Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
File: XWMX9pNua1eLOMPfsZgCVJj8rqE.mft (raw, json)
Hash identifier: oUHDHPDDMex3H6t97/BV3vMyZfLegdDD/prY/6g1bYQ=
Subject key identifier: 22:29:14:CB:14:DE:0D:28:AA:63:CE:89:E8:F8:0E:BE:AD:B5:E1:A3
Authority key identifier: 5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
Certificate issuer: /CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Certificate serial: 01A08AC3D9B503473B84AB2F2F54BFA3CE9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
Manifest number: 0998
Signing time: Thu 10 Sep 2026 10:01:26 +0000
Manifest this update: Thu 10 Sep 2026 10:01:26 +0000
Manifest next update: Fri 11 Sep 2026 10:01:26 +0000
Files and hashes: 1: XWMX9pNua1eLOMPfsZgCVJj8rqE.crl (hash: us3nGP6OYzvRqr34W0RjK6qPCxw6/FfiU2ACrVH23Gw=)
2: ap-hePAObGM0xD9pl1yT2LqZzQg.roa (hash: mxBd1kBKjM1E0LiaQSAHHf7cP2igd3O8Gy2yRTKiPCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:d9:b5:03:47:3b:84:ab:2f:2f:54:bf:a3:ce:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Validity
Not Before: Sep 10 10:01:26 2026 GMT
Not After : Sep 11 10:01:26 2026 GMT
Subject: CN=222914cb14de0d28aa63ce89e8f80ebeadb5e1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c8:f9:e5:f4:42:28:01:42:ad:8b:96:52:56:
32:25:8b:31:5b:ee:32:34:ac:73:d2:9d:b8:3e:05:
14:37:e6:70:31:ec:21:82:42:e3:9d:92:d6:9e:da:
c0:b2:8a:12:d5:db:e2:2c:2d:c5:01:02:f0:81:86:
0d:83:69:3d:51:9d:41:6f:4b:48:76:69:47:0c:fd:
5c:4b:e6:9a:ee:a2:1f:cc:30:a5:cf:45:98:c5:83:
37:f8:87:89:3a:2c:c0:9b:42:9c:e4:86:a2:5d:e9:
3f:3e:b3:80:dd:6f:82:a4:94:97:4f:f0:e9:32:ab:
b4:01:6d:fb:7f:e0:6a:4e:a5:21:4a:51:b2:2e:d6:
18:ae:8a:de:9a:47:80:41:db:0a:b4:ae:4a:9a:20:
a2:ca:12:19:06:78:d6:8f:55:04:87:f4:64:f6:40:
7c:bf:9e:4d:d0:8a:5d:54:22:c8:69:93:19:f7:f3:
79:87:41:64:91:5d:fb:f2:88:6e:3f:4d:76:59:9d:
e7:ff:92:e6:76:f7:3d:bb:58:25:f7:5b:2e:4c:30:
bf:35:37:05:b6:f9:fc:07:e0:2f:b1:f1:a7:e2:5d:
38:77:c6:d7:ce:c3:ae:05:9b:e7:42:6c:12:a4:42:
3c:22:c6:8b:d4:ec:9c:17:bf:31:cb:61:2c:b5:98:
cc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:29:14:CB:14:DE:0D:28:AA:63:CE:89:E8:F8:0E:BE:AD:B5:E1:A3
X509v3 Authority Key Identifier:
keyid:5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:9e:8e:93:43:f0:e3:6c:5b:f9:15:e7:9f:6f:dd:70:93:d9:
2d:63:55:85:80:a3:0f:f0:75:0e:ea:f0:74:14:73:08:d9:25:
31:2f:70:7f:39:02:d2:08:77:ef:d1:a0:df:46:ae:a8:6a:b4:
0e:fa:3d:ec:c8:99:ee:c6:ac:0b:15:e2:e0:86:87:3e:7e:c1:
e0:e1:20:50:f9:3b:cd:c8:52:2b:cf:3d:94:37:72:31:c4:da:
67:cd:7b:e6:c6:43:06:e2:01:01:70:bc:88:83:c0:77:09:59:
e1:c5:8e:da:fc:9b:2c:3f:3f:41:3b:47:96:bd:e1:bf:24:cc:
8b:dc:44:c2:51:e2:78:79:01:e3:12:72:ce:21:79:2b:e6:d7:
43:dc:b3:71:39:94:ef:5d:bd:fd:11:be:f0:8f:3b:bd:f7:14:
42:51:58:51:ae:0d:ba:f2:78:01:7a:b1:0e:c1:61:4d:c7:6e:
ba:c8:13:38:aa:f2:db:c9:98:f5:cf:09:82:2a:b9:42:4f:4d:
c4:f9:5a:bd:87:8c:88:51:f2:ca:b2:d9:8b:96:d9:9e:92:c4:
25:de:32:18:06:4b:45:1c:1d:67:02:6f:37:69:5b:ef:ee:a2:
67:7a:b2:41:49:c9:70:aa:6b:a2:44:2b:96:4c:56:c0:04:c8:
c0:f0:90:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:16:20 2026 by rpki-client