Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
File: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft (raw, json)
Hash identifier: qB2+aZqM/x0f71EbRMl7J26sUUS16+Fi4Nsn7sU2ni8=
Subject key identifier: 43:00:CC:CB:77:B3:D7:06:E3:75:D2:17:9C:39:66:43:56:7E:B4:71
Authority key identifier: 5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
Certificate issuer: /CN=5c40454a1b176795f021575347794bd9f04427ac
Certificate serial: 01A08942957301FDF9CE68CD73130F16BBAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
Manifest number: 088A
Signing time: Thu 10 Sep 2026 03:00:37 +0000
Manifest this update: Thu 10 Sep 2026 03:00:37 +0000
Manifest next update: Fri 11 Sep 2026 03:00:37 +0000
Files and hashes: 1: 9NPHRkfYiZLbitvXWdqmvdRg9Bw.roa (hash: m+oR/0vItE/UTBoixTdgEHtMhVdXVl9biRTYld0wnz0=)
2: XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl (hash: IHMkQaikeciswlcsb7yV8nwkQwo049TN5DxvZUF/jYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:42:95:73:01:fd:f9:ce:68:cd:73:13:0f:16:bb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c40454a1b176795f021575347794bd9f04427ac
Validity
Not Before: Sep 10 03:00:37 2026 GMT
Not After : Sep 11 03:00:37 2026 GMT
Subject: CN=4300cccb77b3d706e375d2179c396643567eb471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:5f:4f:b0:48:b5:ed:c2:7f:c3:0c:a1:56:05:
ee:0e:d2:4b:f5:54:5a:0f:fb:5c:7c:cf:8f:f2:6e:
b3:c6:f0:11:33:5d:d6:c2:af:bd:fb:8f:f2:63:3d:
45:01:74:21:99:3c:89:5c:7c:77:80:f0:02:a7:02:
15:4d:af:c4:f5:2a:2b:09:9d:46:50:3b:f5:ad:e7:
21:4b:13:d0:56:3d:10:9d:bb:8e:5c:74:5e:aa:39:
af:11:78:cb:90:7f:40:14:f1:b2:85:96:c9:04:a2:
77:e3:f2:66:b1:aa:0e:c1:54:e8:6c:9a:b2:97:8d:
b5:a7:c7:89:2d:51:11:c9:80:c5:bc:eb:72:7c:e1:
fe:1d:3a:14:67:e8:5d:19:61:d4:2d:c0:86:18:2a:
28:d0:fc:22:db:96:c4:37:e0:91:68:b7:e4:74:bb:
03:39:26:fc:00:9f:ed:1c:ce:5e:64:d2:e8:60:bc:
10:db:71:ef:97:79:b7:b9:5e:a7:72:37:41:85:c0:
64:ae:d0:7f:39:ad:17:fa:42:dd:fa:61:21:c9:25:
5c:07:5f:d5:11:81:d1:44:1b:a3:af:5d:1d:d4:c5:
6d:f7:f4:64:dd:c4:31:4d:b1:52:09:88:a8:4c:d8:
56:2d:dc:a6:97:b9:5c:96:b8:e5:4e:d1:4f:f3:bc:
69:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:00:CC:CB:77:B3:D7:06:E3:75:D2:17:9C:39:66:43:56:7E:B4:71
X509v3 Authority Key Identifier:
keyid:5C:40:45:4A:1B:17:67:95:F0:21:57:53:47:79:4B:D9:F0:44:27:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3c367a-1f9b-4c92-8978-ca0448e7f3a3/1/XEBFShsXZ5XwIVdTR3lL2fBEJ6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f5:b2:41:38:09:f2:42:bd:4c:c3:ce:da:96:93:1e:be:04:
39:a2:09:33:8f:e3:3d:f9:22:ba:fa:72:98:13:e4:99:05:a8:
86:b5:8d:ad:62:14:15:24:48:c6:fc:1f:ff:48:bf:6b:f3:94:
1d:ed:f8:93:9c:6f:8f:67:19:cf:99:4a:80:5a:78:60:14:13:
59:46:ff:12:a9:44:bf:49:ef:5c:b1:69:d1:ff:9c:6e:77:3f:
ca:30:4a:75:b7:7b:65:a4:5b:99:c4:da:b3:e4:55:37:1a:07:
1e:78:d1:26:eb:f4:43:09:23:42:cb:ea:2c:14:26:3c:2e:49:
82:f4:d7:48:98:bb:df:33:d2:82:d3:cd:98:df:b5:50:e7:80:
0b:8d:f2:6c:57:01:92:bc:3d:0a:75:1d:0b:8c:0d:2c:8b:0a:
38:78:17:41:3a:1d:00:a7:c9:4d:6a:9b:6d:e8:69:ad:d2:1d:
4b:80:8a:fb:e7:bb:91:82:bd:87:7f:1b:80:8c:99:96:94:f3:
8f:8d:ae:50:e1:7c:19:5c:12:52:eb:d0:e9:46:6a:ba:2a:d7:
0e:85:3d:6e:66:ee:1a:ac:37:96:b6:2a:aa:93:fb:a6:90:9d:
eb:d9:43:e1:8c:14:08:94:1a:ae:33:ed:24:12:72:bb:69:99:
52:09:a2:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:13:11 2026 by rpki-client