
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
File: Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft (raw, json)
Hash identifier: oiIddwpROc7uPI9ZpBNCofwcoxPGJaEIgPSpQO3jYzk=
Subject key identifier: E4:71:4C:DF:9E:63:F0:39:1D:DA:38:56:71:A4:3E:D8:18:07:18:DB
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 01A0B463C0AB009E2A499F88389D180B29B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
Manifest number: 1A7A
Signing time: Fri 18 Sep 2026 12:00:31 +0000
Manifest this update: Fri 18 Sep 2026 12:00:31 +0000
Manifest next update: Sat 19 Sep 2026 12:00:31 +0000
Files and hashes: 1: 3M28JHI7FacsIOAJQWmxce2Slr8.roa (hash: YkTIvgr/OPBfSq7cSMGcukiH55SIyz1JhUaAuApclZY=)
2: 7MeHuOHX_t0Y7M3OkiYTIbrWBmE.roa (hash: Odl4gnozu+3MVceJoIMFZfxLwPzuPyHk73z9Oo2EcD0=)
3: Gk3x3dMvMywr2S8J1gmXYe0hnoU.roa (hash: /bwOAvbGES0zjJv2PTCP3py4NDDoCXEMIJubC3y4gDQ=)
4: IK5t8ZtR9FmBC9B2Oc1q_FzsZ60.roa (hash: 99eWXzzKhZzYTyaPK2nn6KPekh7aMTWJKB401rZwNvg=)
5: Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl (hash: VxZdPJCsza2vhRktWHpJ8VagwGPrOw02SDkNnW8nf74=)
6: aqoU9zJ3XearIjlOINJlmfcvvuw.roa (hash: Sz6yVgzziCuFuMg8Vphcvorcn0t0kQDujyZ/W1bGUWw=)
7: kl3oy-dFL14cqnAqsoTUT2p-gAs.roa (hash: 2IH7sBJVtOHKhrFUONXV2aGCQkjnVLJ+vB9vvY8IEzA=)
8: kyQ4JI7k9YbINgfhHLT6m28Lt5g.roa (hash: k6gw+9YpfRZ8fBPrWOAfF6dmY/qo7leQ3UVRA8om9+s=)
9: qH5fLLWJkV1VZnXKxFAToZGD4BA.roa (hash: gujwjiPUnMht5bxbQJ8geZbpehgQ8vnJKIXcFg1nhbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 19 Sep 2026 12:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:63:c0:ab:00:9e:2a:49:9f:88:38:9d:18:0b:29:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Sep 18 12:00:31 2026 GMT
Not After : Sep 19 12:00:31 2026 GMT
Subject: CN=e4714cdf9e63f0391dda385671a43ed8180718db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:05:c9:05:2c:06:70:bb:65:3f:70:70:d7:
2b:b6:47:a7:6c:68:e3:ec:1e:94:d6:6e:b0:a3:a1:
b6:f4:6a:6e:3e:57:f2:76:a2:31:f7:a9:4f:09:94:
46:2c:6a:b2:f0:0d:5c:52:cc:94:b5:c2:6a:a9:bf:
0e:a7:48:16:09:ae:6e:9b:6b:13:1a:ef:e5:19:ef:
0d:68:cf:e7:d4:a9:a4:16:22:fe:48:2b:1a:7d:62:
be:01:5e:00:fd:ab:cd:6e:ab:8f:67:af:a0:df:11:
b0:a9:8d:1c:9c:dd:a6:c1:7b:81:19:63:d0:16:f8:
39:3a:71:94:77:4d:7f:6f:71:b4:ad:ad:1c:c8:09:
09:a7:f2:17:8b:4e:54:a3:8b:59:f8:5f:81:fb:f3:
bc:0b:dc:ad:2f:94:d5:4d:45:67:7d:a2:bf:0c:84:
83:41:d1:7e:78:b0:8d:c4:27:7f:62:7c:1e:84:01:
22:15:64:16:0c:08:15:3e:8d:a7:af:3a:f3:2c:29:
6d:20:2c:31:91:28:44:bd:2d:e9:e8:f2:ff:1d:31:
2e:4d:5d:82:02:a4:c1:0d:26:45:2b:e2:95:a6:00:
ff:0d:c9:5c:25:00:ea:fd:3a:69:d2:2a:f0:6d:e5:
65:35:a9:2c:f7:58:78:0a:0b:cc:9e:66:29:08:71:
f8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:71:4C:DF:9E:63:F0:39:1D:DA:38:56:71:A4:3E:D8:18:07:18:DB
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:da:f5:3c:7b:87:b7:b9:17:c6:fb:a5:ab:b9:df:e0:c0:d6:
00:86:79:55:66:ea:5f:0d:11:26:71:75:24:ba:7b:f3:95:c8:
b2:a2:ed:17:27:8a:45:0c:a3:3a:68:25:f9:59:00:ea:ce:18:
34:ec:4f:f7:9d:bb:33:58:6f:75:9e:4a:4b:9e:cc:14:59:bc:
17:29:b3:21:08:d2:b2:af:10:61:82:9d:7e:44:f6:ee:57:5d:
f8:72:a2:28:10:ef:f1:82:6b:b1:e6:af:2e:be:fd:88:2f:85:
42:1f:0d:88:ca:50:cc:98:45:31:71:1d:89:3f:7a:1b:2e:6b:
95:c3:5a:2f:db:ac:ec:e6:1f:39:67:f0:2b:62:b0:49:b5:bd:
e3:3d:47:f7:ff:85:a8:18:08:87:7d:43:6e:96:82:c8:86:34:
dd:6e:c2:ae:db:65:63:8b:1d:21:cc:f5:95:e5:ed:ec:0f:6b:
25:4d:98:ab:1b:e5:2d:dd:54:2b:f7:af:2a:fd:01:1d:92:e9:
6f:f1:12:37:83:24:ba:e1:cc:6d:68:4c:e6:04:76:f4:1a:5f:
e7:20:6d:6d:d7:43:63:d0:a1:a8:f6:58:f3:8e:59:25:dd:9f:
ec:f3:88:c6:46:e9:20:50:98:6e:26:fe:f0:b2:c1:43:46:83:
8d:61:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 21:53:14 2026 by rpki-client