Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
File: X2tkyBuOyHNUU-lAP72UlpiWmUA.mft (raw, json)
Hash identifier: /V/GlcxCvLivvXdaVb5a1Q1QRQwLEuiu5moe3H/qNdA=
Subject key identifier: 5F:29:C4:F3:C9:E6:DD:23:B7:FA:D2:01:4B:55:25:8B:D1:AE:48:9D
Authority key identifier: 5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40
Certificate issuer: /CN=5f6b64c81b8ec8735453e9403fbd949698969940
Certificate serial: 01A107A654D13C85F0120D7EBC158FF993F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
Manifest number: 0123
Signing time: Sun 04 Oct 2026 16:01:43 +0000
Manifest this update: Sun 04 Oct 2026 16:01:43 +0000
Manifest next update: Mon 05 Oct 2026 16:01:43 +0000
Files and hashes: 1: MwwTtfqSDI8q5-iLJ6gRVj5w5_A.roa (hash: 1nyg//DPGxUyvWbSkzZcVUWN8V8QWNENdy2yUz4eoxQ=)
2: X2tkyBuOyHNUU-lAP72UlpiWmUA.crl (hash: TZBVY4kAp7rR6l2Sfg2Y1Riv9iJnpBOgwpdhRca860E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:07:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:a6:54:d1:3c:85:f0:12:0d:7e:bc:15:8f:f9:93:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b64c81b8ec8735453e9403fbd949698969940
Validity
Not Before: Oct 4 16:01:43 2026 GMT
Not After : Oct 5 16:01:43 2026 GMT
Subject: CN=5f29c4f3c9e6dd23b7fad2014b55258bd1ae489d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:17:31:43:f6:c9:50:8f:e4:d1:cf:1e:2f:
04:e4:8b:74:f3:33:58:61:43:06:0d:6e:7e:b9:89:
06:e6:5e:1c:e6:56:ce:eb:41:7f:c7:ca:cc:a8:91:
4e:15:7e:5d:ac:df:68:99:f2:89:1b:f0:f0:69:93:
de:69:6d:e7:78:e7:e4:c2:53:20:33:f2:2d:12:5c:
d1:f9:1e:a8:de:5a:af:f0:94:41:1c:a5:fd:f0:0f:
7c:f8:28:ec:65:2d:59:c7:40:39:cf:16:f7:bd:d7:
96:5c:e2:be:95:77:4b:0d:1e:36:e3:f1:33:59:aa:
8a:25:40:a1:b4:0e:9d:37:b3:82:26:e5:09:b0:46:
b0:ed:7b:a1:c3:98:d6:1e:89:1e:56:61:52:f4:76:
61:f6:06:28:4f:44:f4:5d:09:2f:4d:cb:85:e8:11:
3b:5c:fb:60:8e:52:48:fe:eb:07:6b:78:12:d9:1b:
b1:4e:d5:15:7e:24:46:4f:20:87:96:f5:dc:77:6b:
9a:ee:76:33:5f:c2:c5:f0:58:1f:18:a1:38:32:de:
81:75:98:73:96:ad:cf:58:58:8a:6d:ff:86:2f:95:
3a:05:e3:0d:87:f3:6b:4c:45:2c:a4:a8:70:40:b0:
1e:57:9f:e2:5e:4a:b0:03:30:89:07:9c:bf:a0:f9:
da:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:29:C4:F3:C9:E6:DD:23:B7:FA:D2:01:4B:55:25:8B:D1:AE:48:9D
X509v3 Authority Key Identifier:
keyid:5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:20:90:dc:ba:66:a4:2a:3b:46:03:54:6b:33:39:df:0c:57:
31:80:23:57:81:0f:f3:1a:0a:45:75:d6:ef:a3:2a:d7:46:49:
98:f4:ac:1a:99:8e:2c:4c:cd:30:b1:0e:c6:05:39:5c:ca:5f:
12:a2:94:d0:3e:9e:87:c7:6a:fb:2f:3e:ed:ff:b6:a2:2a:1d:
d3:88:08:fd:fc:65:b2:40:30:90:89:0f:a7:4e:55:67:02:4b:
b2:b6:7e:83:10:16:06:ee:20:36:9b:e7:df:87:00:08:2c:64:
7f:e3:50:23:e1:26:86:79:7f:ca:76:56:0c:76:32:42:1f:c1:
ee:6b:d7:94:51:ea:65:17:eb:65:02:04:19:f3:20:b6:ea:8c:
02:2d:dd:b5:cd:84:b6:ec:2b:56:45:42:3b:63:12:a5:9b:e9:
35:45:e0:50:bc:e6:8b:9c:0a:f1:db:55:e9:a4:41:3c:39:ef:
34:c7:2b:d0:2f:c7:71:40:87:14:59:87:d4:c7:f2:81:2d:4b:
33:2f:90:1c:8c:26:3e:1a:67:e1:ee:ce:48:57:22:3e:6e:64:
a9:d0:dc:aa:76:28:90:f5:60:ae:12:d6:36:db:69:bd:ca:ed:
42:b3:ae:ee:11:87:64:61:db:c7:ff:67:33:c3:f2:92:23:2c:
0f:a6:7c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 21:38:50 2026 by rpki-client