:66:0d:cc:05:22:45:61:e7:a2:aa:21:88:e9:ab:
14:4e:0e:d9:5f:f0:dc:6d:39:94:e5:81:fd:73:4d:
d3:29:4c:96:ac:92:cb:87:63:f0:b1:e1:76:9a:9d:
0d:1d:5d:d3:e4:e5:02:90:ea:cb:b3:2d:6c:ab:ab:
90:90:95:84:ca:d3:13:a9:7f:50:db:7b:ca:06:9c:
75:eb:75:f8:ec:61:51:65:93:d7:54:8b:45:32:7d:
a7:d2:ad:70:e2:50:33:71:22:7f:f5:03:fc:1a:e2:
ad:20:be:25:b9:3a:a0:ea:b5:15:6a:af:ef:60:89:
f8:b7:3c:f6:ae:ee:85:11:96:c9:3f:61:a9:68:3f:
bd:93:f6:17:9e:cd:4c:3b:33:a8:e7:08:bb:0a:09:
66:23:cc:84:06:41:b0:e6:ef:d9:78:7d:9f:f1:31:
42:a3:df:8a:5e:34:01:bb:a0:f9:a8:b7:7b:25:80:
18:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:EA:37:98:67:22:7A:9C:CB:F5:CF:DF:45:E7:FB:54:69:56:0F:45
X509v3 Authority Key Identifier:
keyid:5C:61:AB:4A:6D:F9:BB:95:CF:DE:8A:F0:76:66:8A:59:5B:34:1D:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGGrSm35u5XP3orwdmaKWVs0HeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/fd5a98-272f-4078-948d-6fa868921dfb/1/XGGrSm35u5XP3orwdmaKWVs0HeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:81:8a:6a:55:ac:6e:f7:30:fc:a5:86:ec:f9:b8:66:32:58:
20:5e:41:f1:35:24:c7:32:8b:72:5e:db:a6:13:9c:ce:31:bc:
fd:96:11:de:89:5b:58:8c:f8:53:04:a7:21:72:b4:d1:d8:b3:
8d:bb:ff:40:d7:c1:af:d8:6d:3d:92:b5:52:c6:a8:57:70:4d:
ce:a4:0f:ea:89:68:9f:89:d8:8b:1d:63:ef:83:1c:95:52:8e:
0d:1b:58:91:ff:be:3f:65:35:38:fa:53:f8:89:fb:a8:3e:6c:
4c:0f:59:9f:fc:2c:33:6f:64:8f:41:21:b8:74:15:5f:ea:82:
39:1e:6b:15:f4:71:ae:a4:d7:55:f0:a9:04:52:2c:38:db:5a:
e6:89:da:a0:da:83:8c:45:59:8e:81:f4:2d:9d:60:dd:a8:c4:
f0:c4:cf:26:05:85:42:a4:48:a8:d3:da:11:9b:76:c3:33:f8:
a2:ab:32:e5:e6:a7:d3:2c:30:23:8f:13:34:01:a0:d3:2e:46:
2d:d4:5e:be:e0:7d:f6:ae:49:db:09:78:62:03:8a:cc:b2:5a:
38:ec:54:21:02:57:5f:7b:dd:f2:e0:d0:3c:f9:25:41:52:d7:
70:a3:52:83:20:e5:39:b1:a0:4e:87:5d:a2:4d:47:4d:9e:49:
db:b4:95:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCOoF9XZ1v3fuwK1Nny/zoSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjFhYjRhNmRmOWJiOTVjZmRlOGFmMDc2NjY4YTU5NWIz
NDFkZTEwHhcNMjYwOTExMDQwMTA5WhcNMjYwOTEyMDQwMTA5WjAzMTEwLwYDVQQD
EyhkOWVhMzc5ODY3MjI3YTljY2JmNWNmZGY0NWU3ZmI1NDY5NTYwZjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9vGQZ3AfeOv9zXOWbsASiw1bl+k
VjxBv5oxYxYBohzlerjy/i362r2v/V9c8W78b+VmQSDwvTj5iqX+MP0BPY0NilIs
YOg7gAzjZg3MBSJFYeeiqiGI6asUTg7ZX/DcbTmU5YH9c03TKUyWrJLLh2PwseF2
mp0NHV3T5OUCkOrLsy1sq6uQkJWEytMTqX9Q23vKBpx163X47GFRZZPXVItFMn2n
0q1w4lAzcSJ/9QP8GuKtIL4luTqg6rUVaq/vYIn4tzz2ru6FEZbJP2GpaD+9k/YX
ns1MOzOo5wi7CglmI8yEBkGw5u/ZeH2f8TFCo9+KXjQBu6D5qLd7JYAYzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNnqN5hnInqcy/XP30Xn+1RpVg9FMB8GA1UdIwQY
MBaAFFxhq0pt+buVz96K8HZmillbNB3hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdHclNtMzV1NVhQM29yd2RtYUtXVnMwSGVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9mZDVhOTgtMjcyZi00MDc4LTk0OGQt
NmZhODY4OTIxZGZiLzEvWEdHclNtMzV1NVhQM29yd2RtYUtXVnMwSGVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9mZDVhOTgtMjcyZi00MDc4LTk0OGQtNmZhODY4OTIxZGZi
LzEvWEdHclNtMzV1NVhQM29yd2RtYUtXVnMwSGVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoGKalWs
bvcw/KWG7Pm4ZjJYIF5B8TUkxzKLcl7bphOczjG8/ZYR3olbWIz4UwSnIXK00diz
jbv/QNfBr9htPZK1UsaoV3BNzqQP6olon4nYix1j74MclVKODRtYkf++P2U1OPpT
+In7qD5sTA9Zn/wsM29kj0EhuHQVX+qCOR5rFfRxrqTXVfCpBFIsONta5onaoNqD
jEVZjoH0LZ1g3ajE8MTPJgWFQqRIqNPaEZt2wzP4oqsy5ean0ywwI48TNAGg0y5G
LdRevuB99q5J2wl4YgOKzLJaOOxUIQJXX3vd8uDQPPklQVLXcKNSgyDlObGgTodd
ok1HTZ5J27SV6g==
-----END CERTIFICATE-----
Generated at Fri Sep 11 10:38:02 2026 by rpki-client