Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: CXm6VRI0AjbwFqzXB0NADHdJMWldzTPH0JuIwZKzzv4=
Subject key identifier: 6D:9E:9F:1C:7E:1A:FE:0B:10:BD:AA:82:0B:F2:99:69:08:46:E0:32
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 01A08E31E57682BA2B888B696998D9DB0548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 1A4F
Signing time: Fri 11 Sep 2026 02:00:29 +0000
Manifest this update: Fri 11 Sep 2026 02:00:29 +0000
Manifest next update: Sat 12 Sep 2026 02:00:29 +0000
Files and hashes: 1: BVjAALpJvxuQy2GyePspuTkr6KE.roa (hash: n2Oqqyn+P3DE0EdI3BsAkGnYPcIXpRm9D9/3qqS3Klw=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: oZjqg4WyIyDT/DD53AAFEF+g59oAK1fy8ilcEsVfQo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:31:e5:76:82:ba:2b:88:8b:69:69:98:d9:db:05:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Sep 11 02:00:29 2026 GMT
Not After : Sep 12 02:00:29 2026 GMT
Subject: CN=6d9e9f1c7e1afe0b10bdaa820bf299690846e032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9e:dd:61:ce:a1:e2:28:c7:32:fc:e5:e5:76:
5a:92:f0:50:38:f9:e4:09:f5:c3:0e:14:ec:b2:aa:
74:c3:14:04:ac:c2:aa:16:7e:28:ad:64:af:29:13:
a9:cb:4a:71:91:f3:84:d7:5c:66:28:5e:9c:74:e0:
f7:40:9a:a9:62:47:2b:1e:e8:34:50:8e:8c:1c:e4:
8f:a4:80:90:3b:bc:5f:18:57:e6:a7:e5:2b:a2:9c:
85:11:60:c7:c0:19:32:a6:ee:18:a6:f3:d0:99:90:
75:f0:2c:bc:c6:fa:cb:36:50:df:3b:17:d9:98:8a:
5c:00:74:a0:8b:51:05:d0:b3:df:dd:05:a6:8b:c1:
ea:6b:0b:e0:47:04:37:68:6a:f6:68:a3:7e:50:57:
13:f5:7f:2f:e8:9a:be:4c:ad:3f:77:37:59:2f:a6:
76:a6:38:77:88:e8:67:df:05:12:8b:49:be:2b:bf:
de:c4:eb:72:c7:34:31:39:f7:23:76:d9:c1:c2:52:
92:77:f0:10:5f:d5:07:86:44:df:4b:04:b5:aa:b5:
bf:7a:5d:17:b2:f7:4d:00:dd:71:fc:d4:de:4b:ed:
df:10:99:b4:2d:69:32:b8:a2:b9:32:19:f9:03:b9:
2a:6b:29:64:c9:74:8a:e1:95:8f:b0:f8:6d:17:d0:
8e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:9E:9F:1C:7E:1A:FE:0B:10:BD:AA:82:0B:F2:99:69:08:46:E0:32
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b5:92:63:db:86:b0:18:65:29:e2:f9:cc:69:1e:2c:f0:6d:
fb:60:a1:88:4c:48:3b:e6:53:cf:a3:de:fb:0d:2a:36:36:ea:
60:21:a6:1c:3f:24:e6:56:ae:65:ca:2b:84:05:ff:1a:af:3a:
68:f7:f3:e0:1f:8f:4f:e4:76:5f:fc:59:67:5a:f4:c1:67:0d:
62:bb:00:0a:b4:cb:67:74:cb:2e:cc:90:78:2f:c7:01:cb:07:
68:b8:1b:63:88:e1:9d:44:f9:b5:f3:22:7b:38:0e:4e:28:dc:
bc:03:01:8b:21:51:69:92:5c:ba:e8:23:01:22:bf:4b:0f:5f:
d6:c8:81:b9:a8:4c:bb:ef:9d:90:dc:b8:b5:6b:5b:bf:f6:38:
75:0a:6c:6d:5e:ac:86:7d:df:c8:46:fd:d2:cf:a2:44:ce:73:
7e:b6:08:43:73:ef:0c:74:b4:a8:20:53:cf:bb:ab:a8:83:f8:
1f:43:a8:c2:21:e5:0d:1f:3a:02:d6:41:14:1e:41:27:df:64:
31:b3:dd:fd:5c:a1:b9:72:16:90:fa:bb:db:cf:79:ae:97:9f:
5c:ac:2e:20:b9:ba:8e:82:c2:2e:41:5b:0d:12:6d:9c:0b:8a:
55:33:a4:92:e1:2c:b9:28:62:d3:54:a0:59:b2:3b:b2:bf:02:
ae:20:4a:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:51:05 2026 by rpki-client