Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
File: XqxQs0srr9xG3Ft105vA3Ymmjyw.mft (raw, json)
Hash identifier: 22KrAIHQrgb6t+PWiG7U200U4K3a3OfWWewBvrgi3G8=
Subject key identifier: 12:52:25:F5:5C:E2:98:E9:FC:5C:8D:4B:6E:E2:AF:BD:8B:06:46:72
Authority key identifier: 5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
Certificate issuer: /CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Certificate serial: 01A08CE93426E350A522222D7BD04AB95462
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
Manifest number: 0509
Signing time: Thu 10 Sep 2026 20:01:28 +0000
Manifest this update: Thu 10 Sep 2026 20:01:28 +0000
Manifest next update: Fri 11 Sep 2026 20:01:28 +0000
Files and hashes: 1: GDJGSas5OY6Fv_5pyu_DarE_sDQ.asa (hash: afD0B4wX8ENk5NOyojNKqywcV5cJB2IJVzbUoTBJNnw=)
2: XqxQs0srr9xG3Ft105vA3Ymmjyw.crl (hash: FnkhHm+h32vTvnUtzci2MhNjVCAQ9+una54cRx5+lZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:34:26:e3:50:a5:22:22:2d:7b:d0:4a:b9:54:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eac50b34b2bafdc46dc5b75d39bc0dd89a68f2c
Validity
Not Before: Sep 10 20:01:28 2026 GMT
Not After : Sep 11 20:01:28 2026 GMT
Subject: CN=125225f55ce298e9fc5c8d4b6ee2afbd8b064672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9c:c9:e6:0a:60:26:1c:1e:b5:c8:5d:ff:70:
de:c3:d7:78:93:6d:59:54:db:cd:aa:35:da:5f:47:
40:9d:ea:9b:2a:9c:a6:ab:b1:18:a6:45:8c:24:5b:
39:d0:78:f6:b5:48:2e:49:b6:32:1e:bd:19:5c:4c:
ff:52:ac:92:5d:8a:1d:24:53:09:50:78:15:a0:eb:
cd:af:cf:f5:4a:12:f3:5b:65:62:c2:97:77:77:f9:
e2:ff:81:e3:25:ed:6d:a3:69:0f:3b:81:f6:59:6c:
90:1c:c3:14:3a:70:ff:5e:e1:54:fd:0c:fd:d3:8f:
9d:55:5c:32:db:42:0f:45:2b:16:7e:a9:38:e3:40:
ce:54:15:ba:ba:ad:57:ba:6f:ba:f3:d0:62:cd:80:
b1:b4:bd:72:58:cf:d8:4c:3a:5c:2c:64:62:07:22:
37:b0:01:05:37:77:0e:8c:a3:90:86:f0:cf:b9:b5:
c1:9e:7c:53:9d:8b:aa:7f:42:e6:53:47:7a:35:69:
51:e9:5c:b2:d9:ce:ee:bb:bd:a5:b9:b5:d0:15:ad:
06:a9:f9:ee:dc:cc:3f:d3:42:83:d9:a5:9c:3b:3f:
7e:42:30:89:62:e3:8c:15:ac:94:bd:d9:ab:49:80:
c5:fa:db:37:5b:30:fd:30:9c:80:4f:28:41:f7:1b:
ac:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:52:25:F5:5C:E2:98:E9:FC:5C:8D:4B:6E:E2:AF:BD:8B:06:46:72
X509v3 Authority Key Identifier:
keyid:5E:AC:50:B3:4B:2B:AF:DC:46:DC:5B:75:D3:9B:C0:DD:89:A6:8F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XqxQs0srr9xG3Ft105vA3Ymmjyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/0f970f-6ac3-41bc-b6ff-7058f11fac82/1/XqxQs0srr9xG3Ft105vA3Ymmjyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:72:45:47:a0:0b:dd:98:92:12:d0:16:67:21:bd:b3:3f:1b:
26:1d:61:19:02:ad:e9:36:66:b1:9f:b2:92:5f:2e:26:3b:cb:
6b:6d:b7:c1:d8:75:b0:0a:b6:f4:36:6e:7c:0d:b0:88:72:fc:
a7:09:d9:cb:01:4c:af:92:a8:ea:ae:d3:3f:94:44:45:ac:11:
e1:ef:16:26:58:74:cb:5e:29:20:64:cf:b2:65:a5:83:17:97:
19:9e:96:ac:39:29:45:7d:81:b0:ff:26:1d:2f:ea:1b:4b:f1:
04:03:90:52:bc:3f:32:3b:c5:b7:ad:b5:97:31:a9:ac:51:d5:
85:b8:f2:8e:31:6f:a1:60:fd:21:d6:46:52:e0:b5:95:71:fd:
d3:35:af:18:0a:17:da:c6:67:e8:67:ae:04:8d:7c:89:57:db:
a9:c4:99:1b:d8:34:8d:4d:4f:d6:97:7c:fd:68:53:09:2b:49:
9a:5f:e1:ab:45:fc:77:df:8a:1d:b2:2b:4b:59:3c:89:61:f8:
56:00:a5:33:75:93:3e:17:2a:72:fe:53:77:c2:c7:06:3f:15:
df:2a:a3:49:75:2d:43:ab:90:6c:80:b9:6f:58:4e:e5:dd:c0:
83:f5:07:c5:64:90:4d:61:6f:6c:bb:ee:35:cf:64:79:97:4f:
c6:22:39:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:48:24 2026 by rpki-client