Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
File: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft (raw, json)
Hash identifier: QUTeNsbu2sgYlgGYfBg5IPDE3Dj+Ih7mc0Z0POyKj7I=
Subject key identifier: 7A:13:9C:B1:4F:30:14:9B:28:77:28:25:17:AA:B6:7A:AB:A2:0A:48
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 01A089E7F155A42DD92077828FEF8AFD98AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
Manifest number: 195B
Signing time: Thu 10 Sep 2026 06:01:14 +0000
Manifest this update: Thu 10 Sep 2026 06:01:14 +0000
Manifest next update: Fri 11 Sep 2026 06:01:14 +0000
Files and hashes: 1: 7oVXpAJyEuxYNuHmvd9aRWGoKfo.roa (hash: aOBhiDvMAxK+XYQzQVgLlx3/xd+jEySWQ2727ke/inY=)
2: Ey3m-lZEA987v9BNrn8LK_J0g00.roa (hash: bt6vCGnGpQLk0MF/D7iRAV+4/yJjQaAzG7ZTnezd07w=)
3: XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl (hash: vh2SunFDhcuCDBjUFAZKO2RQyaZJVS3zQXM7OK3OxY4=)
4: YTkSY80BXrrm0yOSSyQ4NcWfFCg.roa (hash: Srwxxn9T4n8eBKaxltWuAJ0FzIn1uI4bI96/Rm2hnBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:e7:f1:55:a4:2d:d9:20:77:82:8f:ef:8a:fd:98:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Sep 10 06:01:14 2026 GMT
Not After : Sep 11 06:01:14 2026 GMT
Subject: CN=7a139cb14f30149b2877282517aab67aaba20a48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:51:6d:d2:02:5b:db:0d:88:8c:26:07:57:f1:
31:a0:83:14:bb:40:2d:a9:78:32:51:82:0a:7f:eb:
9e:29:fc:73:a5:25:22:4c:08:0b:ef:48:9f:46:ba:
de:b8:64:8a:2b:99:dc:9b:3c:fe:e9:ad:f7:5e:46:
6f:23:95:ba:fc:e1:35:86:0a:43:1e:07:45:02:40:
ed:45:f0:8b:54:03:98:72:7b:12:8c:c3:7a:18:53:
46:0f:61:09:4c:2c:d7:f6:b8:6d:7c:7f:8a:e3:0c:
fb:94:96:49:7d:8d:ca:08:3b:57:82:89:b0:a6:db:
2b:81:be:55:0c:cb:33:39:9a:48:ab:d4:f8:57:eb:
3c:dc:0e:3c:9a:6d:f4:02:75:a5:cc:b6:03:c7:07:
4d:1b:b3:ee:0d:00:e9:e5:b8:e0:8b:9c:71:4f:5c:
6f:89:21:42:ff:c4:37:25:b4:d0:00:1c:ee:92:17:
2c:94:57:d0:c0:24:57:0c:ee:cb:84:d5:73:31:30:
34:88:3a:11:3e:43:7d:61:0e:e1:33:35:6c:ef:f5:
20:b5:86:cd:c7:6e:f1:77:53:27:f8:cb:89:18:ee:
19:d2:1a:e7:4f:8b:a0:8e:34:44:4e:3e:40:58:27:
bc:dd:80:2d:3a:de:1d:fd:fd:61:81:cb:4b:10:75:
51:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:13:9C:B1:4F:30:14:9B:28:77:28:25:17:AA:B6:7A:AB:A2:0A:48
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:da:07:ba:1f:22:9a:3e:53:99:54:1a:e7:9c:ff:9f:1c:f7:
be:0b:85:91:a3:4d:73:f3:80:62:3e:42:3e:df:35:64:18:ff:
ea:a6:95:2f:b6:dd:ed:60:e3:73:72:c3:8a:13:9f:7a:12:08:
6f:1e:fc:ad:89:87:d8:34:bb:82:47:60:63:dc:f5:62:99:cf:
7f:e7:1c:84:b1:8b:6c:b3:47:51:bd:09:d0:b6:7f:de:37:2d:
24:f3:14:20:75:df:6b:b8:ec:d0:a0:08:dd:4a:dd:65:c4:79:
7b:cd:16:db:9f:e7:f9:c0:f8:61:d1:91:0a:22:81:0e:0d:7b:
c0:d3:d3:e1:b5:0c:7c:1e:b8:d1:41:73:70:65:4a:c2:21:22:
e4:68:71:bb:33:4f:26:9a:54:49:09:95:db:ac:6e:9e:78:f6:
25:37:c0:0e:ad:ca:7c:b4:6c:d1:0f:de:82:02:96:cc:e1:b0:
51:bf:c0:a5:e9:58:70:d4:57:32:c7:17:99:d1:32:02:78:66:
0b:d8:74:1b:a5:fa:64:82:3e:63:8b:54:0f:ef:36:38:7e:77:
c1:f7:9d:6f:64:b2:10:53:f6:9c:e2:d0:1f:07:8d:32:cf:e8:
4a:2c:4e:31:ba:53:bc:af:f1:9b:b3:c1:2a:b8:ba:8d:6e:97:
8e:09:79:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 12:28:06 2026 by rpki-client