Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
File: XWsFtN3mw5OZctoT9iIH8ibeeSo.mft (raw, json)
Hash identifier: JmYsBHSkvDlEK3rGP9cAKxOaXTnlDm5liNcxv6t396o=
Subject key identifier: D9:06:D9:3A:CC:56:C0:9F:B9:70:72:AB:CA:BB:AF:65:FF:BD:D5:EB
Authority key identifier: 5D:6B:05:B4:DD:E6:C3:93:99:72:DA:13:F6:22:07:F2:26:DE:79:2A
Certificate issuer: /CN=5d6b05b4dde6c3939972da13f62207f226de792a
Certificate serial: 01A08C7A894B669A05FA222413E6DB459727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:00:35 +0000
Manifest this update: Thu 10 Sep 2026 18:00:35 +0000
Manifest next update: Fri 11 Sep 2026 18:00:35 +0000
Files and hashes: 1: O9IV0RKhFtt8K6HCeqLoJ_BtvRs.roa (hash: Ws/iiURmVab3uVGnOVSnKwKNuJfPQAcJDFZkcNjz5Ks=)
2: XWsFtN3mw5OZctoT9iIH8ibeeSo.crl (hash: M2Q8cQUvRSdAptTatCSBlvBDbrV+nhA61UcZvrvng3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7a:89:4b:66:9a:05:fa:22:24:13:e6:db:45:97:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6b05b4dde6c3939972da13f62207f226de792a
Validity
Not Before: Sep 10 18:00:35 2026 GMT
Not After : Sep 11 18:00:35 2026 GMT
Subject: CN=d906d93acc56c09fb97072abcabbaf65ffbdd5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4c:d0:32:c5:a8:a8:b9:ff:08:9b:58:d4:20:
f1:4c:53:fe:90:b7:d0:ac:e7:9b:22:71:3e:eb:03:
75:5d:8f:e1:2b:b6:cf:01:cd:31:4f:68:37:9b:3d:
7b:f3:5d:a8:78:15:1d:72:e0:7d:67:93:71:82:4f:
2b:d7:49:b4:21:d1:7e:f6:fd:09:56:e8:b5:94:34:
11:6d:ae:ac:af:4d:b3:da:b7:16:09:bd:7d:90:b0:
ba:60:17:6b:19:34:28:5f:4f:a8:d7:c5:bd:58:dc:
3c:71:2c:f7:81:22:2c:c9:f1:45:f1:50:20:7a:90:
d2:30:75:a5:d1:7b:af:35:be:86:40:f5:9b:ec:1a:
5a:ea:f0:4b:f5:fe:42:e8:99:ab:ba:4d:53:a4:6f:
8b:87:67:ea:b1:5b:b2:90:5a:79:4c:29:fa:50:80:
2a:18:8b:88:60:ac:79:ab:ad:ae:75:32:9a:06:d3:
42:a3:c8:da:f6:45:2a:a0:ed:18:63:36:0a:2b:ac:
5f:a7:23:c1:7c:c4:83:a9:72:9b:b2:7f:f7:f3:c0:
94:5d:8e:bd:48:04:54:bd:58:90:d8:f6:59:31:2b:
2d:80:b7:8a:ef:ff:c7:91:47:52:48:6c:1e:f1:89:
36:fa:40:fc:b5:94:42:49:54:3e:88:d8:da:4f:e2:
6d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:06:D9:3A:CC:56:C0:9F:B9:70:72:AB:CA:BB:AF:65:FF:BD:D5:EB
X509v3 Authority Key Identifier:
keyid:5D:6B:05:B4:DD:E6:C3:93:99:72:DA:13:F6:22:07:F2:26:DE:79:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWsFtN3mw5OZctoT9iIH8ibeeSo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/954465-edcd-4636-855f-b9dccab6df2e/1/XWsFtN3mw5OZctoT9iIH8ibeeSo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:9c:c6:72:2c:44:67:13:69:09:00:2a:94:c7:27:2f:90:2f:
97:1f:34:a0:e4:78:d8:64:86:68:06:28:1d:87:a4:9d:fd:d9:
37:94:41:5d:05:9f:88:7d:ca:cd:2b:c9:41:6a:4f:8b:08:1f:
a9:6d:62:15:d2:81:b3:eb:df:2e:d5:4f:d3:78:39:db:de:ce:
01:33:ba:6c:f9:dd:81:ce:2a:04:28:27:98:74:cb:fc:6c:f9:
57:25:19:75:77:5e:e2:17:5b:41:08:1e:1e:dc:7d:19:b1:d0:
62:80:2d:90:9a:26:c7:da:fc:bf:84:3c:35:00:67:68:34:fd:
90:e9:46:84:f5:b7:7b:2a:d6:4c:99:09:dc:7e:18:21:fe:b6:
af:23:84:78:8d:9d:47:e3:3d:ff:68:49:ad:f0:ad:c2:30:fc:
19:21:5e:cd:25:4b:ab:94:59:6a:6c:81:a5:b7:57:75:9d:fc:
ed:36:83:d8:5a:65:2f:fa:04:50:76:6c:ae:36:7a:57:fc:0b:
81:ab:9e:94:64:7e:26:d5:d7:dc:7d:6f:71:b5:d9:02:94:14:
45:1b:f2:3d:87:a8:5b:0e:85:15:16:06:a7:e2:a0:d0:05:fb:
07:6d:8b:01:fa:c8:63:e6:39:00:65:fd:5e:4f:18:8b:ba:62:
cc:3c:60:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:58:24 2026 by rpki-client