Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
File: XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft (raw, json)
Hash identifier: /eAbKX/b0sHAj6E25Mv9zwryq3j53YHqV2p6KksCTB4=
Subject key identifier: 45:55:48:9C:2B:05:3F:9B:34:75:00:1C:8D:D2:96:B4:95:12:BD:59
Authority key identifier: 5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
Certificate issuer: /CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Certificate serial: 01A08C0D8994B2EDA3FB38DA0277BB174212
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
Manifest number: C3
Signing time: Thu 10 Sep 2026 16:01:32 +0000
Manifest this update: Thu 10 Sep 2026 16:01:32 +0000
Manifest next update: Fri 11 Sep 2026 16:01:32 +0000
Files and hashes: 1: XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl (hash: 0mn/G4ZCko88g3X5Gj3J9jytvh/KWf0CuORypIR47kA=)
2: dVeZzKDi_fO4mE5HHo16sVmtMMU.roa (hash: 1r2T0D/7NQ/zB+ziH9iXBQGlu0LN0IlUyw0vofrt4CI=)
3: lldCsQ1hgTCDcrFWBWU0S5eC1nE.roa (hash: PQn0MUfrufkEibOpWiDwl2hJpMI+Yw+jzN0Z4rlm5DI=)
4: whybmoJ3UH-tZcQj28IxhxnuNWU.roa (hash: XoXTuKuWN/G+ZqFwydqG+jUtoRxuSHXL1j3ltwwohOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:89:94:b2:ed:a3:fb:38:da:02:77:bb:17:42:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dcb00898d9a9445c6cee637a358fe32fdd85721
Validity
Not Before: Sep 10 16:01:32 2026 GMT
Not After : Sep 11 16:01:32 2026 GMT
Subject: CN=4555489c2b053f9b3475001c8dd296b49512bd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:b1:d6:7a:90:0d:f5:de:4f:29:e1:2f:4a:6c:
51:84:3b:12:2d:98:b9:91:2b:93:8a:d3:65:48:91:
62:af:10:f9:28:e7:9d:08:cd:cd:ec:d9:60:ff:17:
51:86:8c:df:3d:e0:ff:df:54:11:43:e5:04:94:fe:
0a:35:7c:02:ec:bb:14:4c:9c:bb:11:60:ca:40:55:
d8:96:e8:f5:5c:d4:9a:78:2b:2f:f4:02:8c:7e:3c:
14:75:19:45:82:de:13:67:9a:4b:d6:77:ef:b8:b8:
04:bc:49:71:69:f2:8d:22:78:30:aa:30:a0:67:f1:
a9:4f:ca:a7:27:12:0e:16:0f:b7:51:23:19:6c:61:
3d:b8:5b:6d:ef:f9:3d:f6:4c:72:5b:2d:3a:ac:4d:
fb:f6:27:61:98:be:5c:ed:9a:1a:1c:35:ca:60:73:
02:b7:61:f0:86:35:e9:92:c7:4e:d4:13:75:59:f0:
63:80:6f:49:60:47:b5:ca:52:c6:f5:15:7f:a7:bb:
b2:fe:aa:74:c5:e7:ae:48:8c:3a:4b:c6:4b:9d:d2:
dd:10:2d:57:b8:03:9a:b9:e2:49:0b:b0:5d:f9:85:
7d:bc:63:fa:c8:5a:b9:49:73:24:4a:a2:21:be:fb:
5d:df:bc:13:eb:84:39:05:87:84:59:6a:e3:4f:63:
ea:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:55:48:9C:2B:05:3F:9B:34:75:00:1C:8D:D2:96:B4:95:12:BD:59
X509v3 Authority Key Identifier:
keyid:5D:CB:00:89:8D:9A:94:45:C6:CE:E6:37:A3:58:FE:32:FD:D8:57:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcsAiY2alEXGzuY3o1j-Mv3YVyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/021392-34f3-4a63-83a1-a04925975754/1/XcsAiY2alEXGzuY3o1j-Mv3YVyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:05:ba:68:e9:4f:01:a0:06:7f:b6:d9:da:a4:30:0d:cd:8c:
01:3a:42:db:59:9d:53:62:3e:69:03:9b:30:f8:51:08:04:bf:
51:57:96:88:7a:9b:06:a7:a3:2f:32:71:91:e6:34:02:54:16:
66:76:db:bd:d2:fd:c3:6e:37:2c:a1:a6:52:31:cd:ee:e6:c6:
7b:69:a2:be:19:e4:9b:55:cb:b3:2e:cc:ac:73:3f:e2:53:a0:
56:1b:b0:64:91:07:11:a3:6b:05:6e:62:51:98:67:9b:52:be:
60:63:7a:6d:47:57:a2:97:5c:4f:c6:a8:81:b3:43:aa:ca:bf:
26:86:0d:58:1b:e2:76:46:66:ae:b4:b2:36:05:39:84:38:18:
5c:be:49:57:15:92:5b:6f:c9:7e:e3:91:4e:1f:78:e6:80:fc:
b0:e0:16:db:24:93:4d:d0:ad:fb:00:51:33:64:18:c1:33:aa:
6b:0d:82:f3:0f:55:19:06:d0:75:bc:f6:bc:e6:f0:7e:6d:b5:
56:ac:31:b7:ea:8c:be:01:db:58:0d:76:f1:b2:b4:10:01:29:
5a:15:f2:5d:5a:76:d2:99:70:36:96:43:7f:ef:7c:6a:34:72:
d8:9d:54:06:d3:36:76:06:96:75:62:11:d1:6f:e8:50:07:35:
e1:2e:d7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:14:33 2026 by rpki-client