Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
File: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft (raw, json)
Hash identifier: ARY3FZyiHdwf1cWAVKvvtCgol7yu7ZDEGT9yFFNoCAM=
Subject key identifier: 52:91:15:BE:DE:A9:21:5E:5A:4A:6F:76:A1:B6:38:3C:BE:56:76:46
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 01A08B6813EA4DCA56AB94BF2052094221BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 13:00:48 +0000
Manifest this update: Thu 10 Sep 2026 13:00:48 +0000
Manifest next update: Fri 11 Sep 2026 13:00:48 +0000
Files and hashes: 1: 5i2TAh2og4TXto7xyAcopWr_UMg.roa (hash: ZekBhPcyoCd+84YvBPa87l2ubLNdolD6vu0bwY9F0iY=)
2: 8sy7RPYdN9OOw5GeBoNUqLHEJwg.roa (hash: Hl1lQvcDtC+ikOs/Ko0nJQFgSRezGLcK7o1ZONxr73k=)
3: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl (hash: NyOtosLmvyO9Z2H50BbLpSV5J0nEtk0XFtvIQC5pT90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:68:13:ea:4d:ca:56:ab:94:bf:20:52:09:42:21:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: Sep 10 13:00:48 2026 GMT
Not After : Sep 11 13:00:48 2026 GMT
Subject: CN=529115bedea9215e5a4a6f76a1b6383cbe567646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8d:1f:19:49:68:68:11:e7:8d:c0:5a:32:db:
82:23:93:98:93:f0:60:f3:59:22:b6:d9:ab:5f:2f:
ed:1a:a1:02:91:f0:45:b8:43:4f:1e:80:83:ea:2b:
b2:74:96:ad:c3:92:5a:e6:d9:84:e1:34:19:90:ba:
d1:84:fb:ea:6e:5e:1f:23:27:79:0c:34:b0:13:c2:
15:fc:fd:fb:69:0d:7d:a9:d8:3d:12:fc:e0:b9:83:
b5:16:5e:87:64:25:c5:31:99:7b:36:b0:e3:d2:06:
66:73:c5:56:54:9f:a1:39:64:0d:44:1b:3f:e8:3c:
a1:8b:27:9b:76:76:03:ad:6e:f8:18:36:21:11:99:
30:ab:8d:83:d2:75:5e:6f:ca:4e:b6:20:09:3b:b9:
4f:51:2b:d5:89:ba:5c:14:45:e9:d6:a0:8d:3d:24:
7e:3d:2e:66:58:6b:5e:e9:9a:56:40:e2:5f:44:09:
09:0e:2b:b2:d5:f3:d8:ff:17:e6:d7:aa:33:0b:1a:
fe:e5:59:84:b4:c4:59:df:80:ae:08:3a:49:dd:ff:
3f:8d:39:3e:f9:bc:bc:a9:3e:78:e3:7b:47:d0:ae:
b1:f5:44:40:a9:35:7c:a4:b1:b2:5d:eb:68:f6:78:
cd:1f:f6:c5:53:24:f9:8b:f0:ce:a0:b4:ef:59:23:
7f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:91:15:BE:DE:A9:21:5E:5A:4A:6F:76:A1:B6:38:3C:BE:56:76:46
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:c0:5d:7d:e0:5f:80:78:24:9f:c0:67:9e:74:30:e3:1a:13:
e8:84:d1:25:66:d2:37:4e:4a:3f:87:95:cc:13:0a:9d:0f:60:
c9:22:6d:9a:5f:80:3d:ac:49:28:bf:41:3f:24:81:f1:55:f1:
92:a9:e4:9d:34:30:a9:18:4a:1d:df:c2:ea:d8:3d:30:61:c1:
39:c6:db:f0:77:8e:4a:31:4e:06:1f:d0:4a:75:f3:f0:9e:0f:
a8:a2:6b:22:0c:b4:1e:29:a9:8f:19:c4:6c:7f:45:96:d8:b4:
a9:4e:d8:e7:4a:cd:61:bd:82:c1:41:d6:5b:eb:57:7e:c2:89:
6e:85:89:4b:f2:cd:ec:2b:63:a8:ca:e4:4f:37:9f:5f:72:d7:
0d:35:a5:f7:cf:a2:ab:36:ae:1e:64:4d:2a:e1:8e:32:1b:81:
ff:2b:ff:ab:60:09:b1:2a:f6:e7:0e:52:c2:b9:b1:86:65:16:
48:6e:a6:c0:9f:be:ea:32:7d:a3:ff:a3:77:60:30:13:85:fd:
cd:06:6c:1e:8b:0e:51:4c:90:ff:96:1c:fa:15:55:d5:85:f3:
72:9d:f3:77:04:52:0d:27:b9:77:b9:5d:94:72:23:95:67:8d:
30:4c:cc:02:cb:b4:e3:b1:ef:d8:96:60:57:3d:a9:b2:7a:2c:
04:04:16:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:39:18 2026 by rpki-client