Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
File: XiZI8SkNRHG821C4K-TtkyADCU0.mft (raw, json)
Hash identifier: RxgCwbcrH5zjr33+A0eV7ojZTxu4/C9H91/EUUyweF4=
Subject key identifier: C5:B9:36:3A:E8:DE:89:54:AD:27:73:B3:E9:FA:0C:D7:66:83:46:24
Authority key identifier: 5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
Certificate issuer: /CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Certificate serial: 01A08BD63169B12F3E720E7A98A5C123B220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
Manifest number: 19DA
Signing time: Thu 10 Sep 2026 15:01:05 +0000
Manifest this update: Thu 10 Sep 2026 15:01:05 +0000
Manifest next update: Fri 11 Sep 2026 15:01:05 +0000
Files and hashes: 1: XiZI8SkNRHG821C4K-TtkyADCU0.crl (hash: 8yPgQ0cLvWm8/sTIUl9Z71u6sXbiOLEsp1WjBWeXBUw=)
2: sq8rzyi0UVog1iS5Ju1CZc-6dl0.roa (hash: hTNSZci/jvQbgI5g6zcbraZud5VHWLa8WEC2pVISMYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:31:69:b1:2f:3e:72:0e:7a:98:a5:c1:23:b2:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Validity
Not Before: Sep 10 15:01:05 2026 GMT
Not After : Sep 11 15:01:05 2026 GMT
Subject: CN=c5b9363ae8de8954ad2773b3e9fa0cd766834624
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:37:78:a7:0e:87:c7:10:f3:69:4b:83:b5:7f:
b0:6f:b5:37:60:08:44:87:6e:91:73:89:33:f9:67:
b1:ec:11:d3:88:36:bc:d8:ca:d9:0e:ce:f6:93:86:
04:5f:70:f9:61:34:4e:d4:ef:6a:98:76:93:cb:76:
f7:74:0a:87:54:98:55:aa:77:59:99:92:5f:8a:2f:
7c:d5:62:31:a1:e6:ab:16:ea:8e:6c:5f:94:98:04:
1d:eb:09:57:de:14:84:20:e0:aa:f3:05:60:17:f3:
ce:53:9a:26:ea:61:58:e1:8b:30:7d:5e:67:bc:f8:
15:b5:a6:bf:19:90:01:a8:dd:f0:28:04:8f:c0:96:
b8:32:db:f8:3d:58:ef:f1:4e:c5:a5:2b:7f:b9:ad:
c2:22:69:7c:de:73:cf:96:c8:4d:8d:8b:94:f7:b2:
6b:a8:15:f2:bc:24:2e:eb:82:1f:3e:07:8a:73:8f:
a4:5f:8b:dc:e9:b0:4b:ee:c0:21:6d:2a:3a:4e:fb:
63:78:fb:3c:7c:a4:86:81:ed:8c:51:0f:06:eb:49:
b2:44:ae:5e:71:94:f8:11:6a:9f:ad:31:d8:46:bf:
06:3e:05:66:b6:9c:f9:d3:aa:2f:5a:05:d4:93:ce:
fa:c0:65:c4:35:5a:f9:f7:76:47:48:13:35:c7:56:
48:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:B9:36:3A:E8:DE:89:54:AD:27:73:B3:E9:FA:0C:D7:66:83:46:24
X509v3 Authority Key Identifier:
keyid:5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:db:ba:ec:02:68:47:29:e6:5d:7d:e7:3f:22:ad:4b:19:79:
bb:3a:39:d1:38:57:41:c6:fd:e4:fb:c7:f7:00:e3:85:a3:52:
7e:05:7f:ec:75:48:ac:90:01:36:16:e3:b2:38:c0:64:93:bc:
7e:88:66:ef:aa:19:0f:7a:56:cf:35:ba:99:49:7f:89:40:77:
82:46:3a:9a:b8:d9:d1:53:2c:64:f5:44:cc:6e:af:a8:69:23:
6d:2b:76:42:40:2d:6d:9f:15:a4:9d:85:94:82:80:a7:bd:d3:
6a:5f:63:8c:ff:b7:29:8f:38:56:71:40:65:55:e2:e4:91:ba:
4e:06:9f:7a:da:40:6d:d6:8d:f3:21:c4:c1:3f:19:90:69:c6:
09:71:4d:20:c0:97:32:3a:72:6f:5c:fc:e6:5e:14:08:32:a4:
3e:00:04:f7:48:ad:f7:96:20:ba:00:b4:55:28:60:79:31:bd:
a9:fd:ce:02:74:84:d7:d1:81:28:ed:13:48:07:2f:0d:30:b3:
61:f3:e2:68:56:ff:19:e4:04:de:0b:47:12:c5:88:f6:8f:09:
af:71:13:53:cb:3c:9e:ff:ad:6b:f7:1e:0b:7d:93:e7:4f:07:
ef:2a:af:2d:34:07:6e:40:01:44:00:bc:b6:f0:35:12:36:3f:
b3:3b:f1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:58:07 2026 by rpki-client