Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
File: XaewUFU8jungWrTDf9l9KCEha0E.mft (raw, json)
Hash identifier: //goectpbLTbqCx3Swn4z+zrlI8EA1xwSVt+0eeeZTM=
Subject key identifier: D7:8D:9A:30:42:3A:BD:25:9A:79:5B:5A:87:4F:90:AA:FC:20:25:88
Authority key identifier: 5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
Certificate issuer: /CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Certificate serial: 01A08A55806A3B4BE9BEECEB4010C600F78A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 08:00:54 +0000
Manifest this update: Thu 10 Sep 2026 08:00:54 +0000
Manifest next update: Fri 11 Sep 2026 08:00:54 +0000
Files and hashes: 1: XaewUFU8jungWrTDf9l9KCEha0E.crl (hash: prKiUxVD8dUPoLx7ScL6l+Gx+aPkQNaF3F/QUkWt9C0=)
2: b_miJDSe2X7LNQkUXBeBnfQ9NzY.roa (hash: 4d/0HZTRX3AwdeZwWVGFlksAKBE1o2Mvc3JLliWqra8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:80:6a:3b:4b:e9:be:ec:eb:40:10:c6:00:f7:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da7b050553c8ee9e05ab4c37fd97d2821216b41
Validity
Not Before: Sep 10 08:00:54 2026 GMT
Not After : Sep 11 08:00:54 2026 GMT
Subject: CN=d78d9a30423abd259a795b5a874f90aafc202588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7f:ed:d1:8b:dd:3d:ce:39:46:8d:da:09:db:
2b:2d:85:ed:84:37:ab:fe:6c:50:60:41:e2:ea:ae:
aa:53:3c:83:25:92:7b:a8:99:bc:04:00:13:30:f3:
8b:f2:ae:e4:69:5d:94:55:29:ea:18:09:27:f0:1b:
3a:3d:fd:08:10:ae:ce:06:2c:b5:f2:aa:0a:d0:24:
b5:02:04:67:69:eb:63:a8:13:f9:9e:37:6d:24:04:
cf:5b:bd:f4:d8:b9:43:da:20:41:0e:df:f5:8f:d7:
44:4b:87:ad:72:cb:7c:18:49:16:cc:b3:95:e3:4b:
60:b1:ae:ea:bc:f7:8c:cf:4c:91:16:f3:f4:9e:ae:
eb:76:11:25:26:2e:c3:bb:79:27:3c:9c:d4:8f:26:
88:aa:75:6e:56:62:d1:32:71:59:7c:1f:92:61:93:
64:1d:ae:46:b5:b3:b6:cf:ba:70:31:ca:ea:ca:64:
ea:67:bc:e5:e6:c8:3a:28:b1:75:d8:40:b4:0f:00:
48:cf:31:37:b6:2c:48:84:7c:a1:7a:ea:55:9f:bd:
d9:4b:6c:2e:62:29:5e:ce:a4:7b:f1:c6:5b:a5:09:
78:e6:c5:3b:90:4a:94:01:b9:83:44:58:10:b6:05:
fd:29:5a:ec:e8:50:1c:a3:9e:dd:24:6a:fa:20:a8:
df:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:8D:9A:30:42:3A:BD:25:9A:79:5B:5A:87:4F:90:AA:FC:20:25:88
X509v3 Authority Key Identifier:
keyid:5D:A7:B0:50:55:3C:8E:E9:E0:5A:B4:C3:7F:D9:7D:28:21:21:6B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaewUFU8jungWrTDf9l9KCEha0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/dc9ddb-b18c-409d-9707-f2c6ac968c80/1/XaewUFU8jungWrTDf9l9KCEha0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:ee:fa:5d:49:98:0d:6f:4f:ad:84:9c:ae:8a:26:a6:df:2e:
ea:bc:13:33:a9:f8:5d:0b:7b:7d:d8:6e:b6:06:f3:78:ac:9f:
cf:9f:97:05:44:f6:22:38:03:3d:71:5e:d2:b5:1c:ec:b7:ee:
5f:be:75:c1:63:24:95:b1:0e:27:a7:84:9c:1f:f0:cb:7d:b2:
11:9c:6d:8a:4b:9d:e4:1b:53:8f:84:ff:5a:63:6d:c3:aa:0d:
e5:0d:d7:4e:5d:ee:69:d0:df:66:71:f6:a4:04:27:28:ad:c4:
2a:5a:42:a6:1e:61:09:98:ec:52:8d:87:21:d4:29:d2:a8:a7:
d8:7e:2c:88:bd:85:3c:5f:74:b9:f6:4a:87:bf:ea:85:e5:35:
20:1e:af:c0:a7:10:5e:5d:91:a8:0d:78:84:8a:79:f3:e9:aa:
db:6a:a0:9f:0e:1f:28:18:c7:63:dd:f3:28:eb:b3:c2:c8:1f:
6d:c6:0d:27:3d:60:5f:58:4a:ee:54:db:47:cb:ce:cc:75:5f:
e3:8c:93:d7:49:9a:f0:8d:14:fc:2b:eb:d2:cc:52:ef:d5:0f:
b4:27:cd:db:9a:42:25:5e:3a:4a:d6:c4:2e:3f:eb:73:da:27:
da:24:82:a1:1f:bc:c0:6f:c8:1a:94:e6:d1:aa:4e:3f:ae:eb:
46:2a:43:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:48:35 2026 by rpki-client