Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: wo4pIt8bc9xfBavh6eBtlknagZVVqt0iVDx/V8erY1U=
Subject key identifier: 87:1A:7F:A5:44:5A:14:5D:B9:64:34:B2:DE:F0:D9:73:F6:62:DC:98
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 019E1E6C39A0D7E54B7D0C86B8363F608EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 106C
Signing time: Tue 12 May 2026 23:01:09 +0000
Manifest this update: Tue 12 May 2026 23:01:09 +0000
Manifest next update: Wed 13 May 2026 23:01:09 +0000
Files and hashes: 1: FpMR3_wbyPoQ3SpLC3msQFuHBCc.roa (hash: mnRTyPfeR1b8jfxG5BpoCLK6zLk4lmp1OJjO9At2igc=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: prvXvZWCnBkm3W9TjVGfkIztv17mTe1w/GcbwnTu23M=)
3: YcE6ReHh6unnU83H-TjyslkyeUw.roa (hash: McwZCMtZVwtttRxvoSUbvLr+7AkamJmadn/zlM3onqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:39:a0:d7:e5:4b:7d:0c:86:b8:36:3f:60:8e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: May 12 23:01:09 2026 GMT
Not After : May 13 23:01:09 2026 GMT
Subject: CN=871a7fa5445a145db96434b2def0d973f662dc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:32:6f:23:83:15:85:b0:82:12:40:50:21:81:
5c:8f:18:a1:3b:63:a8:a9:10:8a:37:18:56:31:dd:
cc:83:c6:15:62:96:60:06:f7:0e:7a:a1:1b:ca:d5:
d2:43:46:70:d2:c6:c8:52:f5:aa:11:55:73:49:a3:
12:e2:f8:fb:62:d7:87:80:ef:a9:e0:6f:56:b1:55:
ba:3f:61:ae:87:d8:b6:4a:93:bf:e9:01:1f:23:e2:
fb:68:16:57:ca:b7:ac:8c:62:dd:82:b2:66:68:8f:
b4:15:da:76:bb:9f:aa:66:d1:40:27:a3:fd:37:5d:
79:a9:c7:29:64:4b:9a:56:9b:4e:f1:8b:f8:ff:a8:
0e:eb:75:cf:03:2f:3b:e5:0f:5f:c7:75:fe:db:f1:
84:8b:7c:ae:c6:a8:ad:d0:8c:e7:02:88:24:1e:69:
13:e0:0d:b6:34:01:5a:9a:79:5a:14:42:fc:9f:09:
60:e8:c2:96:31:03:4a:ca:f0:34:bc:a3:09:72:a3:
b2:b6:0d:65:89:18:1c:47:d1:7c:ce:bd:52:f9:e6:
1a:81:85:7c:78:0e:69:27:cc:cb:ed:91:93:61:bf:
bd:17:30:71:d0:26:23:09:95:d8:2c:7e:ee:6d:ce:
ed:16:ae:19:e3:96:09:47:79:21:1a:28:b2:e1:d7:
b0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:1A:7F:A5:44:5A:14:5D:B9:64:34:B2:DE:F0:D9:73:F6:62:DC:98
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:fd:c1:b1:fe:71:1b:00:39:52:26:e6:ad:9b:78:7d:74:7e:
79:90:9c:e3:1e:90:f6:51:d3:63:08:12:25:af:d9:d3:8e:dc:
fb:e9:72:43:b1:2a:af:38:40:99:d8:1b:7f:42:ab:84:53:8b:
a4:65:b5:c0:ff:b4:8b:c7:03:21:61:d5:68:18:fe:7b:b0:0a:
8f:b5:ff:b9:7b:72:0b:c1:ad:ea:e7:2a:9c:52:2c:7d:5b:66:
96:5f:07:2f:6d:07:0c:33:5c:db:0f:5d:df:09:9e:6f:49:23:
df:0e:26:61:55:41:4b:32:05:2b:c5:e5:70:6b:7e:a8:86:62:
ca:c6:54:9a:63:c7:8c:b1:dd:02:b8:f0:33:a0:c5:b4:19:5e:
fa:03:df:84:c7:0b:7e:23:09:16:80:1e:5a:0d:1b:f9:5b:c5:
a2:62:45:30:5e:a1:d8:a7:1f:f1:6c:d7:b5:31:e3:59:93:3d:
27:17:18:9a:e1:f7:d3:da:6a:ad:27:c7:73:5b:9a:54:ca:ec:
ce:49:7f:e1:02:79:a8:06:58:4e:d9:82:d8:6d:43:39:57:6c:
1b:62:80:ca:80:eb:2b:c0:ba:d7:f5:db:5d:2c:74:37:40:35:
e9:a8:8a:c4:da:86:93:e9:f3:35:49:9b:80:65:2a:41:c2:a4:
b0:91:3c:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:38:14 2026 by rpki-client