Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
File: X2tkyBuOyHNUU-lAP72UlpiWmUA.mft (raw, json)
Hash identifier: aeL8WxpLO7deMuOvrO+MAcIjPng9K6/+k2GwegailwU=
Subject key identifier: 97:4D:32:7D:C3:20:32:CA:3E:20:3E:32:0B:50:13:D2:1A:05:11:B1
Authority key identifier: 5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40
Certificate issuer: /CN=5f6b64c81b8ec8735453e9403fbd949698969940
Certificate serial: 019F92ED589AF8D73F4BE561C935CEFBC8E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
Manifest number: 62
Signing time: Fri 24 Jul 2026 07:00:56 +0000
Manifest this update: Fri 24 Jul 2026 07:00:56 +0000
Manifest next update: Sat 25 Jul 2026 07:00:56 +0000
Files and hashes: 1: MwwTtfqSDI8q5-iLJ6gRVj5w5_A.roa (hash: 1nyg//DPGxUyvWbSkzZcVUWN8V8QWNENdy2yUz4eoxQ=)
2: X2tkyBuOyHNUU-lAP72UlpiWmUA.crl (hash: EBZ0aIfPDTnIfoAnj6AuRTSoqB3tIbBZpk1W0STRTJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:58:9a:f8:d7:3f:4b:e5:61:c9:35:ce:fb:c8:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b64c81b8ec8735453e9403fbd949698969940
Validity
Not Before: Jul 24 07:00:56 2026 GMT
Not After : Jul 25 07:00:56 2026 GMT
Subject: CN=974d327dc32032ca3e203e320b5013d21a0511b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:0e:9e:af:e4:26:d5:1b:21:09:d1:17:0b:
ea:56:c4:58:29:94:cf:b7:29:28:09:3f:99:a7:3e:
1e:74:9a:10:01:ee:e0:24:4e:c6:75:22:7c:97:24:
9c:27:5d:77:fd:da:b5:c3:26:23:91:ab:66:80:48:
e6:15:27:09:c9:d7:e6:79:d9:6f:55:9a:a9:da:01:
68:eb:ac:86:f6:c2:76:aa:54:0c:31:32:f3:9a:a2:
32:63:e5:0f:91:4e:20:8a:02:dc:64:ad:3f:b5:e6:
1a:6d:9a:3b:81:f0:6b:22:e6:cf:31:18:88:b7:c9:
e5:de:2b:cb:a3:96:36:b3:3a:ef:52:fa:c7:d4:bb:
d9:0c:6b:ec:18:b0:50:d2:fa:22:5a:e0:43:fd:fe:
ff:37:3b:68:4a:d3:0d:76:8c:53:19:2e:c5:1d:31:
9f:f6:40:9c:54:a9:ac:61:2c:65:d6:94:a7:1a:b6:
fd:c2:da:ac:e7:ec:25:6b:2f:bb:77:d9:79:fd:e7:
4d:0a:97:a3:a8:92:21:bd:cb:d4:95:e8:da:6a:5d:
da:d5:f3:65:90:f6:50:03:35:72:0b:2f:d6:f6:c2:
8a:32:a5:3e:dc:60:35:fa:63:ba:a9:18:9d:81:ab:
0e:7a:5c:f2:05:46:11:15:17:f0:a5:99:b6:a4:a8:
06:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:4D:32:7D:C3:20:32:CA:3E:20:3E:32:0B:50:13:D2:1A:05:11:B1
X509v3 Authority Key Identifier:
keyid:5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c7:22:64:42:89:9d:93:a9:3f:aa:22:70:4d:c4:44:0d:1b:
d3:4c:fb:2e:b6:4c:7b:90:87:de:b6:7d:b2:dc:99:be:f8:66:
9f:16:7a:94:00:7b:4e:2a:c6:ed:bb:23:6a:23:9e:9c:94:0e:
13:43:a4:8e:12:37:6c:60:bb:1d:8e:05:8b:ee:d3:e3:0b:66:
b3:06:6e:00:0b:06:3d:11:da:04:22:c3:61:ce:c2:ba:e3:4e:
2c:19:ee:04:4e:0a:d6:43:4c:45:96:ea:ee:47:de:21:c3:aa:
4b:fe:97:d6:0d:0d:01:e5:67:de:41:e1:13:02:72:91:16:d8:
e3:96:8a:41:54:a6:b2:02:1a:02:78:9d:8c:52:f0:54:25:cc:
e1:6e:89:fe:22:3c:0f:31:9a:1a:84:45:f1:c2:ba:ab:38:e7:
f5:70:81:6b:d2:a7:a6:27:88:4a:fb:c0:90:49:71:05:c3:5f:
c5:83:ca:a0:80:14:d5:05:c9:8a:e3:7b:cb:97:88:23:e6:43:
7d:7f:59:f9:81:ce:df:87:8b:55:9d:ee:1b:f3:44:c0:6e:96:
8d:9d:88:eb:e0:0a:39:05:bd:3d:f6:32:bd:5a:b5:90:03:f6:
ad:08:40:25:af:85:2b:fb:8d:d1:ca:fa:0a:6e:bf:d0:b9:0b:
50:63:a0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:22 2026 by rpki-client