Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File: XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier: aHd5BkQFEQIlkCQ8JYZHCMHiqR9C66OoQHj3/edzLlc=
Subject key identifier: F4:5A:60:38:6B:6D:A0:0C:1C:51:DF:E8:28:87:9A:91:6B:56:F6:78
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial: 01A06E39546D4BCC17339D95392FF1D70978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number: 1A38
Signing time: Fri 04 Sep 2026 21:00:45 +0000
Manifest this update: Fri 04 Sep 2026 21:00:45 +0000
Manifest next update: Sat 05 Sep 2026 21:00:45 +0000
Files and hashes: 1: PnV6MRrCbEDbUgZOWZkw0F-5fTw.roa (hash: gpEq7vfgynN+KUY61gV3ilXsbaQKj+P9YjZ3SCCvLxo=)
2: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: KB6BGu3hSmxCFSQUMhA8xPfryaylRFRkwh6neJtqTRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:39:54:6d:4b:cc:17:33:9d:95:39:2f:f1:d7:09:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Validity
Not Before: Sep 4 21:00:45 2026 GMT
Not After : Sep 5 21:00:45 2026 GMT
Subject: CN=f45a60386b6da00c1c51dfe828879a916b56f678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:53:db:7f:94:fb:73:25:d5:bc:7e:06:a2:66:
4c:2e:7b:b8:e9:af:1b:76:9d:35:cf:65:f3:ad:c9:
5d:32:d5:96:81:5c:b6:47:6d:be:40:07:7f:be:b1:
e6:95:7d:a6:52:5d:08:7d:82:b1:25:c3:96:13:00:
69:b4:2c:de:cc:72:7d:bf:09:ba:b6:f9:11:39:4d:
7e:a6:f3:9b:d0:c7:56:c6:e2:6d:8c:8f:25:25:ba:
dc:6b:2b:41:14:73:b0:10:6a:c4:6b:01:4a:50:9c:
32:a4:d7:2a:7a:19:bf:72:ae:38:0f:93:6b:f5:a4:
eb:ca:c0:11:2c:4c:83:0d:65:ce:67:dd:73:22:10:
ee:2d:14:df:0d:61:03:db:f3:e4:53:69:49:2c:a7:
e6:ff:c4:79:fc:50:f3:8d:ab:43:1a:6c:97:bb:ca:
b9:5c:de:99:8e:f5:ac:2e:fb:1f:42:6d:66:18:66:
69:e0:50:03:5e:80:14:2a:36:db:11:2e:3a:3f:4c:
fd:f2:b5:d6:ec:2e:bd:9d:2a:8c:4d:66:de:a8:8a:
04:bd:1c:99:4e:3b:00:14:7f:5e:64:c9:4c:4c:bc:
f4:58:3e:91:7c:8c:d1:1b:7d:ed:1e:9f:71:18:7d:
04:cd:ca:19:1a:6d:2b:18:18:d8:ba:72:25:65:95:
3c:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:5A:60:38:6B:6D:A0:0C:1C:51:DF:E8:28:87:9A:91:6B:56:F6:78
X509v3 Authority Key Identifier:
keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a6:b1:39:d6:03:e6:d3:37:82:49:30:09:4f:88:50:3c:49:
81:fa:63:68:6f:4b:e6:6c:1c:74:06:8c:dd:fa:82:9a:d2:82:
12:20:c9:14:e1:fb:1c:86:ce:93:ad:e4:cd:ee:1b:04:02:c5:
86:16:4a:e7:f1:76:ee:34:5f:0c:6b:6c:85:90:34:7d:2e:f0:
aa:40:46:78:cc:a2:a8:3d:13:14:38:52:25:79:5b:0b:0b:49:
c6:3e:9b:c3:f4:e3:c7:39:e7:56:1a:78:fd:90:80:68:6b:1a:
c4:49:5a:66:72:66:64:7a:3d:17:36:74:85:0d:8f:07:57:7f:
f9:28:6e:00:e2:cd:d8:f5:e6:6e:0e:42:84:98:34:5a:27:0f:
a4:4b:21:ee:28:d1:46:f5:f7:08:69:b8:24:4f:da:e0:99:fd:
cc:1b:d3:bf:4e:43:90:6e:b7:e7:97:a0:b8:fd:38:01:5b:54:
d3:d0:40:e6:61:a6:9a:82:7b:10:67:75:04:13:96:72:96:71:
0f:0b:00:d5:bf:c8:dc:cf:24:af:12:86:e2:5a:1a:9a:fb:28:
b4:12:24:bb:ec:43:7b:5b:55:b3:3f:9a:56:a9:4d:4c:c2:1a:
78:c7:e3:30:34:42:5f:c9:2f:27:87:c0:48:9f:d2:46:50:1f:
3e:af:ad:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:47:08 2026 by rpki-client