Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: GeC4i6OtFHA7F6Lv3GH4ImPARWKsxShR0d1efJfGvGE=
Subject key identifier: 62:DE:63:2B:0A:97:6C:C4:3D:20:AF:6D:5E:07:8D:D7:72:98:02:0B
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 01A1070101DC420D926F64E833C61F86CC56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 1A89
Signing time: Sun 04 Oct 2026 13:01:08 +0000
Manifest this update: Sun 04 Oct 2026 13:01:08 +0000
Manifest next update: Mon 05 Oct 2026 13:01:08 +0000
Files and hashes: 1: O0e9J99nDHDBcPP1W09ssXrN96E.roa (hash: aQvYlglowNCiS102CJiAb4sYyaW4lZND2gALby9zlgw=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: 32tqf4tXTsnfx/eQ9cQhPpWViQu6upqPyhPP0bsy1so=)
3: x58D33wXY03IBALkfNVEewlOjxI.roa (hash: l4BRaOtR+rQZWBsP3tk/LVs3kvHtYkV6QExE7KMTpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:01:01:dc:42:0d:92:6f:64:e8:33:c6:1f:86:cc:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Oct 4 13:01:08 2026 GMT
Not After : Oct 5 13:01:08 2026 GMT
Subject: CN=62de632b0a976cc43d20af6d5e078dd77298020b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a3:48:ac:08:f0:41:b6:40:5d:5c:80:20:5e:
ed:78:dd:12:b2:bf:46:a6:5d:9d:23:be:b7:3c:1b:
8e:1f:5c:1c:13:bb:09:63:9c:ea:2a:04:91:32:16:
d6:7f:b5:bb:80:16:f7:85:37:5e:a5:79:0c:d2:c6:
00:10:06:97:0b:6c:23:2e:7c:1d:d2:19:5f:b7:80:
0a:b0:6b:7b:6c:0c:ef:d6:b1:06:42:9b:92:25:f8:
40:4c:14:94:1c:18:be:c6:83:63:12:f0:15:cd:8a:
ac:10:70:28:bc:f2:ab:38:d9:88:ac:34:54:5d:d2:
ef:1e:51:c6:7d:96:bd:d2:91:8c:c7:ae:b0:26:c3:
02:bc:b2:da:2f:1b:d1:e1:35:03:6d:76:08:63:0e:
7c:88:e9:dd:7f:38:f5:14:82:57:6d:81:61:0d:b7:
f0:d6:9e:8c:23:74:10:f1:8f:15:96:34:b2:f6:a8:
5a:21:1b:f5:b9:f4:6b:51:ed:27:cd:e6:35:29:96:
bc:91:9a:cd:76:ea:80:14:c5:aa:b8:15:4b:02:be:
c2:d2:c9:bd:a3:30:56:59:cd:a0:27:a2:0a:f7:f1:
55:42:76:50:1c:3a:60:62:d2:18:9b:6e:f3:c6:7f:
00:a5:6b:eb:5a:f9:f5:3d:94:3c:f3:c0:2a:4f:ab:
27:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DE:63:2B:0A:97:6C:C4:3D:20:AF:6D:5E:07:8D:D7:72:98:02:0B
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:96:60:c4:2a:bb:2f:82:df:a1:7c:39:1a:3c:4f:ee:18:58:
20:fd:58:20:60:af:bb:38:87:b2:75:97:be:e5:a7:0f:67:90:
47:5c:49:f1:9c:98:47:9c:81:ae:49:fa:be:ec:a4:8a:ee:e9:
fa:ff:71:41:c0:21:3a:a2:54:61:12:d6:f4:83:b2:51:57:e8:
74:42:14:e9:35:87:b3:4b:0b:b3:3a:9d:50:54:d0:19:40:cd:
c7:04:6a:b1:f8:68:56:cc:7e:26:1e:6b:7d:5b:d2:09:c7:a9:
ba:49:b9:17:ef:21:47:52:95:01:ad:88:69:2e:75:f1:10:21:
26:60:42:1a:ea:35:65:fe:b7:1d:05:f0:4c:74:e4:6a:d1:b9:
9a:7e:f9:50:c9:3f:95:0f:2e:b2:4e:32:3c:3e:c5:00:f7:a6:
ae:84:41:40:6e:ef:23:55:d0:35:81:12:69:42:01:aa:2a:35:
39:55:f0:ee:d5:53:34:52:1a:2f:39:c6:4a:da:93:61:1d:b1:
e3:a3:be:5d:a6:c4:89:77:f5:1c:ff:16:09:72:08:4f:5a:90:
52:77:1a:98:7d:85:73:0d:3b:9c:1a:02:dd:63:0e:1e:7b:e1:
b8:3f:b2:c6:a0:c8:d8:5b:e4:9c:8e:69:fe:47:e5:20:4f:3e:
8d:2d:46:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 19:05:04 2026 by rpki-client