Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: SS8ae0dKg6kFsMaDRF09pLKJvA14l6tqTbeyDX/8Y7Q=
Subject key identifier: 86:25:32:8A:7B:4A:35:F1:7E:54:8C:7B:2A:48:D7:CD:07:1E:86:BC
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 019F932406F3388C3C9BADC2D6B8531E5E65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 112D
Signing time: Fri 24 Jul 2026 08:00:39 +0000
Manifest this update: Fri 24 Jul 2026 08:00:39 +0000
Manifest next update: Sat 25 Jul 2026 08:00:39 +0000
Files and hashes: 1: FpMR3_wbyPoQ3SpLC3msQFuHBCc.roa (hash: mnRTyPfeR1b8jfxG5BpoCLK6zLk4lmp1OJjO9At2igc=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: SBFSv0Qrg7mVzsc7/Jc2+nVIMOJFGUTB2L2BzR2s0EY=)
3: YcE6ReHh6unnU83H-TjyslkyeUw.roa (hash: McwZCMtZVwtttRxvoSUbvLr+7AkamJmadn/zlM3onqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:06:f3:38:8c:3c:9b:ad:c2:d6:b8:53:1e:5e:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Jul 24 08:00:39 2026 GMT
Not After : Jul 25 08:00:39 2026 GMT
Subject: CN=8625328a7b4a35f17e548c7b2a48d7cd071e86bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:10:58:93:6f:64:69:fb:2a:69:c5:04:e3:48:
5d:b4:28:e3:dd:ed:91:dd:43:6f:62:08:52:91:b8:
c8:c8:28:66:e4:66:4d:3a:2c:51:97:b3:cb:cb:30:
7d:df:c3:08:09:14:c8:34:50:f5:ab:01:fb:f3:85:
0e:d0:67:ed:c4:f5:25:62:45:53:5a:e4:58:77:58:
79:b3:4d:1e:67:49:31:eb:31:a4:59:3a:5c:50:3b:
3d:75:f6:89:0a:73:42:b9:09:82:ba:f1:f9:b5:52:
32:30:6f:68:ec:dd:9e:8b:c4:52:33:d5:df:78:e1:
13:78:8d:30:6b:11:d6:c3:21:b1:ee:4f:ed:0e:68:
c8:05:51:92:5c:f7:29:44:98:a1:84:d3:6e:88:eb:
dc:31:fc:cb:bb:cd:24:b9:06:ef:d0:dd:41:be:91:
55:7e:8e:41:dd:86:d0:5a:a9:42:be:03:b5:78:32:
49:99:df:8d:37:c9:bf:4a:74:98:8e:47:a0:0d:f3:
a8:72:68:09:53:e6:93:bc:3f:db:d5:a6:43:f4:19:
88:38:13:00:4e:a7:f7:47:ce:07:87:73:3a:8a:7b:
9b:f0:04:82:47:57:32:54:92:c8:52:d8:22:ea:f2:
b2:6b:af:25:c8:6b:83:64:fa:b7:bd:ca:8f:b5:06:
51:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:25:32:8A:7B:4A:35:F1:7E:54:8C:7B:2A:48:D7:CD:07:1E:86:BC
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:96:08:16:f2:35:29:88:75:f8:c6:fd:db:9d:83:97:99:01:
5d:f6:68:4c:73:1b:2f:ca:3b:74:e9:e6:52:3f:0d:79:b0:55:
f8:6a:a4:84:e6:67:d7:47:0f:df:95:ae:0b:47:40:f9:57:01:
64:7a:2e:1b:99:7d:e7:99:56:95:a3:b5:2b:21:81:2e:f4:4d:
86:f7:b1:17:3a:bf:e7:9e:7b:ba:89:22:de:f8:d6:5f:89:44:
84:3e:ac:0d:3a:93:ec:4f:1f:cc:b0:b8:fb:3c:4b:51:c9:d5:
57:b1:c4:ab:5c:ab:81:dd:48:e3:50:4b:e3:eb:3d:d1:1c:b3:
f3:d5:ff:74:17:87:47:67:c5:7a:79:77:ce:c6:b9:3e:88:a9:
61:5c:98:33:2f:e7:8c:ea:a9:53:16:61:34:b2:79:b8:b8:3a:
bf:d6:59:70:2b:16:4d:98:99:fe:20:74:e4:3c:a6:ac:cd:50:
e2:6f:83:0f:c0:2d:ed:f1:27:93:05:8e:3e:b8:4b:20:b5:38:
37:bc:33:60:93:8f:f7:f7:6b:83:30:b6:23:94:33:d5:e7:9d:
3c:87:0d:a7:59:d5:a0:10:6e:fc:02:09:5f:e1:93:e0:7e:c5:
6b:d2:19:eb:d9:02:0c:a0:f7:14:a7:19:0b:14:f8:0e:8b:76:
3e:58:81:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:35:43 2026 by rpki-client