Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
File: X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json)
Hash identifier: un4BPxN4IH1wpSsduHNP9MI1lftlGQWGEovhRT/Wpkc=
Subject key identifier: 8C:31:3B:5B:7D:A7:CE:6A:4C:A5:83:1F:BB:09:24:FA:98:7E:CA:F6
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial: 01A0D1C94177B19D32A4BC0BAA4F03E3F181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
Manifest number: 1A6C
Signing time: Thu 24 Sep 2026 05:00:22 +0000
Manifest this update: Thu 24 Sep 2026 05:00:22 +0000
Manifest next update: Fri 25 Sep 2026 05:00:22 +0000
Files and hashes: 1: 7t-QMh_AB92nrya7tNjufAiIaNU.roa (hash: LTbV2PdrQop6XvBMoLsBRV4fZwR2wk3jFKlBOeHWh48=)
2: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: DbEQo2LNe3Q8vnctIgLYJbhNh82Nrfg/1UMGo+2RKUU=)
3: tyhGCGUUUxBeIkOEmn5CIWeCMz0.roa (hash: Mn4RuAcnVGGM8GO1ajZF2VYJS7eHnyi2wQ/w4qHvAaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 05:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:41:77:b1:9d:32:a4:bc:0b:aa:4f:03:e3:f1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Validity
Not Before: Sep 24 05:00:22 2026 GMT
Not After : Sep 25 05:00:22 2026 GMT
Subject: CN=8c313b5b7da7ce6a4ca5831fbb0924fa987ecaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:27:04:2b:5d:41:9c:be:57:3f:63:6f:79:65:
6e:13:61:27:ba:76:68:ec:61:1c:34:0c:93:0d:b9:
28:cf:e8:19:17:96:27:c7:85:8a:bd:a4:c6:88:bd:
af:0d:5e:d5:73:33:9d:a8:a2:42:bb:04:4a:71:31:
c8:fe:ca:56:70:bf:a4:8c:cb:0f:2c:36:4a:35:03:
ab:eb:3b:d2:66:92:af:7f:46:79:81:d4:f6:84:eb:
e2:ad:2f:6f:40:1a:25:d9:fb:3f:02:c9:f8:e3:5a:
2f:54:6e:0b:da:b9:e6:aa:b7:fa:d8:5a:7f:4a:53:
c9:b4:0f:0e:5f:73:7f:c1:0a:75:da:62:e9:1b:8b:
33:60:b8:fa:48:de:0e:46:6d:33:1b:53:36:a6:ff:
7f:0e:ae:bd:1c:af:3c:36:09:05:c6:1a:a0:22:1c:
4f:01:01:c0:a8:2f:e0:de:de:ea:61:cf:d5:9f:0f:
e9:ad:fa:42:3a:7a:70:5c:29:62:89:a5:f6:cd:78:
07:71:1a:3d:07:f4:62:9a:b3:3a:1b:af:a1:71:d8:
2d:1d:4b:6b:af:44:7c:15:35:b1:59:38:7d:5b:eb:
e9:9f:ee:e8:59:34:e1:6f:11:63:d9:cb:9d:d3:3d:
97:b0:44:91:6e:fa:c3:26:2d:12:65:85:e1:12:1c:
41:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:31:3B:5B:7D:A7:CE:6A:4C:A5:83:1F:BB:09:24:FA:98:7E:CA:F6
X509v3 Authority Key Identifier:
keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:ba:a5:d0:13:02:9d:6e:be:75:85:14:71:a8:ff:d3:c9:27:
06:0f:fa:6e:ba:fa:60:50:6d:d6:2d:b6:c7:0d:3f:6c:2f:48:
c2:75:f8:6c:0a:2f:f0:b1:34:99:7e:10:3e:d9:71:a2:b0:e4:
c7:78:45:63:42:76:8b:5b:22:10:86:35:87:13:54:90:e7:60:
5c:c1:99:50:7f:2f:8e:22:90:d3:6f:27:a1:4d:f9:7a:51:b6:
73:a8:8b:cf:07:35:65:35:e9:45:a6:1e:1b:6a:f8:8c:d6:93:
13:29:5d:6c:63:8a:a1:40:14:e6:a9:e9:f8:6f:cd:e4:b9:d4:
c1:01:4d:13:d7:13:33:3b:cc:ff:1c:6c:09:b2:24:b5:15:f7:
5d:13:7d:fa:5b:ec:38:2d:8d:8e:46:7e:a2:11:7d:71:ce:25:
a3:87:aa:0b:e4:57:62:e3:01:d3:a8:69:b9:e1:bc:c2:e8:e1:
08:ab:6a:a4:bb:2b:3d:26:e2:e8:e8:47:71:a6:e0:6c:1e:55:
04:57:3d:72:3e:b1:bf:e6:50:fe:d3:5a:99:9d:11:71:96:21:
6b:3c:4d:4c:13:b3:39:95:da:16:ac:2c:0e:ac:c7:13:0a:7e:
07:94:6c:92:a5:11:b6:e7:0d:bd:70:60:f2:c6:1c:80:6a:8c:
5a:23:5e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:47:53 2026 by rpki-client