Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
File: X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json)
Hash identifier: KWFCQlNB6UmesCLX8td2Dhz99gfCnVa5Mg2KBIlifyQ=
Subject key identifier: 86:D7:3A:F9:43:DB:D0:AD:AF:16:D5:CA:47:7F:77:53:A0:3B:06:22
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial: 01A1DE396D996275AA145EE9837A17C14431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
Manifest number: 1AF7
Signing time: Sun 15 Nov 2026 08:01:07 +0000
Manifest this update: Sun 15 Nov 2026 08:01:07 +0000
Manifest next update: Mon 16 Nov 2026 08:01:07 +0000
Files and hashes: 1: 7t-QMh_AB92nrya7tNjufAiIaNU.roa (hash: LTbV2PdrQop6XvBMoLsBRV4fZwR2wk3jFKlBOeHWh48=)
2: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: xUihA3+pJ9LRUTnEDlBOiKO1ASQU3avrH/TrsHDWj2s=)
3: tyhGCGUUUxBeIkOEmn5CIWeCMz0.roa (hash: Mn4RuAcnVGGM8GO1ajZF2VYJS7eHnyi2wQ/w4qHvAaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:39:6d:99:62:75:aa:14:5e:e9:83:7a:17:c1:44:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Validity
Not Before: Nov 15 08:01:07 2026 GMT
Not After : Nov 16 08:01:07 2026 GMT
Subject: CN=86d73af943dbd0adaf16d5ca477f7753a03b0622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c6:2a:49:96:c1:6d:bf:e4:4d:5c:09:f1:a8:
a6:65:23:35:f9:94:ad:db:64:3e:2b:56:a8:3e:17:
e5:9f:6b:42:dd:53:0e:a6:2d:db:9b:a6:87:28:e5:
dd:b7:ac:ba:10:90:6f:61:40:69:56:6d:c4:0f:50:
2c:b2:d0:f4:91:f3:16:d9:f4:7a:ef:b6:0e:11:1d:
03:75:f3:80:e1:a8:61:6a:46:02:a8:31:5e:f9:83:
ac:14:dd:c6:e0:90:db:9e:3c:23:79:e0:d7:24:5c:
b5:d0:fb:c0:f4:28:59:a6:83:4a:8f:10:3b:97:69:
d6:04:a2:6b:90:73:e7:84:50:43:e5:18:72:9f:8c:
7a:1b:20:76:d2:9d:f2:13:ac:f1:ce:b9:10:79:08:
ef:d0:4f:db:03:48:6d:1a:5e:79:40:d8:ec:20:f8:
dc:fe:0d:7f:e8:2a:d3:70:e2:10:6c:45:c6:0b:57:
38:20:5d:d3:a7:cc:e5:26:b0:ab:66:fd:67:c9:c5:
d0:83:5b:cf:15:2d:e3:43:97:ed:34:f2:71:27:d8:
8c:05:16:68:73:bc:cf:aa:9a:da:1a:b4:cb:e2:2f:
f6:a0:9a:4c:43:6e:c7:86:52:de:c5:d5:a9:e2:66:
eb:67:18:e3:41:04:27:74:e0:70:d2:a1:d3:8e:d7:
f5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:D7:3A:F9:43:DB:D0:AD:AF:16:D5:CA:47:7F:77:53:A0:3B:06:22
X509v3 Authority Key Identifier:
keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ca:7d:96:25:a3:c6:ad:85:7d:fb:bf:27:32:c1:b5:4e:5b:
2f:9a:96:fd:cf:71:06:dd:bc:ac:42:1c:64:b5:54:ac:e8:04:
25:4f:ad:bf:2d:c4:b1:14:46:3a:9b:7a:64:4d:4a:f5:cb:35:
a4:ab:38:65:63:10:4a:27:9e:37:fe:39:83:d2:69:24:86:73:
43:45:34:ea:63:e6:5d:e8:21:43:a1:6a:43:02:e5:54:c2:8d:
44:ec:91:78:29:00:11:87:83:97:56:03:57:fa:c0:34:03:e6:
8e:43:6c:74:f5:4c:81:c6:ac:da:94:2b:7d:54:a8:47:55:6b:
e5:f1:a2:8e:31:27:a9:9d:84:e4:2b:07:c5:21:18:ff:89:ec:
af:12:36:81:45:b7:0f:7e:57:6c:87:5e:9e:c9:b1:50:fa:b6:
f5:c6:17:1c:ff:4a:03:bf:09:3d:ee:1b:9a:e8:5c:81:75:35:
02:5d:ba:48:ed:b5:11:a3:d9:e6:a3:56:77:e5:18:51:fd:23:
bc:43:5d:28:d9:95:49:4e:38:e3:02:27:35:8b:f7:54:04:73:
7f:b2:cd:a1:8d:d8:8a:b6:a2:8f:75:8e:8e:8b:e7:9e:91:4a:
0f:39:50:f5:e8:39:c0:70:0e:82:54:a4:a1:61:22:51:57:50:
0c:2b:57:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:03:15 2026 by rpki-client