Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier: rhly6n9NFhhwQEv6yFXjsk+bafLiKws3GfL5r4OT4N0=
Subject key identifier: E5:F3:25:C2:27:41:7D:4C:5C:88:26:04:60:DB:F6:57:62:DC:48:7F
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 01A08B684905462BE9EA4A02FFDCE4935D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number: 1209
Signing time: Thu 10 Sep 2026 13:01:02 +0000
Manifest this update: Thu 10 Sep 2026 13:01:02 +0000
Manifest next update: Fri 11 Sep 2026 13:01:02 +0000
Files and hashes: 1: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: pLFqrARF2e2X8NLrs5fJEi8Dcl08ezCddz2rFWNMQV4=)
2: jr0yuNLqeK_xhbuJCsSNuRbhB6M.roa (hash: iEdWiLEjiAZO/NJAgyr1vdLHg3AlGR9Y7mg3YwAaB/Q=)
3: txhV4jAB0u0krXb4kFMl_-o4obY.roa (hash: s+N5nLT8dkenkTXD8VPGodvyzkSe6kSpR2hC6MCplu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:49:05:46:2b:e9:ea:4a:02:ff:dc:e4:93:5d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Sep 10 13:01:02 2026 GMT
Not After : Sep 11 13:01:02 2026 GMT
Subject: CN=e5f325c227417d4c5c88260460dbf65762dc487f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:48:86:1c:45:16:c3:53:92:ea:92:b8:be:5f:
14:49:e1:ad:a4:27:eb:a4:ef:19:fa:20:e0:6d:d6:
e6:6f:c8:55:e7:65:6e:02:e4:0a:9d:9e:73:2c:d5:
bb:2f:71:72:48:6b:f3:93:76:a4:5a:e4:f5:32:41:
1c:b9:4f:8b:68:8b:ab:04:74:9d:55:de:b2:08:e8:
1b:41:8c:d3:5a:b5:08:ec:12:8b:4f:60:0d:9a:89:
2e:89:54:f8:50:53:95:73:51:cc:95:e4:f2:a5:62:
11:f4:06:0b:50:94:ce:ed:06:5b:7a:f6:b4:08:be:
01:01:c2:52:48:7b:56:57:52:38:e0:5e:17:b4:20:
6b:9c:77:6f:de:9b:75:2f:78:fd:78:bb:f2:75:36:
76:c2:20:ff:f1:84:d8:68:3e:19:85:67:d6:5e:14:
6b:ad:8f:b7:05:ab:5e:d0:11:12:a9:c6:56:1d:c8:
08:1f:3c:ab:8e:b0:b7:b6:32:fb:5b:b0:ac:fd:74:
fa:af:07:eb:84:d6:55:cb:cd:32:84:a7:94:fe:19:
10:99:f7:23:6b:27:52:bf:f5:2b:2e:9e:6a:ed:7c:
c1:3d:da:55:0b:a4:65:dd:f9:91:eb:69:06:5e:49:
bd:c7:54:53:c1:40:02:73:cb:c7:74:30:ce:1c:a0:
a5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:F3:25:C2:27:41:7D:4C:5C:88:26:04:60:DB:F6:57:62:DC:48:7F
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1b:66:03:3e:5e:b2:9a:68:7a:e9:24:a0:63:ec:87:02:18:
b2:4e:90:31:3d:8e:89:cb:87:c9:55:46:8e:7b:5a:96:48:98:
b3:84:dd:6c:87:57:b4:3a:4c:c1:96:c9:3a:c5:54:a0:f7:60:
5f:4e:ff:ef:a1:59:00:57:71:03:22:79:84:09:6e:82:99:a1:
a9:db:aa:f5:b0:9f:48:13:ea:b3:3e:c5:e5:9b:f0:9b:b5:c3:
e3:1c:89:55:03:d7:8b:d4:50:ef:7d:cd:cd:22:f3:94:ba:c1:
9d:39:59:9e:4d:9f:36:cb:e8:51:af:f1:e7:a4:c2:4c:04:39:
d0:56:e2:b8:a1:c7:1e:be:bd:b4:de:ca:4f:24:c9:de:fc:b2:
c3:f6:3d:57:e7:eb:83:75:00:3a:eb:4d:a8:d6:8e:af:af:f9:
7a:f4:70:21:e1:45:d3:a3:73:86:90:38:e7:d3:68:cd:9f:2b:
b6:a6:53:2f:60:67:43:a3:63:16:36:65:78:dd:05:c2:0e:79:
e1:88:d7:27:0d:bd:59:b5:21:87:94:16:5e:0a:6c:cc:0e:5e:
45:16:66:84:7c:ad:4b:8b:79:38:28:71:01:a8:08:77:ec:cf:
bf:9c:e2:6d:3c:3c:a3:5b:32:9a:1d:ee:be:04:15:4a:e9:0f:
96:aa:0a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:39:01 2026 by rpki-client