Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: BETmlisXf/+6a3o5NV6xuZuyZGzho1Lvj6molvP5O68=
Subject key identifier: 8F:1B:3B:4E:9B:AF:DE:9D:56:FF:47:FD:E2:44:DC:72:9C:30:60:D7
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 01A08CB1D5112A1E0271C43286B6F69D39FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 112A
Signing time: Thu 10 Sep 2026 19:00:59 +0000
Manifest this update: Thu 10 Sep 2026 19:00:59 +0000
Manifest next update: Fri 11 Sep 2026 19:00:59 +0000
Files and hashes: 1: 1-nsaGOYJDQs8nE83JBsjbwYRoPA.roa (hash: ZorqeuTKQ8BzMES+IbO5PhiAMx62C25+2z4OV8xpzBs=)
2: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: 91rYpZDIMyRjrqh5/1CARQVgU64jaDFljxAxNWWTHQ4=)
3: fYv6u6ZqsaaVuf2RxvvaolhNBjk.roa (hash: jVk92j+q/o1dRJaAKw+eFCSe6j9s2E6quPaItwZl0/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:d5:11:2a:1e:02:71:c4:32:86:b6:f6:9d:39:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Sep 10 19:00:59 2026 GMT
Not After : Sep 11 19:00:59 2026 GMT
Subject: CN=8f1b3b4e9bafde9d56ff47fde244dc729c3060d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2e:f9:93:ac:70:60:fc:1d:1a:0a:6d:71:55:
18:42:7b:b7:ef:9e:c9:47:c0:bd:54:cc:d2:31:b2:
22:1c:c7:88:22:c4:24:65:32:2e:81:3e:a2:b9:2d:
a5:56:8f:f1:0a:4b:3e:51:0a:88:6e:61:67:ce:02:
12:00:f8:33:68:43:00:e7:a6:65:27:1e:3e:c5:ad:
80:92:b3:54:4f:4a:65:59:90:2b:ef:44:47:21:7a:
9f:0d:24:11:36:3b:2e:14:ed:51:eb:ed:32:14:7c:
06:c5:06:2b:62:a7:b1:ec:2c:4d:7a:88:2d:79:3f:
56:6d:2c:e2:60:93:63:9d:02:bd:9e:17:77:c5:ff:
48:93:f6:c8:7b:91:34:be:79:27:4c:ca:a6:c1:40:
bb:84:23:70:8c:4a:b7:7d:40:10:d3:29:d7:12:2a:
97:44:c4:d5:25:88:f5:9a:34:48:6b:a7:99:89:d1:
91:34:c4:90:c6:49:40:02:c4:9a:a0:47:e8:15:24:
3b:78:f8:59:4e:2f:77:ee:b2:d1:ce:ba:31:ab:00:
52:29:72:fe:6a:f6:97:8d:9d:95:63:31:8d:06:a1:
76:da:af:69:52:9d:de:45:8b:de:30:f7:f7:fa:d0:
50:ae:84:8c:48:1d:3e:14:97:49:40:40:bc:fd:6f:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:1B:3B:4E:9B:AF:DE:9D:56:FF:47:FD:E2:44:DC:72:9C:30:60:D7
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:fd:f0:8b:29:7a:b1:ff:22:dd:58:fe:57:a7:83:a9:ef:0f:
96:60:f8:ee:8d:a0:5b:35:74:14:9b:ee:80:09:33:bc:52:ea:
5f:f9:70:f3:58:40:4f:b8:e1:45:68:b7:ff:0d:10:4b:f4:ff:
9a:5f:48:24:cb:a0:06:be:d1:5a:9b:55:9d:0f:cd:c9:b7:04:
ba:d6:32:0e:20:86:fc:0e:f3:01:94:8d:dd:f8:64:1e:59:d0:
dd:b5:1a:ca:f2:bd:4c:2b:81:95:96:86:d8:4a:6d:1b:39:4f:
56:ad:ed:16:c4:b8:3a:f9:ce:00:7b:a6:43:ad:38:46:66:01:
90:ad:26:98:5d:10:cd:7d:97:13:f3:a4:2a:6f:cc:f9:96:da:
58:64:4f:fe:43:d3:be:00:24:9d:0c:63:a0:68:b4:16:5b:df:
e9:7c:5c:6b:de:9a:73:cc:16:70:0e:9f:a1:8f:ca:3d:dc:68:
09:f5:5e:96:9c:7b:63:01:6b:3e:00:8b:c1:9f:68:d5:02:c1:
ba:ea:06:8c:1d:0e:ba:35:33:f0:42:1c:f3:c2:95:29:16:a2:
b5:39:e7:6e:0d:fa:30:c9:8b:a9:6d:c7:8b:24:f4:48:1b:ae:
a1:93:a0:bd:c9:a0:c2:18:07:41:ac:b8:e5:62:31:99:ac:ab:
25:4d:a9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:07:23 2026 by rpki-client