Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
File: XgSwLaV7ADebVhowISLnjl1Qick.mft (raw, json)
Hash identifier: pfY7cQeAXFggk7apCVIh7cKw8SYRPEAgD4Ln44IlSEM=
Subject key identifier: 3B:CB:53:5A:DD:81:C9:7E:A0:B1:BF:7F:39:D4:08:BA:AD:18:76:3B
Authority key identifier: 5E:04:B0:2D:A5:7B:00:37:9B:56:1A:30:21:22:E7:8E:5D:50:89:C9
Certificate issuer: /CN=5e04b02da57b00379b561a302122e78e5d5089c9
Certificate serial: 01A086B1158D22E4C072CC31A3D969A2E8A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
Manifest number: BF
Signing time: Wed 09 Sep 2026 15:02:27 +0000
Manifest this update: Wed 09 Sep 2026 15:02:27 +0000
Manifest next update: Thu 10 Sep 2026 15:02:27 +0000
Files and hashes: 1: Dj9kuZWr9tyLTs78iAEnZEz4gVs.roa (hash: NhBr92QCCO8QbowM/v9LvYLKA9Dujq44YfaPAibmCTM=)
2: TQ0wM6huTqh458ZZSQM0KI52teM.roa (hash: nBLiANju/5qfI/HxdXcGxBhrz2L2pBNw4FU6t8WZ4B4=)
3: XgSwLaV7ADebVhowISLnjl1Qick.crl (hash: D+sHmVFzBfsl2hwcF644kuiqgm9p/kw7DDwlAOVhv+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 14:52:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:86:b1:15:8d:22:e4:c0:72:cc:31:a3:d9:69:a2:e8:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e04b02da57b00379b561a302122e78e5d5089c9
Validity
Not Before: Sep 9 15:02:27 2026 GMT
Not After : Sep 10 15:02:27 2026 GMT
Subject: CN=3bcb535add81c97ea0b1bf7f39d408baad18763b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:74:ec:40:a1:43:5b:e4:e3:24:63:18:53:e6:
c3:3f:e8:fb:29:91:f2:86:e5:33:c0:3b:89:7c:bc:
fd:86:be:66:42:6f:c6:b4:de:f0:ae:f7:eb:72:13:
d3:74:88:ce:69:f4:13:0b:3f:5d:3d:4f:8f:15:c6:
6f:37:75:32:65:6f:12:43:57:87:fc:88:38:09:c7:
aa:f0:a4:71:bc:d4:c0:20:74:a1:b7:a3:ba:63:c1:
de:2a:a2:6f:76:17:93:60:5b:a8:49:91:0f:9a:dd:
a4:0c:6d:03:4d:63:33:60:0b:ce:37:53:aa:5d:82:
e8:3c:1a:05:46:6e:00:f5:f6:ce:6b:73:bb:72:e1:
27:ff:56:a6:30:05:02:1d:c9:43:54:5a:c0:06:a7:
6c:d8:94:db:c9:1c:bd:2a:ac:b2:16:04:76:fd:0f:
96:f3:ec:0b:ab:c4:e0:c5:8c:89:7c:94:e9:09:bb:
f0:12:2a:c8:99:3b:3a:48:55:b6:66:dc:88:96:96:
dd:31:61:de:cd:b8:f1:c8:94:84:19:d5:53:95:24:
77:66:29:e7:f6:2e:36:70:c8:e7:5a:53:fd:b2:1a:
fe:f0:17:5d:97:f7:de:fa:0f:38:9f:8b:4b:0e:db:
23:2a:41:de:ed:85:98:c1:cd:3b:dc:80:ab:b4:a6:
88:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:CB:53:5A:DD:81:C9:7E:A0:B1:BF:7F:39:D4:08:BA:AD:18:76:3B
X509v3 Authority Key Identifier:
keyid:5E:04:B0:2D:A5:7B:00:37:9B:56:1A:30:21:22:E7:8E:5D:50:89:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgSwLaV7ADebVhowISLnjl1Qick.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/XgSwLaV7ADebVhowISLnjl1Qick.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c7:8b:40:93:b8:3f:67:fa:c4:93:e1:c6:16:32:be:02:34:
70:76:b5:d3:79:ee:10:ea:3a:de:cf:cd:53:66:a6:e3:5b:bf:
0a:15:bb:ae:ca:cc:bc:b7:11:2c:95:06:17:a0:df:63:a9:d5:
e6:03:4f:6a:04:51:b9:04:39:db:b8:25:c9:0a:18:6b:3c:77:
28:83:d3:40:a0:6c:eb:e3:27:9f:40:8e:3f:0b:20:69:cf:49:
ca:44:42:af:73:4f:1a:22:71:71:6f:86:1a:8a:1f:ec:49:c2:
6b:a9:6d:0c:2d:bc:81:af:3b:e1:59:6f:0c:95:36:fe:f4:8f:
64:01:79:91:8b:0f:62:31:e4:56:68:e1:af:11:c7:66:3d:b3:
d8:a0:c1:3f:a7:db:d3:ef:c7:f5:a6:1e:45:e0:72:66:f4:c0:
85:8e:9a:ab:a1:b2:51:80:cc:9e:4a:c7:7b:9c:55:9b:b3:4b:
0c:2c:65:fd:fc:04:03:f3:cd:da:50:cf:08:e3:93:ad:5c:8a:
0b:ec:d1:62:10:c7:56:0f:35:30:c6:79:f3:18:18:9d:d9:48:
b8:50:f0:1b:23:18:cc:c2:6b:ce:af:47:2a:72:67:6f:f0:5a:
7a:8d:c2:5c:06:38:78:86:6e:6a:c1:cd:59:f2:e0:53:48:fc:
9a:d0:6a:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 18:18:32 2026 by rpki-client