Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
File: _xukAAfM3NCTDxor3EsC4plFdno.mft (raw, json)
Hash identifier: lTMi8RkfKVdu0uEQmJIpBKCEotEMi8VOM433zDhQP4M=
Subject key identifier: 59:09:FD:3F:B5:40:C3:BD:F0:42:16:F7:AD:D5:38:80:FB:37:C5:35
Authority key identifier: FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
Certificate issuer: /CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Certificate serial: 01A0AC7357600AFC5002415C700E8F58DABD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
Manifest number: 1A5F
Signing time: Wed 16 Sep 2026 23:00:35 +0000
Manifest this update: Wed 16 Sep 2026 23:00:35 +0000
Manifest next update: Thu 17 Sep 2026 23:00:35 +0000
Files and hashes: 1: _xukAAfM3NCTDxor3EsC4plFdno.crl (hash: NYTDaikdjmE9lRu5gUK3D4lh2OP8m8gYiStTPGDJgJI=)
2: w99y4hewi91ft6cwvKNdLfccWvI.roa (hash: hVyVHtHx29BIURMLUBs5I7jbwrsqatz5PdTOMV6ZOCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ac:73:57:60:0a:fc:50:02:41:5c:70:0e:8f:58:da:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1ba40007ccdcd0930f1a2bdc4b02e29945767a
Validity
Not Before: Sep 16 23:00:35 2026 GMT
Not After : Sep 17 23:00:35 2026 GMT
Subject: CN=5909fd3fb540c3bdf04216f7add53880fb37c535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:14:1d:9f:20:92:05:72:0e:74:0b:d1:a4:09:
9f:3a:f6:bb:ff:c2:4a:fe:e0:32:9b:36:ff:c0:ea:
9e:4f:c7:f1:05:e6:2e:c3:6e:f5:24:f2:98:72:12:
f3:25:10:bb:2d:92:6e:ae:81:52:61:da:c7:25:f0:
dc:f8:2d:55:d4:11:a1:da:8c:e1:5c:09:ee:d0:53:
9b:22:a9:fb:a6:97:7b:f7:77:91:aa:dd:4f:93:65:
56:7b:6c:85:48:58:04:51:f6:d4:98:76:20:72:61:
f5:4a:f5:16:c9:9b:9b:92:b1:d1:a8:79:50:95:d9:
32:8d:c0:fb:39:89:4d:1c:d7:da:5f:dc:bc:06:aa:
6a:f8:ca:f5:ca:f2:f7:31:f8:8b:46:6e:85:ed:e3:
78:ea:66:dc:73:95:61:9b:4f:1e:54:90:ee:82:53:
4c:09:2b:b1:45:75:9b:9b:b4:9b:c0:a0:55:b0:1d:
a2:da:77:02:a4:ca:0b:0d:1b:76:9c:48:0b:c3:cb:
0e:03:46:9a:6c:cf:2d:bd:e9:f5:d9:4a:37:bf:ff:
e1:d4:f9:1d:8d:ee:0d:21:b4:40:1c:40:e2:a8:50:
8b:db:7f:5a:15:ff:bc:ed:df:f1:7e:ac:2f:15:80:
96:ed:d7:bf:59:cd:49:c4:1c:f7:74:9a:79:db:98:
63:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:09:FD:3F:B5:40:C3:BD:F0:42:16:F7:AD:D5:38:80:FB:37:C5:35
X509v3 Authority Key Identifier:
keyid:FF:1B:A4:00:07:CC:DC:D0:93:0F:1A:2B:DC:4B:02:E2:99:45:76:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xukAAfM3NCTDxor3EsC4plFdno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/060720-7320-49b5-89ab-8d2a653ba999/1/_xukAAfM3NCTDxor3EsC4plFdno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:99:93:af:f8:72:13:d9:28:70:f2:a0:d5:68:e3:b7:3a:36:
c3:79:dd:b8:fe:1c:ca:d4:f5:07:07:ad:6f:ba:9e:30:4f:fe:
18:cd:89:0a:6a:b8:fa:f8:d2:41:ab:fb:db:94:91:93:2a:e6:
b8:79:0e:d7:d6:08:0d:5a:54:2e:4b:ec:91:a8:b8:f5:28:e8:
fa:9b:7c:89:7d:94:15:0b:93:b7:5f:64:d9:6c:a9:43:ae:e6:
97:86:12:bb:3c:cf:a8:9f:5f:a7:ec:bc:b5:4c:ae:fb:d1:5f:
fc:d8:b8:6e:15:98:1f:5b:bb:20:a7:c3:de:fc:87:36:37:c9:
9d:98:d1:fb:f8:2d:1a:ce:db:1c:06:94:b1:84:e6:f1:47:99:
60:b9:6f:17:a4:0f:7c:87:9a:a1:13:06:02:a9:de:87:2a:80:
72:6d:c3:a5:72:76:36:00:a2:d7:05:8f:7b:87:8e:cb:39:89:
03:c9:fc:02:ff:8b:96:09:7a:0a:de:54:a7:b3:cb:76:86:e8:
2e:8b:87:3b:97:aa:11:1d:09:f6:2a:47:39:d9:05:9f:30:00:
ba:f7:11:56:ab:6f:65:99:2e:dc:25:34:dc:72:41:a2:57:67:
0e:75:d0:12:bb:cd:43:59:35:09:dd:3c:d2:93:72:47:c9:af:
0e:d3:23:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 03:15:22 2026 by rpki-client