Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: AJE/FTatgy+Jv8JvIRMi/Fqt1G/M4lYd0mzCHNYkVP0=
Subject key identifier: 9B:6D:6B:8D:5C:5D:EA:35:EA:DD:23:3F:C3:D5:81:CC:39:82:2D:06
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 01A0024AAE2E4DC0AD20F0B6F10AD9579B45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 0821
Signing time: Fri 14 Aug 2026 22:00:43 +0000
Manifest this update: Fri 14 Aug 2026 22:00:43 +0000
Manifest next update: Sat 15 Aug 2026 22:00:43 +0000
Files and hashes: 1: 1yTxuvJTgzp3vueVNPtMM4HSlnE.roa (hash: C3mQ9ASRyTlSwgnHvOngoGQirohvWMvEni68YFNubqo=)
2: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: mp7GloEFAFZYzB9te2kM27Qk7ZbuigZ5d4KbOxI1tis=)
3: xweu5qCO47VIbmMKNVD40EQTVOU.roa (hash: 2Ggr+oJ9NSlt1DGrtrpkA0zHBUc5XOHY+zg99GvfTiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:ae:2e:4d:c0:ad:20:f0:b6:f1:0a:d9:57:9b:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: Aug 14 22:00:43 2026 GMT
Not After : Aug 15 22:00:43 2026 GMT
Subject: CN=9b6d6b8d5c5dea35eadd233fc3d581cc39822d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:d3:9e:55:b1:c9:ed:eb:10:c9:2f:1f:0c:
ad:0c:bc:21:4e:d0:aa:3f:c8:d1:96:87:4e:11:64:
4c:fe:bd:da:03:a5:53:45:c3:d3:72:7b:12:58:c4:
6d:3b:75:a0:d7:f4:6b:bf:11:35:bf:9f:68:b8:6c:
0a:9f:49:d2:06:a9:b5:3b:13:60:39:f8:25:1b:e4:
8b:ab:4e:e6:16:4d:32:94:a5:e0:20:78:7d:7a:6c:
33:4c:b6:e7:0f:c9:62:23:a8:3b:70:fb:b2:a8:27:
94:28:52:35:4c:c0:2e:ef:01:d8:a7:09:12:d4:01:
68:92:99:f2:0d:6b:33:cd:70:0f:ca:08:4a:8b:fa:
c3:08:ab:8b:74:74:21:d2:c2:ad:31:ce:d7:c2:bb:
71:b0:e8:f4:5b:88:ff:af:b7:7c:c5:49:df:4c:4c:
fd:b9:d1:b8:2a:bb:b7:ba:5f:1a:63:74:f8:56:f3:
ab:eb:55:5c:57:19:8d:d9:f5:ed:52:2d:24:4e:9b:
9d:60:55:c3:a2:26:50:2a:09:13:f4:a1:61:7f:ec:
ab:d0:d5:e9:85:ba:26:53:30:0b:c5:8f:82:97:5e:
62:e4:95:eb:c9:e0:6a:d9:de:e3:28:c5:15:9c:a5:
3e:d6:d9:81:67:cb:d5:12:9d:3d:c7:e6:00:6c:d8:
ed:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:6D:6B:8D:5C:5D:EA:35:EA:DD:23:3F:C3:D5:81:CC:39:82:2D:06
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2c:43:0d:cb:d7:08:03:7b:3f:47:28:4c:19:b4:65:df:e6:
ac:ad:ac:7f:44:ee:20:d2:af:b7:07:20:28:28:eb:66:ef:a5:
10:7e:c8:0a:95:7a:10:ef:3b:0e:86:8f:f2:48:ef:61:b1:78:
e2:69:8d:ad:2b:fe:33:81:ae:a6:36:d3:93:e5:8e:91:33:27:
77:e9:21:c4:db:df:e9:f0:e2:86:74:a6:d0:a7:d9:8a:a5:3a:
52:c5:71:22:6f:6f:08:ce:70:7d:a0:58:9e:7d:95:36:7e:c1:
12:b3:5b:ef:c1:1c:3e:50:c1:48:a1:65:42:8a:9a:b4:1f:82:
73:eb:90:48:10:af:4d:58:8f:8f:a8:e3:45:36:46:45:b8:56:
f8:88:a4:10:38:a4:3a:88:f3:df:fb:c6:83:3d:3a:6d:a9:98:
15:0e:25:4d:0b:ca:4c:3e:32:01:12:e2:96:d3:a8:11:e2:7e:
05:69:c8:68:bb:00:7b:90:dc:8f:04:ae:18:10:5c:52:0c:5f:
e9:f7:98:c5:0c:d6:0e:38:6c:5c:9a:ce:0a:8b:4b:78:fd:9a:
7d:07:2c:0a:01:53:23:1d:ce:67:96:42:8d:43:57:d6:20:1d:
82:94:3c:f5:b8:3d:ca:82:aa:16:5e:01:92:a3:0f:c2:b7:55:
fd:b3:7a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:24:38 2026 by rpki-client