Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
File: XCnLotrPDvn6IgkAMrsVmhCRQPA.mft (raw, json)
Hash identifier: /HINrVAvAoTozwUmFjrvZKNP7Ov5/32EIZkxC1oxOs8=
Subject key identifier: 43:8D:6D:47:2B:84:E0:AD:11:D2:CD:25:AD:1F:BD:53:3C:BB:2C:09
Authority key identifier: 5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
Certificate issuer: /CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Certificate serial: 01A08CB170DCBC2FBB56564C452DB178B47E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
Manifest number: 1A47
Signing time: Thu 10 Sep 2026 19:00:33 +0000
Manifest this update: Thu 10 Sep 2026 19:00:33 +0000
Manifest next update: Fri 11 Sep 2026 19:00:33 +0000
Files and hashes: 1: XCnLotrPDvn6IgkAMrsVmhCRQPA.crl (hash: DXcYmjB58lT7hTHWCCTOD4UHVk787ViOCn5T+LtTUDw=)
2: aeEP89HKT7e7KYklfEV6GwzzRq4.roa (hash: +iLAVwj6kbQSZH9/6AWgoWRz5/OYd1yxCHRY7Br0+CU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:b1:70:dc:bc:2f:bb:56:56:4c:45:2d:b1:78:b4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c29cba2dacf0ef9fa22090032bb159a109140f0
Validity
Not Before: Sep 10 19:00:33 2026 GMT
Not After : Sep 11 19:00:33 2026 GMT
Subject: CN=438d6d472b84e0ad11d2cd25ad1fbd533cbb2c09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f3:b3:34:2d:8f:3f:2d:80:a3:ca:33:9f:43:
da:aa:62:2a:d9:3f:50:b1:59:54:95:6e:72:07:a9:
21:ba:a0:26:96:fb:66:4a:03:e4:b8:ab:ba:95:5e:
04:e5:71:8a:5e:6f:a3:f2:ba:40:db:c7:ec:a5:a0:
71:bb:ea:8d:b8:55:ee:b4:32:d8:13:5b:a4:23:af:
46:9c:af:76:a6:6c:fb:7f:a7:6c:43:44:92:7d:eb:
44:36:ea:b7:fb:52:22:c3:15:fc:66:20:ea:c4:42:
53:f6:a2:43:23:e7:3d:08:d2:b5:f9:cc:d5:d5:91:
a8:f1:6e:1d:10:09:25:fc:9b:08:0f:f7:8e:9f:2d:
41:6d:47:97:70:3b:34:d3:2d:7c:e0:93:ac:56:c2:
26:94:0a:3e:d3:f9:b6:f9:bb:38:4a:23:8a:aa:38:
b6:f9:44:f2:9d:f0:c4:3b:85:bf:b2:5d:92:10:72:
2e:d6:2f:d3:c9:2c:c8:a6:9a:6b:9a:32:0c:f8:a8:
b0:cf:4c:df:5e:ea:57:25:ab:92:5d:97:bc:24:5a:
67:78:a8:e9:58:e0:d2:28:6d:66:fe:90:54:c8:0c:
bd:29:bf:b1:b3:ab:76:c2:6e:a1:26:73:ce:47:47:
7c:d6:3e:10:28:d0:e0:a3:27:e4:9d:c6:6e:6c:43:
96:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8D:6D:47:2B:84:E0:AD:11:D2:CD:25:AD:1F:BD:53:3C:BB:2C:09
X509v3 Authority Key Identifier:
keyid:5C:29:CB:A2:DA:CF:0E:F9:FA:22:09:00:32:BB:15:9A:10:91:40:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XCnLotrPDvn6IgkAMrsVmhCRQPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/729fda-d852-4aca-9aff-6d1fa42d0b80/1/XCnLotrPDvn6IgkAMrsVmhCRQPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:7d:c9:ff:b9:78:44:fd:19:d9:db:b0:ba:eb:ae:1c:bc:85:
