Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: 3pTCRDOuP0zC7kr+vJRAL4sNxObbgq8zSLBvMUTH0Ec=
Subject key identifier: BB:F0:6B:30:4B:91:0A:10:FC:F8:D3:06:29:98:2D:61:F1:1B:E6:A6
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 01A08BD62A6AA78462C03B680CE8A7F0CAF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 1822
Signing time: Thu 10 Sep 2026 15:01:03 +0000
Manifest this update: Thu 10 Sep 2026 15:01:03 +0000
Manifest next update: Fri 11 Sep 2026 15:01:03 +0000
Files and hashes: 1: PzMpMCVPdUDUUH8GTuka9keIPNQ.roa (hash: IKEP0LVD3JdV2nQIZoc3FzX3XZlJgMd0mFQnJDaVjxI=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: bT5Js6GradcjdBD5yIC7QDpnKtvtsJbWQQSAtr57Vnk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:2a:6a:a7:84:62:c0:3b:68:0c:e8:a7:f0:ca:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Sep 10 15:01:03 2026 GMT
Not After : Sep 11 15:01:03 2026 GMT
Subject: CN=bbf06b304b910a10fcf8d30629982d61f11be6a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9d:63:b4:36:91:03:73:9a:2b:eb:bc:b2:21:
45:af:f3:30:06:2b:3e:33:b0:e0:1b:89:7a:3a:27:
13:14:04:d0:07:c6:48:c1:72:49:cd:98:3d:63:7d:
1a:54:b0:9a:74:20:b2:15:56:5a:11:a5:29:d1:cf:
bd:58:62:6c:f9:30:49:8e:51:9e:47:3e:df:c5:67:
01:cc:f0:6c:8b:1b:bc:9b:6d:3b:a4:dd:d1:d7:2e:
54:70:62:b4:8f:02:1f:3b:bc:1d:a0:2e:45:c6:00:
48:1c:a6:47:c3:6e:b3:31:3c:26:3b:4b:2a:ce:5e:
72:0e:f2:f9:c5:44:86:8d:91:3d:86:e2:9d:b8:59:
42:e8:b5:a5:9a:4e:f3:7a:39:26:cb:f4:1b:e3:13:
c0:e6:68:26:b4:cb:ed:ce:25:b9:17:71:61:55:3a:
d2:5f:da:ff:d0:0f:e6:11:dc:8c:1a:8a:be:79:60:
86:2b:06:07:b9:b0:53:19:26:14:b8:5e:aa:43:55:
ce:8b:30:16:d3:2b:91:1f:58:98:11:71:f3:32:a8:
8f:c8:b3:b5:68:1c:21:40:5c:24:fd:12:64:e5:80:
fa:fb:0a:70:80:93:b5:dd:61:3c:c9:4b:65:0b:c1:
98:a2:6c:fd:70:d2:d6:bf:33:2e:78:81:cd:aa:a7:
e7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F0:6B:30:4B:91:0A:10:FC:F8:D3:06:29:98:2D:61:F1:1B:E6:A6
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4f:a9:1d:5f:24:e9:21:bd:5e:95:58:9b:4e:11:b1:fd:3f:
95:bb:6e:2f:d0:4e:4e:c9:2f:c0:ba:5f:8a:ff:ab:10:0b:77:
70:c7:5e:6c:55:56:10:7b:7e:33:8e:0e:bd:9a:58:20:d4:d6:
b0:21:df:7f:67:42:ad:78:55:f5:45:c2:d1:84:27:d0:d6:e9:
87:d8:e0:47:eb:db:89:a8:00:54:d1:2c:95:ca:49:9e:45:df:
24:fd:11:23:f2:96:b5:92:6b:ca:26:07:c3:fe:38:bc:df:92:
f8:7b:52:37:4f:0e:7b:d1:81:63:cd:9b:5d:30:7a:68:54:54:
51:8c:e2:22:5a:ae:df:88:2d:7d:f8:82:8d:9d:e5:29:f4:6f:
ee:29:c1:51:3c:09:ed:72:00:0c:70:c8:a6:69:da:c9:7a:71:
93:0d:59:53:ac:44:42:85:fa:7e:0d:90:28:24:58:57:f8:cb:
5b:6e:82:cd:6e:ac:7b:f2:0d:e9:e6:af:05:16:22:25:49:8a:
e1:13:d9:af:fe:86:57:95:cf:96:15:bc:3a:72:64:c2:c9:6d:
26:12:9c:d8:7f:59:2a:71:0e:d2:c1:48:59:bb:7c:ef:a6:a9:
c0:0a:88:35:fc:e0:92:75:f4:9c:a3:6a:a7:66:19:c2:3d:4b:
87:32:28:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:41:59 2026 by rpki-client