Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
File: X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json)
Hash identifier: dUoXEHs8cfou6Qp3e9aN3TOO1hevjPG2d+LyUoL6J6g=
Subject key identifier: AA:70:D7:8B:F2:4A:05:81:53:71:DA:C7:EB:26:4C:8B:D8:24:84:11
Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Certificate issuer: /CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Certificate serial: 01A1027FDE67D766C32068E1E49CC7E3CDEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
Manifest number: 149A
Signing time: Sat 03 Oct 2026 16:01:36 +0000
Manifest this update: Sat 03 Oct 2026 16:01:36 +0000
Manifest next update: Sun 04 Oct 2026 16:01:36 +0000
Files and hashes: 1: OgANtrj8j6WImSC_x9463NVhsNw.roa (hash: 0EdUSPwLZaULLi34jwJduN5d3rfdYn4zQ6i+IIL5P2I=)
2: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: 56DTAPU6cAHvS4YV4Bh4/ozC8SLzOZ4ECJaS/80WyiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 16:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:02:7f:de:67:d7:66:c3:20:68:e1:e4:9c:c7:e3:cd:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Validity
Not Before: Oct 3 16:01:36 2026 GMT
Not After : Oct 4 16:01:36 2026 GMT
Subject: CN=aa70d78bf24a05815371dac7eb264c8bd8248411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:05:b9:9a:93:39:d1:04:91:57:e3:ad:71:30:
57:f1:73:2f:89:26:55:57:79:af:50:d5:90:96:f6:
66:b1:e4:06:94:de:77:91:f9:34:99:f9:d3:25:2e:
67:d3:bd:12:df:e9:8e:a1:cd:b3:b4:bc:3d:3c:39:
32:4b:04:e1:85:7e:77:fb:01:16:cc:03:77:0d:bf:
77:b4:ef:50:cb:97:da:ca:db:78:5d:26:44:23:da:
f5:27:6b:6b:e8:b0:66:35:45:d9:84:2d:f9:b6:d3:
1f:b2:dd:46:b1:91:e6:16:99:25:6f:49:01:fa:e4:
bd:cc:74:79:7e:5d:f8:27:0d:14:a6:bf:cc:73:fc:
bd:7c:bf:df:38:ed:2f:04:3d:a3:ca:54:d5:89:cc:
76:e8:5a:b3:7a:24:2e:52:91:cd:33:26:c9:ba:d3:
1c:e1:20:82:93:e1:74:c8:6e:be:6d:ad:0b:c5:40:
c8:57:f0:61:31:6a:34:26:ee:e8:bb:18:c8:22:44:
4d:d3:2b:e5:2c:0a:9f:05:69:35:25:d3:56:32:65:
65:47:69:23:b7:3d:bf:15:d4:1b:47:94:a5:2a:e8:
20:a7:75:db:5b:f4:fa:bb:41:c1:40:36:88:5d:e0:
53:78:69:1b:97:3d:6d:c5:d8:1c:4a:75:c9:7a:c3:
ff:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:70:D7:8B:F2:4A:05:81:53:71:DA:C7:EB:26:4C:8B:D8:24:84:11
X509v3 Authority Key Identifier:
keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:07:c5:75:0b:16:1b:e7:b4:84:14:c3:03:f5:12:6b:ea:45:
75:a5:8a:57:e8:9c:1e:42:1d:11:83:bf:d7:cc:98:6f:c2:39:
cc:46:b6:38:5c:32:f7:72:48:6a:a1:2d:01:b2:16:14:c2:a2:
13:ef:e3:e4:1a:0c:6a:d6:11:fb:60:7f:01:76:e7:d7:5c:9d:
00:ad:6d:26:55:b9:3a:d4:08:bb:a7:86:a6:47:f0:a5:24:e4:
da:86:0d:cc:de:ab:66:fa:0d:59:8c:e8:1f:13:81:dc:93:08:
df:94:35:f9:f1:f1:3b:8e:43:d1:f8:f3:3f:25:fc:df:9c:9a:
a6:45:c9:7c:21:cc:00:97:8f:87:c4:88:15:be:8b:73:5c:aa:
7a:c4:ad:29:2f:0b:b1:9e:fe:cd:3a:82:7e:dc:d9:6d:6e:e4:
9c:ec:ec:61:f7:69:a9:be:7e:d6:19:db:27:af:04:f6:d2:b0:
95:37:c6:88:1a:b7:d8:e6:fa:8a:b6:a8:d8:d7:62:f8:2a:fa:
9a:cd:18:3e:9b:d3:56:6d:bc:9a:f0:c1:d5:f4:5f:e2:b3:5f:
72:9a:4e:0d:ab:3f:65:77:39:4f:a7:62:4a:ce:e2:78:0c:15:
f9:57:ca:b9:d9:43:f5:9c:3f:2c:5f:e8:33:75:5d:47:c1:5a:
14:0d:97:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 01:58:58 2026 by rpki-client