eb:c7:75:e2:1c:01:3e:89:4d:b5:9c:9c:ae:42:5b:81:cb:69:
38:9b:64:98:61:89:2f:3f:50:8b:17:2a:0d:12:41:85:cb:da:
c5:b4:39:c6:ed:b9:5b:de:7a:6c:2a:4a:3d:7c:8e:ff:f6:00:
c2:31:3c:b8:f1:ce:d4:ca:e3:6f:31:a4:c7:01:12:a8:ae:69:
45:3a:64:be:fd:47:0f:d1:dc:17:62:9e:0e:92:2b:1b:9f:12:
ac:bc:aa:92:59:2a:f2:72:8c:64:54:07:ed:17:08:48:39:e5:
63:d7:fb:7a:0e:5e:76:8c:ae:3f:b0:18:6a:2a:15:a4:e0:dc:
1e:96:23:5a:5e:87:fc:b2:e6:9f:6c:84:ad:92:2b:5f:f8:9f:
ca:ea:de:e4:75:93:13:37:d1:bf:ad:78:e1:a7:bb:60:06:f8:
03:77:b1:d9:60:f1:c3:6b:11:dd:97:9f:f4:d6:e1:0a:c7:6c:
c0:4b:87:d6:2e:eb:48:07:6d:37:ac:40:0b:8c:38:7e:04:31:
30:0d:58:41:07:88:b9:89:4b:7c:dc:ee:73:d7:5f:35:1d:78:
cb:92:92:1b:6b:6f:25:56:34:95:61:fe:c4:52:c2:f5:87:8e:
57:6a:7a:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMsXDcvC+7VlZMRS2xeLR+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjMjljYmEyZGFjZjBlZjlmYTIyMDkwMDMyYmIxNTlhMTA5
MTQwZjAwHhcNMjYwOTEwMTkwMDMzWhcNMjYwOTExMTkwMDMzWjAzMTEwLwYDVQQD
Eyg0MzhkNmQ0NzJiODRlMGFkMTFkMmNkMjVhZDFmYmQ1MzNjYmIyYzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqfOzNC2PPy2Ao8ozn0PaqmIq2T9Q
sVlUlW5yB6khuqAmlvtmSgPkuKu6lV4E5XGKXm+j8rpA28fspaBxu+qNuFXutDLY
E1ukI69GnK92pmz7f6dsQ0SSfetENuq3+1IiwxX8ZiDqxEJT9qJDI+c9CNK1+czV
1ZGo8W4dEAkl/JsID/eOny1BbUeXcDs00y184JOsVsImlAo+0/m2+bs4SiOKqji2
+UTynfDEO4W/sl2SEHIu1i/TySzIppprmjIM+Kiwz0zfXupXJauSXZe8JFpneKjp
WODSKG1m/pBUyAy9Kb+xs6t2wm6hJnPOR0d81j4QKNDgoyfkncZubEOWpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEONbUcrhOCtEdLNJa0fvVM8uywJMB8GA1UdIwQY
MBaAFFwpy6Lazw75+iIJADK7FZoQkUDwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC83MjlmZGEtZDg1Mi00YWNhLTlhZmYt
NmQxZmE0MmQwYjgwLzEvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC83MjlmZGEtZDg1Mi00YWNhLTlhZmYtNmQxZmE0MmQwYjgw
LzEvWENuTG90clBEdm42SWdrQU1yc1ZtaENSUVBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACn3J/7l4
RP0Z2duwuuuuHLyF68d14hwBPolNtZycrkJbgctpOJtkmGGJLz9QixcqDRJBhcva
xbQ5xu25W956bCpKPXyO//YAwjE8uPHO1MrjbzGkxwESqK5pRTpkvv1HD9HcF2Ke
DpIrG58SrLyqklkq8nKMZFQH7RcISDnlY9f7eg5edoyuP7AYaioVpODcHpYjWl6H
/LLmn2yErZIrX/ifyure5HWTEzfRv6144ae7YAb4A3ex2WDxw2sR3Zef9NbhCsds
wEuH1i7rSAdtN6xAC4w4fgQxMA1YQQeIuYlLfNzuc9dfNR14y5KSG2tvJVY0lWH+
xFLC9YeOV2p6ww==
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:49:11 2026 by rpki-client