Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
File: XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft (raw, json)
Hash identifier: zPB/BMXJ0bYqCW33oOYuHJ2jWZ4xWI4BpXyamVwYlmw=
Subject key identifier: B4:67:3A:21:55:BD:F4:E2:55:2C:DF:39:54:2C:71:41:39:D3:07:C1
Authority key identifier: 5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
Certificate issuer: /CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Certificate serial: 01A06E707F3A866174A8019AB1825C1CE806
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
Manifest number: 0FF4
Signing time: Fri 04 Sep 2026 22:01:01 +0000
Manifest this update: Fri 04 Sep 2026 22:01:01 +0000
Manifest next update: Sat 05 Sep 2026 22:01:01 +0000
Files and hashes: 1: JjBO1amjFaXKhp_BY_wamVGillY.roa (hash: EPoONpabQiLm+XMuLyPiJhdjDRYBEoJAyi19e3SuWu8=)
2: XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl (hash: OAOYMJEp59CK7vZCivrqcQ793tE3FMazQv7EeMgKxUA=)
3: lskIdwRbHzMZEWLGTNl2U0zpcVc.roa (hash: KELAneudQMw0Lv1CUTTdAguNyi2AXca3YtUqnwbLd4U=)
4: s1w-A0JQ7-GP22Qs9TMP-YC29-g.roa (hash: UbNWOkKqq7RPWPwsnO7EB9cjjZaqtck3tiM3zDy2/V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:7f:3a:86:61:74:a8:01:9a:b1:82:5c:1c:e8:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Validity
Not Before: Sep 4 22:01:01 2026 GMT
Not After : Sep 5 22:01:01 2026 GMT
Subject: CN=b4673a2155bdf4e2552cdf39542c714139d307c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5f:65:7e:f0:ce:5d:7c:c3:23:7e:8f:1c:83:
89:7f:0e:60:c2:a2:01:60:1a:b7:f2:5d:bb:7e:46:
54:e0:ef:b8:ca:29:33:a8:02:47:49:f1:80:cf:23:
40:93:6d:b9:b3:ae:34:bf:f1:9b:d2:ac:0d:fb:49:
91:d0:e9:1b:b6:6c:b1:f7:a5:1c:c5:66:44:b0:fc:
d3:d0:c9:c3:f9:f4:69:f1:b8:4f:3a:d0:2a:9f:46:
ef:b1:33:f7:53:94:e8:06:d6:62:8a:32:2c:dc:cd:
5a:1c:ed:df:89:d1:d2:5f:43:61:fb:8a:d1:fb:0e:
da:3e:69:dc:2a:f2:92:fe:82:fa:c7:74:fa:0e:0d:
b1:54:ca:f8:77:ba:45:cf:ea:73:c6:ed:5c:31:2e:
42:2b:30:6f:bf:54:f9:e8:02:07:c7:f8:b1:6b:5e:
59:dd:66:58:54:ab:ed:27:b6:f5:e2:80:95:f8:56:
ca:7c:e3:88:d2:ce:32:8e:cb:8e:84:58:eb:ea:85:
6f:70:8d:65:fd:7f:c9:60:02:b4:b5:58:1a:9a:0a:
a7:4b:2c:01:51:c1:68:20:b2:eb:2a:d0:a9:21:9e:
09:05:27:0f:ed:69:04:af:a9:a5:ec:fd:b8:ee:9b:
13:fe:e3:91:e4:85:f3:2e:3f:85:53:12:13:b5:0f:
d6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:67:3A:21:55:BD:F4:E2:55:2C:DF:39:54:2C:71:41:39:D3:07:C1
X509v3 Authority Key Identifier:
keyid:5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:52:a1:8d:a7:55:31:7f:e8:e0:a0:a4:42:cb:c6:d3:7d:20:
eb:9b:ea:9d:48:64:59:51:f8:36:03:c2:7b:9e:e7:23:f5:04:
dd:1e:36:fe:34:40:be:cf:74:40:1d:62:7d:b1:4e:f6:47:0e:
2c:e8:d3:64:cd:94:1e:b3:e3:28:8a:22:47:ce:92:51:19:54:
e2:87:4d:94:9a:57:69:d6:5b:87:a7:67:29:b8:43:a8:b8:7f:
e7:a0:88:b5:c5:e9:1e:46:ef:f1:6d:cf:0a:59:0c:9d:10:cb:
88:f1:62:ab:9d:3d:f9:55:0f:c6:08:02:37:33:f4:95:b1:da:
7e:d8:52:cd:ad:cf:d3:9b:8b:2a:34:eb:65:9e:05:7f:d7:52:
29:89:c6:5d:ef:22:94:a4:42:cb:b6:11:e9:98:91:65:f4:72:
55:50:1c:2b:6a:9a:0b:67:23:e7:4c:32:a8:77:2a:76:41:9f:
3e:f7:d0:85:d1:eb:c8:4c:1e:e2:14:59:ff:7b:d1:cd:34:1d:
16:69:c3:4b:99:d5:40:5e:77:e7:c4:c9:22:7f:dd:ee:d8:0e:
fc:4b:04:60:4c:ce:b6:6a:d0:87:1f:6e:60:1f:0f:07:6a:64:
9b:af:a8:eb:e8:8d:01:ce:2d:6e:ba:f3:01:2c:0e:ee:88:4e:
93:95:2d:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:23:40 2026 by rpki-client