Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: aZ/u7j0BF0v9Fn4sMgvQz7AdJ/lZrOIkpmJLHpLGGX0=
Subject key identifier: 44:0A:1F:36:F9:AE:AB:EF:DF:9A:00:48:47:10:06:23:AC:6D:02:6D
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 01A00FCFA407466FD29927FEC6938B50BB68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 1A09
Signing time: Mon 17 Aug 2026 13:01:01 +0000
Manifest this update: Mon 17 Aug 2026 13:01:01 +0000
Manifest next update: Tue 18 Aug 2026 13:01:01 +0000
Files and hashes: 1: O0e9J99nDHDBcPP1W09ssXrN96E.roa (hash: aQvYlglowNCiS102CJiAb4sYyaW4lZND2gALby9zlgw=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: pkrtWN7FHeLtJkVyqiYfsYeQJpYxJX8zLB5RN0qQHos=)
3: x58D33wXY03IBALkfNVEewlOjxI.roa (hash: l4BRaOtR+rQZWBsP3tk/LVs3kvHtYkV6QExE7KMTpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 13:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:cf:a4:07:46:6f:d2:99:27:fe:c6:93:8b:50:bb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Aug 17 13:01:01 2026 GMT
Not After : Aug 18 13:01:01 2026 GMT
Subject: CN=440a1f36f9aeabefdf9a004847100623ac6d026d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8e:2c:b1:8a:77:bf:75:c4:65:94:57:9d:45:
4a:96:bc:a3:18:74:4c:f3:01:3e:e6:e6:34:88:61:
a4:3a:84:13:dc:0f:59:9d:29:e7:9b:7a:db:28:34:
ca:dd:2d:c3:03:28:2e:62:17:37:47:01:84:85:b9:
26:22:25:d5:dd:d2:01:9a:51:ad:ce:49:05:13:51:
06:57:cc:1f:1b:ac:c4:04:8c:2d:c7:32:ca:a8:77:
7c:30:a8:87:ea:3f:3d:81:b6:d3:e4:47:e8:73:8b:
c7:63:3f:4e:04:22:49:1b:28:8f:05:cd:16:49:23:
81:99:f5:48:1a:f3:a2:88:d9:c5:05:b4:92:35:e3:
a0:b9:2b:a1:0a:c9:23:58:be:69:5e:cc:c0:d3:0d:
3b:f7:a3:a2:50:11:d1:f7:a8:6c:19:46:e4:ae:b6:
ac:95:00:aa:38:73:48:0f:6e:3a:dc:6d:4c:f8:eb:
4a:0b:e2:72:a7:7c:06:a1:bc:91:f1:d9:06:a7:a6:
ce:26:70:dc:90:4e:68:1f:a2:71:c6:cf:6d:0c:8b:
3e:9b:88:a3:da:3a:4f:85:da:31:d3:cd:c9:30:b8:
aa:21:9e:52:17:03:ac:d7:ac:7a:84:c0:4b:fb:41:
d4:83:51:a4:47:6e:e2:5f:84:bf:88:3a:d5:0c:20:
7f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:0A:1F:36:F9:AE:AB:EF:DF:9A:00:48:47:10:06:23:AC:6D:02:6D
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:ac:38:a5:f2:c6:25:1b:d3:90:cd:20:26:a9:1d:51:b4:6f:
e3:ff:48:55:f4:59:cb:66:78:2c:60:49:b5:7b:5e:56:62:26:
f0:f7:70:17:57:af:3a:09:31:ab:d4:5f:7c:33:24:b8:d8:8e:
55:88:6e:d5:27:b3:1b:3c:22:c7:95:7c:d2:cb:51:4f:13:12:
f0:08:49:82:f2:a3:bd:32:c6:a3:80:d3:b9:c3:83:ed:ee:68:
be:69:55:3a:f7:32:ca:6c:34:0f:f4:45:36:c3:b7:fe:4b:d9:
bc:54:c1:56:b8:28:4b:a5:6d:a5:9a:08:4d:50:d9:91:89:25:
8c:24:55:13:bc:37:77:91:c1:62:c1:cb:e2:c8:c3:79:c6:4c:
df:28:d1:d0:15:04:b2:e6:06:41:8c:bd:7d:b3:d6:05:de:f0:
36:52:5e:82:29:64:5d:19:30:cc:c7:08:44:a9:95:bd:d2:2e:
1b:f1:18:4c:e3:57:48:f7:67:9b:de:05:f7:d8:ca:f6:4b:38:
d6:17:37:28:be:ca:9e:bb:32:61:df:d3:20:0e:c7:42:be:e5:
bf:b9:e8:7c:22:22:e5:6c:c7:d8:ad:7d:e4:00:21:94:e3:4a:
62:5c:10:8f:13:a0:96:ce:ab:f6:33:6e:df:dd:b8:19:28:ad:
dc:1e:ea:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 21:16:57 2026 by rpki-client