Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier: pRtD+2eK/TDilMZnX7JWkA9oz0a2b1adUeSbCmVaAIU=
Subject key identifier: 9F:64:08:FC:35:70:A0:17:A7:A8:89:53:BD:1A:FF:E6:73:47:89:4D
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 01A08A55BA84106A39D3D7D83E59A767E42F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number: 1218
Signing time: Thu 10 Sep 2026 08:01:08 +0000
Manifest this update: Thu 10 Sep 2026 08:01:08 +0000
Manifest next update: Fri 11 Sep 2026 08:01:08 +0000
Files and hashes: 1: 3iYvgJ_eTlUQ-O3G1juF5EdX47M.roa (hash: cQV4nw2YNAHZleBjiJhNysmR6KlbphemL85k3lR/q4I=)
2: IRKwCUFzai38fr65-FRH_xYS0jI.roa (hash: oO+4buqTDLcCJZOc7fvRD7YLk4AQs3LNbZe5FzwGorY=)
3: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: rUCnDghmqWrcmDW8MRG/NqWK77KSOLCgKqtpQX1L5Sw=)
4: egWOQdMCICFVY-fSqkSUyufqt9w.asa (hash: KLL7Z4S+Cwpn2TeUDxPx/ngJ0cRsd9rXvcGeQB6iLDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:ba:84:10:6a:39:d3:d7:d8:3e:59:a7:67:e4:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: Sep 10 08:01:08 2026 GMT
Not After : Sep 11 08:01:08 2026 GMT
Subject: CN=9f6408fc3570a017a7a88953bd1affe67347894d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5e:13:a2:32:bc:fe:03:59:75:0d:16:4d:f0:
e0:bb:17:cd:09:ff:10:a2:3f:65:b7:92:c2:e6:31:
62:65:26:fc:af:33:ab:c1:3b:e3:26:80:be:c5:77:
9e:a3:e1:29:a2:89:f7:8d:93:6a:97:0b:9d:cc:cc:
47:aa:57:46:b8:d0:71:5b:4e:fe:cb:0c:1c:84:4b:
ca:a9:b0:76:c2:4f:d7:84:bd:f9:ca:99:f6:d6:cf:
93:d8:9e:fa:66:14:46:00:bb:65:45:b3:9a:69:25:
d8:3d:ef:c5:b1:06:9a:30:37:23:e1:d7:9e:74:7f:
0b:36:bd:26:fe:ed:c6:a1:45:d1:db:ef:87:24:00:
f0:d5:5e:87:71:36:70:66:49:b5:89:85:5a:c9:dd:
b1:07:11:91:c0:cf:c6:96:a8:37:ea:99:3d:60:99:
ce:98:f0:e5:bf:61:f2:b1:55:7a:79:8f:e3:5b:56:
00:22:d8:17:bf:90:d5:4a:7f:ef:3b:ab:e1:73:67:
5b:9e:18:01:12:d7:a8:01:11:11:08:94:3c:28:39:
76:5b:0e:b7:94:3a:08:63:72:05:a8:cc:e5:a9:27:
fe:e5:18:f0:59:b2:7b:04:1f:ac:b8:c0:cc:6a:d1:
70:a8:0f:6d:14:a2:8c:59:c5:89:8a:f5:5b:32:d7:
9a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:64:08:FC:35:70:A0:17:A7:A8:89:53:BD:1A:FF:E6:73:47:89:4D
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:d3:0d:cc:1d:f3:18:37:81:a3:c2:77:7c:85:90:00:cc:99:
1f:88:f6:c2:b9:92:28:c9:20:c9:a6:9a:aa:01:e2:93:81:14:
26:84:03:d5:bb:89:28:fe:39:5f:d9:de:b4:d3:e0:95:c8:05:
f7:ac:d8:96:ba:95:87:9b:08:47:69:d5:02:50:32:f0:ea:4d:
43:e3:5b:87:5e:b0:32:b3:b1:e9:30:01:8d:88:57:2b:27:78:
d3:b9:3f:7e:94:e4:5b:da:06:55:89:4c:96:8d:fb:bb:a6:c9:
2a:2b:12:f7:56:1d:f2:c6:ee:80:9a:d7:57:ad:36:f1:c2:c2:
6e:50:00:98:d3:72:33:af:17:f2:72:d3:fe:7b:a2:4b:47:c9:
f3:f0:f6:78:9d:b3:9a:71:8c:62:c0:3b:75:d9:87:d7:0c:46:
69:fe:10:a3:2d:a6:24:5d:b2:9d:a4:75:8b:0f:e0:4b:e0:f5:
57:cb:92:18:98:87:5c:c6:55:8a:9c:b1:e2:53:e6:51:6f:83:
57:6b:f8:27:1a:61:7e:ad:e1:bd:45:2e:7a:55:94:3e:e8:3c:
7c:1d:c2:26:fe:a7:57:24:39:b8:cd:09:1f:aa:1a:74:0a:0e:
6e:21:f4:e3:97:99:47:5b:61:0a:82:02:62:37:ed:41:ac:53:
1f:9b:bf:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:41:25 2026 by rpki-client