Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/XNgO9NoPVPKH_ZEIQRk5U_n8Do8.mft
File: XNgO9NoPVPKH_ZEIQRk5U_n8Do8.mft (raw, json)
Hash identifier: NNrJp0ii3834NWFuDRfPjI42UuVcamOYtflVz9ZtEg0=
Subject key identifier: DF:16:B3:99:C4:7D:FE:32:58:71:6F:69:5D:66:7F:B6:FE:6F:2B:CB
Authority key identifier: 5C:D8:0E:F4:DA:0F:54:F2:87:FD:91:08:41:19:39:53:F9:FC:0E:8F
Certificate issuer: /CN=5cd80ef4da0f54f287fd910841193953f9fc0e8f
Certificate serial: 01A08C7B47BBE3972B56787A616F738EC78E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNgO9NoPVPKH_ZEIQRk5U_n8Do8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/XNgO9NoPVPKH_ZEIQRk5U_n8Do8.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:24 +0000
Manifest this update: Thu 10 Sep 2026 18:01:24 +0000
Manifest next update: Fri 11 Sep 2026 18:01:24 +0000
Files and hashes: 1: 3WpSnsVUimHytGKhT2iNHcZpnC4.roa (hash: IHtD163HeqNDlfCbSdlgdedABQVmWVM6EMO0OYPYCrA=)
2: XNgO9NoPVPKH_ZEIQRk5U_n8Do8.crl (hash: obi7YZVQIKZhkstcYfSxQ9fq4m1WAFY8Wmlj/n3qohE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/XNgO9NoPVPKH_ZEIQRk5U_n8Do8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/XNgO9NoPVPKH_ZEIQRk5U_n8Do8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNgO9NoPVPKH_ZEIQRk5U_n8Do8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:47:bb:e3:97:2b:56:78:7a:61:6f:73:8e:c7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd80ef4da0f54f287fd910841193953f9fc0e8f
Validity
Not Before: Sep 10 18:01:24 2026 GMT
Not After : Sep 11 18:01:24 2026 GMT
Subject: CN=df16b399c47dfe3258716f695d667fb6fe6f2bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:df:5d:9b:af:98:fb:d5:1f:fa:fb:6c:b9:
81:d8:d4:77:51:8f:42:0f:58:90:11:38:07:77:30:
b6:49:16:a5:aa:cd:de:d8:e9:81:73:e0:a7:78:fe:
8a:46:b9:fb:e6:b0:f9:89:77:e6:cc:86:2d:c0:39:
42:7e:41:e2:47:8c:f3:66:a2:a5:c4:37:cb:e7:cf:
bc:d4:f3:c1:13:ee:1e:12:54:3c:03:81:ba:a6:c4:
10:52:e2:5b:27:c7:d2:69:59:b3:2a:0f:03:4e:b9:
5a:27:00:1b:11:70:3d:1a:33:e4:0e:77:b9:4c:37:
75:7f:f2:b2:4d:f9:4d:ec:0a:a1:d7:f8:09:b0:22:
b7:9f:dc:08:3c:80:33:93:2b:bf:c5:ca:cf:ab:4a:
20:fb:5c:7d:63:b1:52:86:53:ac:f7:1d:c2:46:2b:
04:c6:80:6d:2d:d8:26:2d:a8:b0:d6:f0:e2:8b:84:
0a:3f:39:7e:44:1f:58:ca:9c:89:f7:05:11:e2:78:
41:5f:94:8d:72:39:80:bf:9d:da:1d:c9:76:81:f9:
fe:b1:76:5a:0b:d2:6d:4d:e6:af:4e:1c:33:ab:b6:
bb:64:f2:fe:a3:06:51:48:70:77:c6:8d:15:a1:83:
b0:c6:f4:c1:72:7f:f1:33:f6:4c:3b:b9:6b:de:0e:
8b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:16:B3:99:C4:7D:FE:32:58:71:6F:69:5D:66:7F:B6:FE:6F:2B:CB
X509v3 Authority Key Identifier:
keyid:5C:D8:0E:F4:DA:0F:54:F2:87:FD:91:08:41:19:39:53:F9:FC:0E:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNgO9NoPVPKH_ZEIQRk5U_n8Do8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/XNgO9NoPVPKH_ZEIQRk5U_n8Do8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/e8c2bd-98fa-4bdf-80bb-c5eee57ed2e6/1/XNgO9NoPVPKH_ZEIQRk5U_n8Do8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:36:0c:0e:cf:fa:c6:e0:07:35:ec:81:60:1f:3b:b1:be:78:
ad:71:78:2e:61:5c:3f:14:84:c6:8e:7f:3f:6a:1c:fc:0b:e2:
ce:2e:4a:2b:3a:d7:6a:d5:11:f0:ec:90:40:e8:2b:0b:3a:f3:
2a:fe:87:56:67:5e:46:3a:36:9b:a8:ac:32:45:b3:1f:d2:f4:
b8:c5:dd:0d:1d:9e:af:85:83:3e:19:47:b1:f7:01:18:df:62:
a0:d1:32:76:79:df:cd:e5:00:3b:16:d4:3d:ea:82:ee:62:63:
77:3a:c6:ca:da:4b:a3:52:86:fa:21:22:e8:22:5b:3c:32:9f:
70:ff:3f:d1:19:71:86:27:7f:7d:53:2a:ab:13:88:ce:ec:24:
31:63:23:80:b2:9e:ff:5b:3a:72:a0:20:c3:6b:b3:72:34:58:
3d:14:96:e3:ab:b9:d6:17:d9:a7:0f:ff:3c:c4:2e:91:75:03:
27:ae:32:51:16:24:79:04:72:e2:f8:e8:ee:7b:a1:27:26:b5:
d5:bc:12:f8:20:cb:10:54:e6:84:6e:0b:32:82:29:78:64:d6:
82:41:fb:29:11:cf:c0:53:ef:9c:3e:0d:c4:f0:2f:9d:03:c0:
95:a7:c0:6b:cb:b5:73:e7:74:22:08:87:5a:da:d9:6c:6a:69:
0c:ab:1c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:55:12 2026 by rpki-client