Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: ALUguiYMzxbmR1ClhEt4ntZjELK57jfJtB7JWqEIwhY=
Subject key identifier: 86:D8:D9:B9:4B:65:3C:BC:4F:00:E3:F4:D8:48:4B:91:58:4A:75:D7
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 01A08B9FAB73AC90143CF78B2198E02DFE99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 09CF
Signing time: Thu 10 Sep 2026 14:01:32 +0000
Manifest this update: Thu 10 Sep 2026 14:01:32 +0000
Manifest next update: Fri 11 Sep 2026 14:01:32 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: B7REFpYQU1Am3L+/ku7u7qgMCcR5JXUR6mxdzpsaApY=)
2: xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa (hash: 4Tr8pcApL7OMPNYK6DHiqFf/BMOwe5lvOFY1rUx8z6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:9f:ab:73:ac:90:14:3c:f7:8b:21:98:e0:2d:fe:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Sep 10 14:01:32 2026 GMT
Not After : Sep 11 14:01:32 2026 GMT
Subject: CN=86d8d9b94b653cbc4f00e3f4d8484b91584a75d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:11:9f:e5:73:9c:b5:ee:78:aa:dc:56:88:23:
7f:f3:e2:ae:27:fb:61:8c:dc:f5:8b:42:16:5b:d3:
4f:48:45:1a:cd:0b:a4:dd:64:ac:85:65:a6:8c:60:
c1:b6:84:59:af:51:c5:d3:6d:75:59:1c:41:80:0b:
23:c2:99:c3:5c:8d:64:a6:84:1e:7c:c3:15:8e:5e:
14:0c:8b:95:30:cd:9a:76:65:e3:e5:e5:26:a4:3d:
8d:da:9d:03:4e:b0:91:87:1e:5d:00:b8:c0:6c:27:
27:a5:53:e4:29:d0:10:e0:3a:52:53:89:85:c5:2b:
bf:df:77:9c:db:72:11:c6:4c:85:33:c2:7f:3f:6d:
af:46:dc:3d:eb:12:b0:96:d8:c5:50:53:5c:1a:e3:
f6:21:83:c5:d2:f8:18:bb:bd:b3:36:31:ec:f3:44:
76:6f:20:47:e5:cd:83:c9:04:89:e6:65:15:01:ee:
ab:db:e6:30:8b:7b:03:b8:fc:3e:68:a6:24:5e:ff:
1b:ab:80:d3:29:a4:4f:a2:12:11:b9:89:0f:77:28:
82:9b:ed:07:d6:ee:75:15:f8:7a:0b:27:8a:11:d4:
67:5f:8e:b7:50:eb:bb:81:fb:ce:0b:39:2a:2b:fb:
88:55:02:ec:63:6e:56:08:5a:58:4c:4a:1b:9c:28:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D8:D9:B9:4B:65:3C:BC:4F:00:E3:F4:D8:48:4B:91:58:4A:75:D7
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:14:8f:f7:49:3d:38:39:45:8a:bb:78:43:e2:fe:0e:38:4c:
cd:73:11:6d:74:69:7e:5e:27:33:d4:f3:68:3b:33:16:71:8e:
89:38:4d:0d:62:d8:8f:72:c3:a9:cb:4b:b6:47:4f:ae:0d:03:
d5:91:29:59:68:57:03:77:16:d6:3c:1b:c6:46:77:c1:c9:d0:
be:7c:c2:43:85:6c:f6:c9:20:2f:3b:5d:1b:6b:37:22:e8:ff:
03:c0:be:bd:e1:73:90:21:13:4e:9e:5b:38:fe:16:68:56:83:
d0:d6:81:0d:69:8b:f2:b3:da:3d:17:f5:9c:f3:e7:e9:06:74:
97:50:47:e9:8b:16:09:e9:81:ac:ad:8d:00:77:35:83:da:76:
fc:2f:76:c4:6c:6c:f4:0f:c4:1b:8a:e2:e3:b5:b3:65:83:6a:
ce:11:e0:60:18:f0:97:b7:f4:c9:21:8a:60:2e:f7:a4:8e:7a:
6f:52:2b:25:de:f4:5c:6b:bd:1b:ec:ed:27:56:15:cf:43:29:
94:26:a7:42:c4:c0:b1:78:a8:bd:4a:30:01:7d:92:3a:df:44:
70:c3:05:6f:45:db:be:f8:0f:ee:83:18:50:a3:e2:f7:51:f4:
c4:12:ac:a6:4b:62:e5:3f:fb:ff:3b:81:db:e9:71:7b:df:bd:
60:a0:a9:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:32:55 2026 by rpki-client