Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: 6x6EnSQKllSXXhUc44/PpBGV8cB2jpRMH29oqwyp+kM=
Subject key identifier: 07:F8:2B:92:A5:DC:81:44:3F:8B:93:0A:42:1C:6D:46:4B:4D:5C:DF
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 01A08D1FCF9F2152571B63F68ACD0823B77C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 21:01:07 +0000
Manifest this update: Thu 10 Sep 2026 21:01:07 +0000
Manifest next update: Fri 11 Sep 2026 21:01:07 +0000
Files and hashes: 1: 017yR2AH3nhtreOuYgsNpqkrBt0.roa (hash: jH8rFvA13JhY4szX2F6JGpx37/sl3RxTDMuhAZiU224=)
2: OOfgMgyirAjAQpzlSeWvWZ7kZIQ.roa (hash: wpPBvbubRrWqOyJudWgmsWq2Hw2lni+AI3RKu2B28mg=)
3: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: c+7XoonrS8dN+DxVAACthTcVxHsVSfpItKA9cC+KPvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8d:1f:cf:9f:21:52:57:1b:63:f6:8a:cd:08:23:b7:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Sep 10 21:01:07 2026 GMT
Not After : Sep 11 21:01:07 2026 GMT
Subject: CN=07f82b92a5dc81443f8b930a421c6d464b4d5cdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:93:ae:e4:91:bd:d4:e3:6d:58:8b:59:4a:6b:
87:9c:8c:03:ba:16:f6:7f:63:13:1d:a8:7c:97:c2:
27:a2:bf:07:8d:9f:c6:50:df:0c:ea:7d:21:a3:6a:
ea:4d:97:38:8e:21:e7:a6:f1:c2:2f:a9:78:f0:60:
57:33:1d:2b:e7:f4:18:45:9f:02:df:d8:10:05:80:
3b:5f:31:ff:46:ee:e2:c2:c5:7d:08:ff:0b:15:5b:
da:d6:b1:a7:29:65:07:18:52:bf:9e:71:26:a8:60:
79:64:16:f4:a7:13:de:10:b4:a0:99:03:80:a5:8f:
f7:47:40:80:2f:4c:15:64:8e:1f:cc:10:f7:0f:90:
18:11:20:97:7e:c7:7b:f2:c1:da:69:31:2e:97:e9:
da:2f:d8:f2:a5:b3:2e:91:f9:9b:2b:ac:23:44:51:
70:bc:81:a0:fc:37:cd:f5:0d:80:c2:9c:cd:a0:5d:
f3:cb:02:c4:b4:3c:63:64:56:e1:1e:56:97:bb:9b:
9e:73:6d:21:1f:50:7d:39:4f:09:66:b9:48:15:cf:
d1:ad:bf:4a:ae:3d:ce:38:0d:b9:99:02:c5:16:49:
ea:f2:b2:6f:ea:a4:b9:0c:51:ec:1a:85:f5:b0:0c:
5f:e0:ae:da:27:35:5e:67:66:3c:cb:26:e1:95:1b:
37:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:F8:2B:92:A5:DC:81:44:3F:8B:93:0A:42:1C:6D:46:4B:4D:5C:DF
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:dd:84:b3:6c:56:99:0b:ab:03:4a:af:6a:ab:07:f8:5f:41:
7e:d6:98:f8:5c:75:a3:08:7b:c1:bf:c1:8c:36:bc:3c:a8:84:
17:fd:2b:62:88:4e:42:12:1e:99:ea:10:e0:5a:13:d9:82:db:
c8:e0:c4:c5:e8:3c:66:46:17:54:71:15:1b:69:61:b2:c6:16:
93:a9:9c:a6:c3:f3:8a:25:6a:77:dc:06:8c:f5:97:71:2c:80:
b6:b5:0a:24:ee:b5:01:25:89:88:5f:7d:bc:27:b3:28:4d:f8:
be:6c:32:3c:e8:74:0c:bb:7f:90:b9:37:55:e4:35:7e:9e:12:
06:5a:02:87:43:71:04:d0:ec:f3:df:a9:ae:41:3c:19:be:6f:
1c:68:f6:fb:ce:6e:0e:84:61:1d:85:8b:fe:64:39:5b:74:0b:
ce:50:c7:53:f1:6d:d1:20:e7:d9:7a:f2:d6:0b:dd:bf:9b:c9:
e0:06:e5:51:25:7b:0a:e6:4c:00:af:86:34:aa:9f:3b:73:6a:
b0:a8:8b:c6:ea:56:38:31:7e:de:75:57:d4:1e:17:d2:d0:00:
fe:3a:cb:5a:34:f4:6a:f6:46:e8:05:a0:ba:e2:43:d6:25:a8:
0d:82:46:e6:ad:6a:11:9c:60:88:c2:ae:85:21:07:be:5e:a2:
97:f7:d0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:53:33 2026 by rpki-client