Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
File: X7qw05-2l5_k09JIOgG908k77O8.mft (raw, json)
Hash identifier: 8Lii9pGJyV9jaOo7YYCTMNEN3IlU7AgbfZbOt1uOvV4=
Subject key identifier: 4B:66:F3:50:23:77:DE:9F:96:DC:9A:A7:25:01:4C:90:23:5E:87:4A
Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
Certificate issuer: /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Certificate serial: 01A0F7FC189F6C20DC4461B113349EEDA055
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
Manifest number: 0F90
Signing time: Thu 01 Oct 2026 15:01:28 +0000
Manifest this update: Thu 01 Oct 2026 15:01:28 +0000
Manifest next update: Fri 02 Oct 2026 15:01:28 +0000
Files and hashes: 1: Fnr8UBCRPeUQhRVFOAHVctCKPfo.roa (hash: PgOyYUmMG9zgljOcOgtP5byxd2cN3HfKRRt85MDBTwk=)
2: X7qw05-2l5_k09JIOgG908k77O8.crl (hash: thAMCgTMETO8WPTREU9C/w6gq0p4fUuxWGRKjt10fSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 14:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f7:fc:18:9f:6c:20:dc:44:61:b1:13:34:9e:ed:a0:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Validity
Not Before: Oct 1 15:01:28 2026 GMT
Not After : Oct 2 15:01:28 2026 GMT
Subject: CN=4b66f3502377de9f96dc9aa725014c90235e874a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:ff:45:d3:ff:99:a7:ee:7f:02:6c:56:73:
4c:b1:cd:5f:1b:67:26:7b:e8:96:f1:43:42:83:d7:
b9:fc:a5:27:8a:a8:24:b8:20:5e:16:54:bd:07:e0:
0e:50:0b:a2:f2:3e:27:a0:62:87:9a:ec:9d:2f:4a:
1b:c5:1d:48:24:42:31:fb:3d:f4:3b:94:71:e8:5e:
04:eb:53:b9:af:4a:8d:f9:0a:2c:c4:99:6b:7d:f7:
04:b7:9b:44:96:01:04:2c:78:34:62:cb:2a:a4:19:
98:ce:0a:e5:1b:04:4f:f8:1a:c9:a1:30:29:49:bc:
01:46:a6:35:9f:ed:9a:46:a1:a9:4a:ef:17:2b:e9:
71:3c:64:b2:ac:28:df:c7:3e:81:58:81:9f:a2:fd:
fe:30:67:dd:f3:08:0e:b4:2b:68:38:ee:ea:9a:8b:
6a:63:0a:90:74:c3:86:67:97:f8:9c:ca:d1:5f:40:
e3:9e:49:09:80:9b:ef:d0:64:f1:9e:10:1c:e3:c3:
2e:74:35:cc:77:01:57:e7:e3:25:c4:2d:40:34:9c:
36:6c:f5:8b:a3:b5:c7:5f:e6:b1:c3:47:9f:e9:1c:
67:aa:18:84:6d:a6:8b:21:c1:fa:11:dd:f9:53:fd:
c9:31:ac:db:b1:3c:72:47:91:a3:fc:e7:01:28:1d:
dc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:66:F3:50:23:77:DE:9F:96:DC:9A:A7:25:01:4C:90:23:5E:87:4A
X509v3 Authority Key Identifier:
keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:e0:94:80:94:97:83:71:fa:99:cf:6c:97:08:04:44:14:b8:
3a:04:e9:d6:52:fe:56:0d:fe:95:2b:46:06:f8:88:cc:62:6d:
19:41:57:15:70:ce:2a:c3:3b:10:f5:b9:15:a3:af:b6:b4:09:
51:ab:6c:47:e4:da:f4:fc:4d:5a:f8:6f:32:5a:4a:00:f8:eb:
81:8a:b6:6f:0b:e6:8e:b2:14:a4:c0:b5:03:08:69:91:fd:cc:
05:da:a0:00:e6:1f:1a:59:0d:34:7d:79:5e:91:c7:e1:8f:cb:
93:f5:d5:e8:8a:75:2d:43:31:df:4e:02:95:df:63:07:f3:07:
1b:0c:80:d6:7f:5a:14:5f:ba:c1:bc:02:31:43:56:8f:30:f9:
e5:85:11:b4:d9:02:23:94:64:46:c0:3d:d2:cc:a2:e0:c3:8f:
dc:37:e3:eb:d8:1e:ec:f3:3e:75:02:8c:b7:ae:35:3e:0c:52:
76:ce:32:f6:a1:63:60:a9:e4:52:4a:e4:f5:db:81:93:5a:04:
7a:65:09:a7:45:c4:b0:b6:3e:5a:30:f2:aa:6e:6e:2c:96:db:
74:d0:f7:98:9e:6f:7f:a3:54:bd:36:f0:3c:39:08:1a:bd:f9:
92:94:c8:d9:67:eb:01:29:19:8f:46:49:18:7d:b9:bd:0a:c2:
a9:29:9d:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 21:11:24 2026 by rpki-client