Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
File: Xquekv3YH0FBR5edBTHibe3SYqw.mft (raw, json)
Hash identifier: VNKeUEynt3iQkaGGkLSZUl55fVbjMJiyXipkBcHl+U4=
Subject key identifier: 69:F9:A6:24:7B:F7:15:5C:88:7B:D5:A9:BB:06:15:CB:80:15:FD:16
Authority key identifier: 5E:AB:9E:92:FD:D8:1F:41:41:47:97:9D:05:31:E2:6D:ED:D2:62:AC
Certificate issuer: /CN=5eab9e92fdd81f414147979d0531e26dedd262ac
Certificate serial: 01A08C0D1235D3030B7CE3345CB2183A3D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 16:01:01 +0000
Manifest this update: Thu 10 Sep 2026 16:01:01 +0000
Manifest next update: Fri 11 Sep 2026 16:01:01 +0000
Files and hashes: 1: Xquekv3YH0FBR5edBTHibe3SYqw.crl (hash: s6ZuaJSoPK1KfrXQM8XXqL+zon8VLJna+7oltCAVxnA=)
2: wZfLh5WSFAXKinsiyS1145pWxAk.roa (hash: t/km2qU0O3WotdafAm5WAIJsGqYsS42YCnAubnFGkjY=)
3: yWSxVMHaA7K49CJJasfPgxf0K9U.roa (hash: Bq8kCXwpBRnHBgJBCumGdqGaVlW+LIt6xmOmyuq+Mck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0d:12:35:d3:03:0b:7c:e3:34:5c:b2:18:3a:3d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eab9e92fdd81f414147979d0531e26dedd262ac
Validity
Not Before: Sep 10 16:01:01 2026 GMT
Not After : Sep 11 16:01:01 2026 GMT
Subject: CN=69f9a6247bf7155c887bd5a9bb0615cb8015fd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:a5:34:2c:89:df:38:12:b3:55:32:79:ba:
b2:c5:29:9b:5f:fa:45:77:28:e2:dc:46:a9:3c:10:
29:ad:13:c5:70:14:3f:43:4d:6e:5a:c0:02:54:a0:
e0:f2:f1:c4:d7:13:f1:da:29:82:b6:8d:67:19:41:
12:3f:ca:e2:7a:0b:ad:b3:cc:13:06:ba:99:d7:71:
cc:2d:87:eb:c2:a1:1b:74:e8:a1:bf:1c:ca:f8:c8:
a1:da:5e:85:c8:cf:90:dc:3e:31:9f:75:7a:03:05:
af:ef:c3:cc:dd:0d:d5:98:8e:7c:90:97:e9:46:a9:
b2:ce:ad:b3:be:8d:a3:9e:56:c6:dc:38:20:76:20:
22:c8:9c:ad:ec:92:e6:b4:43:fd:62:50:01:42:ed:
a4:d0:7d:a2:8f:c1:f1:21:e4:34:2a:42:3d:28:d2:
a9:b8:25:02:fb:de:e1:54:f4:94:9b:6f:0f:77:7e:
8a:7c:ae:be:57:aa:7d:ac:fd:33:49:d2:d3:96:dd:
74:01:3b:6a:fc:c4:eb:7f:c3:bd:3e:7a:ff:0c:15:
3b:26:30:bb:39:c8:e3:f6:ae:21:56:1a:ec:cd:0e:
64:f9:2e:5a:9e:e9:a2:f1:f0:f7:5a:e1:3b:d6:a5:
c4:1f:48:cc:a9:09:77:69:5e:24:6d:a5:d1:bc:53:
87:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:F9:A6:24:7B:F7:15:5C:88:7B:D5:A9:BB:06:15:CB:80:15:FD:16
X509v3 Authority Key Identifier:
keyid:5E:AB:9E:92:FD:D8:1F:41:41:47:97:9D:05:31:E2:6D:ED:D2:62:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xquekv3YH0FBR5edBTHibe3SYqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/ad3586-a028-4746-b3da-814856e1b1f4/1/Xquekv3YH0FBR5edBTHibe3SYqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:76:2f:1e:36:5a:dc:97:5e:f5:e4:a0:65:f5:ca:e6:17:a9:
a1:f6:b6:1e:71:5b:77:24:c4:71:8a:0e:3e:84:41:e7:c9:aa:
53:31:5f:9a:b5:15:08:f6:70:6a:30:7a:8c:60:9b:86:16:98:
98:94:05:ba:9f:cf:fc:f1:6d:7c:fc:76:79:05:86:e8:c3:3d:
94:dc:a5:f0:93:8d:be:e9:b7:7e:07:8d:e3:8a:40:bf:14:7c:
91:cd:a1:c8:bf:3d:d8:ae:a0:76:e0:81:0b:3b:57:34:a0:cd:
15:09:ae:6f:39:97:58:8b:2f:b1:aa:e6:ed:06:f5:a3:0c:36:
4d:53:e1:7d:ba:fb:24:f3:4e:66:33:97:d8:e3:fd:5f:cd:6d:
8d:e0:c8:ad:41:aa:da:b8:f2:b9:b0:09:95:c7:aa:44:1e:71:
a9:3b:4f:4a:18:12:b2:8b:df:ef:f1:71:f0:73:1d:9e:c4:0f:
f4:a6:fc:45:f7:30:b6:c8:02:57:ea:0b:ec:6c:b5:15:b7:1b:
4b:d7:8c:7b:2b:54:80:51:7c:9e:af:9d:37:52:29:7d:f4:aa:
95:83:13:a2:7c:14:22:97:99:66:61:9e:5b:7f:9a:87:31:e0:
49:a1:40:03:61:67:e9:d9:25:d0:ec:07:71:79:f4:36:93:c1:
43:2a:ad:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:55:56 2026 by rpki-client