Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
File: XYHR_0WxVHwAqEtG75nsot-9Rbw.mft (raw, json)
Hash identifier: //p7f/TSjKh4O5nTNcSxU1UwZdqIqf6Ml7UxzkL2mjQ=
Subject key identifier: 1A:F1:DE:36:0F:A3:FE:C2:9E:1D:B1:68:DB:94:73:64:48:A9:D2:80
Authority key identifier: 5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
Certificate issuer: /CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Certificate serial: 01A06E39C5E81FAB300C387F1C853DBBDF9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
Manifest number: 1A3F
Signing time: Fri 04 Sep 2026 21:01:15 +0000
Manifest this update: Fri 04 Sep 2026 21:01:15 +0000
Manifest next update: Sat 05 Sep 2026 21:01:15 +0000
Files and hashes: 1: In_xgreKFfWQTYFlnjjmLhiHwyI.roa (hash: gsiqXm6RUxLr8tboWvbsB1DhI1DS1FN/O6oO/pFKm00=)
2: OCZr5kjA-CfYpumVERqkCUluKf4.roa (hash: fP+6DEGSKabb9AgXcHTeX7zIerrqedNJGpjW4I4cF8I=)
3: XYHR_0WxVHwAqEtG75nsot-9Rbw.crl (hash: PsfRgL+XX1yvDbczWv8MYlNQX8FnjShpNMUAOa8ush0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:c5:e8:1f:ab:30:0c:38:7f:1c:85:3d:bb:df:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d81d1ff45b1547c00a84b46ef99eca2dfbd45bc
Validity
Not Before: Sep 4 21:01:15 2026 GMT
Not After : Sep 5 21:01:15 2026 GMT
Subject: CN=1af1de360fa3fec29e1db168db94736448a9d280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:27:8a:66:09:f0:02:5d:2e:c6:da:f1:a0:b7:
21:42:a0:3f:90:6c:d5:66:4b:96:64:aa:61:05:c6:
2d:15:5a:8d:0d:36:c0:d2:93:9e:a4:e2:46:b7:8f:
a1:af:f2:6a:bd:ce:bf:7d:60:0e:ed:84:9b:8c:e8:
cd:94:97:0d:8a:26:b5:1d:77:e0:99:c1:49:20:cb:
7e:f8:b6:21:20:da:0b:32:fd:47:1e:ea:3f:91:a4:
12:4f:7e:38:dc:e8:d5:ca:03:7f:fb:d7:f8:7a:6a:
36:a5:a3:30:63:b0:13:5e:7e:5a:95:43:e8:89:4c:
30:48:d6:91:80:dc:9d:16:b1:fa:c2:48:6c:36:e9:
a9:f0:42:61:84:47:9c:5e:38:8e:60:1d:f3:bf:0a:
9a:57:06:fa:a1:db:37:30:0c:72:b0:3d:13:5e:70:
ff:a3:8d:27:e4:bd:d6:2a:9f:2e:a8:ac:3e:ea:ae:
b0:0b:16:a4:09:e3:27:3a:f7:f7:ec:76:34:2d:b1:
63:9c:35:14:e3:26:c6:df:7e:f5:e8:e6:70:35:c6:
49:a4:b3:3e:f5:bc:d7:c7:83:d8:7b:75:55:dd:55:
07:04:70:e7:1f:61:38:81:84:52:42:40:dd:8c:16:
e1:9b:89:d7:36:8d:e2:ba:43:01:de:2b:08:af:71:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:F1:DE:36:0F:A3:FE:C2:9E:1D:B1:68:DB:94:73:64:48:A9:D2:80
X509v3 Authority Key Identifier:
keyid:5D:81:D1:FF:45:B1:54:7C:00:A8:4B:46:EF:99:EC:A2:DF:BD:45:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYHR_0WxVHwAqEtG75nsot-9Rbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/acd7e3-9c76-4ff6-b5ae-ee80a2d2952d/1/XYHR_0WxVHwAqEtG75nsot-9Rbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:41:42:c2:de:93:51:a1:3b:39:6c:83:60:37:6e:fc:23:cf:
b8:e8:6e:10:79:38:d7:5e:31:e4:8e:5e:f4:0a:87:b5:04:72:
2a:fd:15:fc:22:35:57:3d:cf:2b:b7:29:09:b5:42:3a:d2:87:
76:66:e1:6a:20:00:71:bc:52:bf:68:e3:f9:2e:ce:e0:e2:07:
62:df:9d:06:86:19:dc:7a:2b:62:12:98:94:da:57:3b:f2:ff:
29:84:d8:04:93:5f:0f:8c:c1:dd:e0:00:ff:60:d0:88:1a:5e:
6b:6f:ec:2d:ba:ca:51:73:eb:05:04:03:70:ca:7c:7f:fb:a2:
75:ac:b5:b3:af:93:d4:85:8c:63:a4:e0:6b:92:05:39:15:1e:
0b:4b:58:3f:62:dc:7e:a9:e3:a5:14:7b:34:1a:c7:53:40:c0:
6b:3d:70:a0:6a:bd:38:18:da:62:2c:9e:99:97:ec:ff:10:98:
75:e3:64:6e:bc:15:60:61:50:9c:7e:a8:18:ab:70:33:f5:64:
8f:0a:58:b3:82:cf:d2:bb:6d:7c:78:af:44:d1:ec:04:da:26:
f1:31:54:4d:c7:ee:1d:cf:86:1a:0a:b0:a0:37:2e:89:2b:41:
1b:4e:93:bb:b4:e1:d2:a9:32:17:73:7f:39:a4:fd:7b:7b:9e:
08:62:23:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:48:11 2026 by rpki-client