Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier: YlBZK1eCWHa5jWNfzwEf9xZ0ssocjuhBRbFpJmJ2Rk4=
Subject key identifier: 70:39:0D:4D:F9:8B:9C:C7:31:C6:EB:18:D3:17:03:77:81:C5:D6:80
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 01A06E7141352E612765EFDAC915C4586E2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number: 19AA
Signing time: Fri 04 Sep 2026 22:01:51 +0000
Manifest this update: Fri 04 Sep 2026 22:01:51 +0000
Manifest next update: Sat 05 Sep 2026 22:01:51 +0000
Files and hashes: 1: 4GacYlC1xTXBA2gZGI4h12SFY-0.roa (hash: NjXRgF24DIZuh863duD3ZThupdmVygwzxLiXyqu402Q=)
2: E0wwloupObPs9_O7vd7bSguVl6w.roa (hash: db081CMNM92GGYGAY4P5+DovYW2JE0c6H2IK3KWF7l0=)
3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: dEnF0L24nuD7xcsWgnt79dpl1u9EwqaEqKH2swyo4M8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:71:41:35:2e:61:27:65:ef:da:c9:15:c4:58:6e:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Sep 4 22:01:51 2026 GMT
Not After : Sep 5 22:01:51 2026 GMT
Subject: CN=70390d4df98b9cc731c6eb18d317037781c5d680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3a:c3:7a:23:d0:45:77:32:70:ac:40:1b:c7:
51:e6:06:70:73:47:b7:a4:0d:66:2a:31:4f:21:2e:
a9:f3:29:44:f2:e9:4d:b5:0a:85:fc:3c:44:0a:08:
06:ef:37:53:c1:ac:39:0b:0c:5a:a5:5e:72:c3:11:
10:1e:5e:01:68:f8:96:b4:ce:0a:24:08:b0:4c:d1:
f3:16:e0:dd:62:bd:72:7e:cc:38:20:bb:82:e8:e0:
f4:28:74:b4:42:b5:54:bb:ac:3c:42:a0:af:fb:d2:
da:6e:7d:60:d8:6c:f7:0b:74:d5:7b:cf:28:20:09:
26:bc:72:95:a8:44:ec:ff:bd:0a:a4:c1:35:16:e3:
4b:c8:7a:34:60:64:b1:2b:4f:5e:c3:9c:6d:9c:4f:
cf:4a:77:ec:c5:8c:58:55:c4:e2:2d:07:30:9f:cf:
14:2a:91:4d:27:10:f4:b3:08:6c:bc:b8:32:be:e9:
75:7e:0a:63:a2:97:9d:cb:51:14:17:55:f0:95:f4:
27:b0:33:f4:79:6c:2d:d4:c3:cd:a6:ab:a3:44:7a:
c4:10:1d:22:5c:c3:ea:50:72:47:b6:d1:4d:07:d1:
9f:92:26:25:99:19:59:94:0c:e4:01:5b:36:e8:a5:
7a:3f:ae:e4:73:ed:0d:b6:03:5b:25:69:0b:11:9b:
e8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:39:0D:4D:F9:8B:9C:C7:31:C6:EB:18:D3:17:03:77:81:C5:D6:80
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5d:cd:30:34:0c:73:8b:d6:d4:7f:34:08:a0:fd:94:7f:73:
7b:02:6a:78:52:63:f9:ea:e7:16:f0:66:b3:6d:ad:1b:51:b7:
55:87:e7:42:aa:97:82:b0:c4:ca:f3:59:e3:cf:8f:57:8d:d2:
52:a0:b6:0c:9e:f7:6b:e0:a5:2c:04:d0:5d:8b:c4:eb:6a:1d:
73:02:a4:c9:40:f6:ee:f3:2c:ca:ba:84:39:60:8c:ab:76:c9:
98:36:66:50:e2:2a:be:05:f7:a6:35:ff:4e:e3:59:fd:8d:62:
8f:36:38:aa:cf:83:49:59:07:00:63:41:83:25:6a:da:52:ee:
c0:c9:02:9f:3c:9d:83:c7:c2:7a:c2:7e:8f:e3:c0:ed:5c:16:
85:a3:f6:12:90:a5:93:03:55:f5:88:c0:a0:e6:38:5f:5a:44:
e9:03:09:d8:12:8e:50:f0:76:77:18:b0:99:8c:0d:89:c7:96:
59:e7:de:db:b9:f0:5c:48:87:34:40:96:1b:0a:6a:e2:e1:01:
bf:a6:79:e9:2b:fe:60:63:04:d0:79:e6:93:90:ca:de:37:57:
4b:d8:29:8a:32:ca:2d:96:c1:ee:ac:ed:69:c5:8f:53:83:34:
d2:a4:1e:f8:73:7a:ab:14:fd:14:b7:a8:ac:99:12:2c:10:8b:
9e:0a:1d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:46:16 2026 by rpki-client