Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: /7iPiPHT3OPzhid+FpyQsSVWlqlq4UitZhEo5EPNTHQ=
Subject key identifier: AE:EF:C9:CE:59:A9:48:50:4E:F2:1C:69:F0:5A:D0:14:7E:D0:0F:59
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 01A08C0C9ACE2DCD48820CD79DBCE476A9AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 16:00:31 +0000
Manifest this update: Thu 10 Sep 2026 16:00:31 +0000
Manifest next update: Fri 11 Sep 2026 16:00:31 +0000
Files and hashes: 1: MsnqFaljx-vLs6R1klCk-k4mqbE.roa (hash: 9w5Fj/ix8Y1oWU+nhqJcIUFjp29qAgz5fs3U3GbWExc=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: nEkUe4bC6e/Z+L2L/WNxa4tWdHU+KEbOQQqDWAWoDuA=)
3: Y-0LFW4QQXme0gq1FoIF-wZ-SQc.roa (hash: wu/R/xhocC/i/LlV9UK65CdEa6/Nxe99KI2JumwUKlc=)
4: a_XjHLHQF6uE4SSOtjsOa8f4-2Q.roa (hash: m3nX1Uyzi87lTewY/HPBoiE0m8iVkIMnK/iQX/3hwYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:0c:9a:ce:2d:cd:48:82:0c:d7:9d:bc:e4:76:a9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Sep 10 16:00:31 2026 GMT
Not After : Sep 11 16:00:31 2026 GMT
Subject: CN=aeefc9ce59a948504ef21c69f05ad0147ed00f59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e6:29:2d:e6:a1:10:41:86:74:c6:39:c5:d4:
b0:0e:3b:c8:4e:c0:ad:c1:8b:0d:14:1b:10:6e:95:
7c:53:29:91:d0:57:bf:ca:87:d9:b9:58:21:aa:7b:
6b:64:87:eb:1c:8d:2c:1c:16:28:ed:7a:f4:a8:7f:
1b:ef:1a:cb:29:b1:9f:5a:20:0c:d1:8f:d1:18:c2:
62:59:be:bd:ea:4e:51:46:cb:0b:85:d5:0f:0c:37:
1e:06:ac:8b:cc:6b:8d:50:ac:a5:12:30:be:1d:7a:
bf:18:15:a5:c9:38:2a:cd:20:41:87:06:80:75:3b:
5a:ac:7d:91:e8:0e:82:0c:2b:92:55:58:a0:9c:7c:
68:70:0b:68:8c:44:0b:44:08:0e:a6:73:ac:13:52:
df:7e:5e:ce:4b:98:29:1e:70:2a:68:6c:39:51:59:
27:4c:01:82:e5:92:52:4f:8b:eb:76:ef:27:42:52:
dc:cf:f2:5f:b3:e2:af:97:72:43:68:be:e9:c4:58:
81:09:f5:72:f6:41:1d:47:79:fe:f7:fb:76:62:a9:
9d:02:c3:90:82:0e:b8:3c:f9:0a:be:7a:20:e3:78:
bc:97:78:2a:f9:3e:68:5a:f5:2e:65:d0:17:1b:04:
46:af:2f:0c:85:b4:3a:c7:27:13:eb:e4:47:57:15:
c1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:EF:C9:CE:59:A9:48:50:4E:F2:1C:69:F0:5A:D0:14:7E:D0:0F:59
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:06:76:2d:5f:22:8f:78:c9:85:47:91:66:fd:39:1f:0a:78:
f8:89:a4:be:24:a5:e0:39:1c:fd:3a:ac:58:1e:8d:ec:59:dd:
37:0f:ff:f7:ce:9c:c2:74:78:58:66:8d:0d:2b:09:47:0b:1b:
a3:68:80:e3:d3:01:10:d7:04:d8:09:59:38:2c:81:b8:dd:64:
0e:ce:43:77:2e:4b:49:55:17:26:72:b5:b7:e1:ea:03:4d:92:
7b:65:fc:57:a7:87:50:6d:a7:c2:d4:e4:65:eb:d1:4c:e5:71:
7d:7c:9f:58:b5:20:5b:9e:a5:ea:a3:95:4b:3a:66:72:56:0b:
a6:7c:2b:20:6c:ca:59:cb:bc:b6:ba:5d:4c:08:b8:bd:21:e6:
45:4a:03:ee:13:c4:48:16:1e:39:db:b8:9f:62:3d:0c:e9:5e:
0f:3c:6f:14:28:9b:f6:67:5f:ad:a1:98:a6:06:5c:38:cd:3c:
30:cb:38:5a:55:88:ae:7e:91:8b:f8:c0:a0:e8:27:6d:e5:58:
20:2d:32:b7:9a:92:77:a8:a4:45:c7:5b:d6:c6:bd:fa:e5:cd:
f0:a7:e3:d0:68:8a:e1:76:36:4c:33:ac:0a:08:49:2d:50:4a:
1c:a2:da:3a:c3:fd:be:37:07:a7:90:12:d2:96:f6:79:b9:d2:
6e:df:14:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:56:15 2026 by rpki-client