Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft
File: XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft (raw, json)
Hash identifier: Vk1GEcKM8oAaRGcLEcSCXR5zFXCTkVwFCdZAPYLBxnU=
Subject key identifier: DD:49:65:7D:1C:94:71:17:04:58:EF:FB:CE:46:4D:65:78:F6:F7:E2
Authority key identifier: 5D:38:EB:29:59:56:07:ED:4D:8F:4D:9B:F0:6C:BA:42:99:26:86:4A
Certificate issuer: /CN=5d38eb29595607ed4d8f4d9bf06cba429926864a
Certificate serial: 01A08AFB30CD17D1443C3F914DB701BEBACC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft
Manifest number: 101C
Signing time: Thu 10 Sep 2026 11:01:52 +0000
Manifest this update: Thu 10 Sep 2026 11:01:52 +0000
Manifest next update: Fri 11 Sep 2026 11:01:52 +0000
Files and hashes: 1: XTjrKVlWB-1Nj02b8Gy6Qpkmhko.crl (hash: 9s5XrlPgh7Wp1ZXEP1R0v1PzqFSB/7wshcnvd7R0aNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fb:30:cd:17:d1:44:3c:3f:91:4d:b7:01:be:ba:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d38eb29595607ed4d8f4d9bf06cba429926864a
Validity
Not Before: Sep 10 11:01:52 2026 GMT
Not After : Sep 11 11:01:52 2026 GMT
Subject: CN=dd49657d1c9471170458effbce464d6578f6f7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:6e:ee:ed:f5:89:fa:40:d8:31:67:5c:3c:ce:
23:11:87:e3:eb:e7:63:c7:30:fe:45:4b:b3:15:0e:
42:29:d3:e7:8a:0e:4f:43:ac:a4:bb:af:e6:62:c4:
cd:52:aa:9d:ce:e8:84:66:97:f1:45:cc:42:52:93:
41:92:de:f1:d3:5f:24:37:f2:ef:6d:dc:db:18:4c:
07:4e:ba:61:a5:a6:bf:1b:0d:cd:8f:42:db:2e:3d:
2c:9f:bc:ab:e4:6d:9f:56:28:e3:66:bb:c5:c2:3f:
e4:85:c7:7a:43:5e:a8:6c:6e:19:01:10:e1:54:d4:
ed:03:1f:26:c7:f7:3b:c7:62:2e:d4:e9:99:5e:3e:
60:56:05:bc:bb:73:0d:f2:1e:73:cf:f7:e1:4b:eb:
e7:c4:27:b7:ea:05:8a:86:73:86:23:2e:4f:2c:e6:
0a:49:53:aa:81:f8:fa:ad:ba:55:2f:72:03:e8:ec:
26:be:91:9b:7e:b2:0f:d6:0c:a6:a0:c0:5f:c1:05:
04:58:b8:91:e7:72:88:34:1c:ed:13:af:18:6d:00:
1f:c4:0b:49:f9:65:31:19:73:5a:b2:53:8d:e2:ec:
7e:60:3f:2a:95:7e:bb:b0:97:b2:46:c0:2d:b2:33:
fb:e2:ab:26:01:a6:e5:1b:3b:f8:e0:dc:52:6f:18:
92:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:49:65:7D:1C:94:71:17:04:58:EF:FB:CE:46:4D:65:78:F6:F7:E2
X509v3 Authority Key Identifier:
keyid:5D:38:EB:29:59:56:07:ED:4D:8F:4D:9B:F0:6C:BA:42:99:26:86:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c7ba95-9153-4414-ab0c-d24b4a5b1cdc/1/XTjrKVlWB-1Nj02b8Gy6Qpkmhko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:4e:eb:f9:ce:e4:5f:d7:e4:08:09:fc:34:9e:0a:dd:5f:11:
fb:64:2f:7e:e6:22:55:ee:27:f0:9d:f6:15:14:fd:7e:07:9c:
5b:c6:30:28:0c:12:be:e2:24:40:00:25:7d:01:b7:52:fd:61:
5f:64:cd:0b:9f:f6:f4:17:0c:42:fc:6b:e7:58:37:4f:ce:66:
26:74:87:2b:bf:8d:41:25:ae:63:00:2d:af:c3:bd:c1:4d:24:
d4:f8:02:b6:39:3a:98:cd:9d:2b:29:1d:ac:4c:a6:bb:c0:0d:
44:64:bd:ea:9e:f9:78:86:7e:5a:fa:26:db:0f:c2:64:6b:aa:
05:77:82:ff:26:6a:c8:51:fc:93:87:88:da:81:eb:bf:10:6a:
ea:9c:e4:a4:aa:ec:7c:0a:71:f9:29:7d:9a:35:13:43:28:5a:
84:70:85:6b:b8:88:f5:16:07:84:d7:ea:a8:13:0b:8f:53:e6:
76:51:89:67:2c:60:bb:45:15:65:c2:47:02:23:29:33:d7:b6:
b6:dd:5c:11:85:b3:7b:00:ca:1f:bc:6d:90:b5:5f:e5:80:67:
3d:18:b5:03:1f:2a:58:8b:78:bc:68:83:5d:60:ba:06:1a:38:
97:ba:dc:63:b4:88:3f:72:73:da:af:f5:f1:b2:5f:66:b1:7a:
39:dd:f9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:04:11 2026 by rpki-client