
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: 94OXGBembsBoplx8c7SC9yFxn+YKsgNnJjHjPUgQILA=
Subject key identifier: 69:68:A8:1E:E5:B6:1B:AA:9D:90:AB:E5:76:8E:5C:97:AE:EC:F3:AB
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 01A06E7081F20B075BD27D7246DAC5C7B020
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 1A3D
Signing time: Fri 04 Sep 2026 22:01:01 +0000
Manifest this update: Fri 04 Sep 2026 22:01:01 +0000
Manifest next update: Sat 05 Sep 2026 22:01:01 +0000
Files and hashes: 1: C_8ZJTyNvSRdSrcMB1h6NMWurAU.roa (hash: ZLk+V2N06Qw0Noo/WtokMKF+p0Gjo1uyGxURWhRlXwY=)
2: XAYcuxsajA5hLrmscRs4oynzyUg.roa (hash: AvPY1r1vk0ST8v3sz0+K9LIFAxv9kmWL/J2CaIlXu0s=)
3: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: H9C8jMLGJjfUopHf9owoFO6+k0m16sW1llEnVWk38jM=)
4: b_b8FgUBWx7o4mrGSWETF1x68gQ.roa (hash: YqVNmCVOzW8nbc96cPhMeB/DqemnZKobEb9c09pjCAo=)
5: mjMQEKksicvgZzYu86cOaUikq_o.roa (hash: 7g64PoLicqxVLeKtHUopkjJGRzw3GYF64nr8YZ5vEEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:81:f2:0b:07:5b:d2:7d:72:46:da:c5:c7:b0:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: Sep 4 22:01:01 2026 GMT
Not After : Sep 5 22:01:01 2026 GMT
Subject: CN=6968a81ee5b61baa9d90abe5768e5c97aeecf3ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cc:36:f5:24:8b:4a:5a:a9:06:0b:73:cb:c7:
35:6f:ce:d5:e9:aa:d0:62:7a:1a:d9:f8:f5:47:99:
dd:9f:9b:f4:c7:e5:6b:c8:f4:fb:13:8c:36:c5:50:
ed:01:79:46:64:d4:a8:00:55:2c:ba:e8:d1:ba:bd:
8d:56:93:9e:e6:a2:07:4d:ba:91:db:9b:72:51:58:
76:38:43:96:8f:ff:b5:3b:0e:1b:89:ac:ff:a1:28:
60:98:db:2e:17:56:cb:56:72:9d:dc:dc:36:b2:e0:
0e:aa:e5:87:9a:5b:ba:11:c9:b9:f7:12:cd:1f:34:
f7:66:16:d3:5b:93:e3:16:da:34:c4:f7:f0:64:59:
c9:69:c6:db:95:fe:cf:83:71:1d:37:80:50:4d:77:
b7:da:08:9f:5c:2c:8d:53:bf:31:b1:8c:4c:76:66:
ad:3e:65:70:b3:9c:13:93:a1:77:d7:ef:df:c8:39:
7a:b7:86:04:df:a5:fd:54:30:72:95:ca:8d:a0:54:
6f:de:f8:db:06:50:76:e3:7b:51:97:90:45:18:a4:
8b:e8:9e:d6:e6:4d:76:72:dd:c9:99:dc:cf:65:3f:
c2:02:10:ab:30:cf:3d:71:67:92:53:d4:74:e5:fc:
ea:4b:f6:80:4c:b5:99:da:e8:f0:6c:30:ad:4b:ce:
23:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:68:A8:1E:E5:B6:1B:AA:9D:90:AB:E5:76:8E:5C:97:AE:EC:F3:AB
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:73:e7:63:80:20:8b:af:20:6a:1c:f3:4d:cf:c5:f1:02:a5:
b8:4a:de:ab:af:ab:f6:91:c4:38:34:f3:7b:f7:c0:22:40:89:
24:e4:09:78:d1:94:e0:3b:91:27:75:66:25:ce:e5:8b:04:27:
27:86:1f:e9:db:cb:b0:93:6b:96:54:d1:e1:c1:0b:7d:a8:64:
8d:28:22:00:65:a8:5a:71:c9:44:4c:b5:57:80:b0:05:f8:08:
bf:6b:19:9a:2b:a7:4d:c8:60:3b:76:92:fa:cc:f0:5b:ce:95:
56:ed:8c:38:e6:fa:61:b1:3c:8a:38:8f:91:ae:bf:7b:f0:aa:
38:15:06:43:ec:5e:5a:5a:83:ee:f9:b1:7b:70:1c:6b:30:91:
94:34:f0:f8:33:e6:29:4a:be:d5:82:39:fb:58:5f:b1:a4:0d:
56:4a:de:eb:77:79:32:75:6c:86:d2:65:b2:ac:b5:ea:84:83:
c6:d7:ae:12:ad:d4:1a:7d:18:b4:82:48:ae:a5:31:31:86:70:
1e:e5:01:70:cd:69:7a:8c:7b:ab:19:6a:5f:93:07:44:44:da:
56:46:85:a4:dd:ac:10:ae:65:b8:9d:ae:57:e0:9e:e7:71:77:
c9:ff:39:65:41:fd:7e:c2:f0:4a:c3:dd:e3:a0:7e:a8:b0:9d:
1e:16:50:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:15:33 2026 by rpki-client