Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
File: XfSth7gyLMlJFI4NdmIc6oNYpoU.mft (raw, json)
Hash identifier: KZQk/4Us7hXFqLqMDb0yQ15yn+wFvDd6C1PXEwh4nr4=
Subject key identifier: 7C:CF:B3:2A:F2:D5:A9:CB:B0:14:FC:8D:0C:29:5E:9D:82:44:EB:76
Authority key identifier: 5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
Certificate issuer: /CN=5df4ad87b8322cc949148e0d76621cea8358a685
Certificate serial: 01A08F7B91497866A5CEA243F47AA8CD9095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
Manifest number: 0239
Signing time: Fri 11 Sep 2026 08:00:35 +0000
Manifest this update: Fri 11 Sep 2026 08:00:35 +0000
Manifest next update: Sat 12 Sep 2026 08:00:35 +0000
Files and hashes: 1: XfSth7gyLMlJFI4NdmIc6oNYpoU.crl (hash: t8YAxNQ7E+WCtB0f61+PJoGwzqlBr1sfRffJtiN+pT0=)
2: hlSTINC_KpLJH_012cszF50XrrM.roa (hash: R9LXujjJX9A3v2Y9QXZNY393BmFuvvM/3QjbC/Pbq0E=)
3: wi4pwq_pbwyf-RifkawT_5o4jbY.roa (hash: QtIyVI0mDcZKu2N+GCjxkT9Lyx1XzVHsblRr7n1YzG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:7b:91:49:78:66:a5:ce:a2:43:f4:7a:a8:cd:90:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df4ad87b8322cc949148e0d76621cea8358a685
Validity
Not Before: Sep 11 08:00:35 2026 GMT
Not After : Sep 12 08:00:35 2026 GMT
Subject: CN=7ccfb32af2d5a9cbb014fc8d0c295e9d8244eb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7a:50:2f:ff:0c:cb:e3:00:99:fe:3b:20:af:
b0:6b:a6:71:bc:33:04:a3:c6:18:e8:19:96:0a:77:
fc:d0:5b:0c:b2:83:d7:8b:4c:48:99:23:f7:81:06:
4e:34:06:b6:52:a1:71:01:2e:c9:9d:26:26:b5:09:
0a:bd:76:2f:95:a1:9a:a6:bd:91:2c:4d:55:92:32:
19:d0:7c:7a:b5:1d:ea:ba:83:c7:44:25:e4:e7:15:
93:44:9a:65:f4:20:29:84:37:a1:70:c7:39:f4:e2:
d4:7a:d5:31:36:2a:e3:20:d0:5e:ea:cb:21:65:f9:
72:1b:59:8b:7e:8b:b0:62:d6:b9:02:dd:03:0f:ea:
53:d9:1f:2d:a6:93:48:72:c1:5e:c2:49:7e:6d:38:
62:fc:7b:35:06:eb:60:30:67:25:99:e1:db:bf:b4:
2d:ee:99:02:a3:fa:0a:89:d3:b3:b8:31:31:5e:4d:
a8:fd:b8:b1:50:86:85:4c:12:86:ce:a8:07:db:00:
ca:52:50:a9:36:52:10:42:44:ac:52:3d:e3:25:02:
db:4b:74:3c:d5:4a:09:02:02:07:22:8c:c7:35:d8:
7a:33:52:8c:14:80:ca:89:d3:48:35:fa:ba:41:cb:
dd:16:92:bb:e0:ed:4d:d7:5a:e2:53:1e:9b:62:b0:
a8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:CF:B3:2A:F2:D5:A9:CB:B0:14:FC:8D:0C:29:5E:9D:82:44:EB:76
X509v3 Authority Key Identifier:
keyid:5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a5:e0:f7:a9:53:68:1d:0b:04:cc:70:92:2b:a3:f7:c2:e1:
e3:1c:6f:61:b5:a3:e7:30:6d:51:13:58:0a:8d:00:01:e2:0c:
5c:9d:5a:61:f0:24:a1:41:29:eb:41:b7:82:b1:31:5c:b4:3f:
b5:69:43:96:6f:69:78:ce:8a:c0:d3:48:7f:1f:c3:8b:73:3a:
4d:ca:38:85:b7:5e:bf:1f:d5:47:59:8d:7b:51:26:65:69:cd:
a1:75:b0:18:a1:b7:32:0c:22:5e:40:d7:7a:11:0b:2a:e3:cb:
37:cf:8a:a7:57:1e:55:ee:ea:cb:f6:36:2f:a8:27:c1:ad:73:
38:52:51:3c:96:77:45:d9:f6:e3:7b:4d:5b:83:05:34:fa:07:
c0:b9:c0:d3:d9:c4:3b:0e:0a:0b:90:b5:c4:e8:65:59:f1:f6:
f8:96:5c:5b:07:85:b5:1d:3f:14:1a:45:c2:ea:22:1e:d5:51:
fc:78:8a:cf:50:f2:d5:31:6a:93:75:f6:e2:c3:83:f7:0c:53:
e3:1d:21:2e:c5:15:65:54:3b:d4:a2:7b:09:cb:d0:2e:ac:fd:
12:e2:10:a8:23:28:5f:f1:f3:9c:e2:cd:a4:7a:22:3b:8e:fc:
fc:27:6e:cf:08:97:a3:30:10:d3:51:04:5c:c0:d4:c4:f6:3b:
40:df:f5:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 12:44:00 2026 by rpki-client