Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: cVE1vZ18GKom9mM8aIZvYvitfwG32AMsrt8qXK53s0o=
Subject key identifier: 60:01:C1:D3:16:70:C0:09:B3:6A:2C:CC:0D:89:E0:D5:72:48:75:81
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 01A0D200F3ECBD8DBF41B33646E43FA8A5B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 06:01:12 +0000
Manifest this update: Thu 24 Sep 2026 06:01:12 +0000
Manifest next update: Fri 25 Sep 2026 06:01:12 +0000
Files and hashes: 1: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: JJ/MuOXsMrAP6BHoek3rKiKyfcI4DkUOLZQR3yxANKY=)
2: awXRcerSAP4jrgOUBQ68Ss0j_JE.asa (hash: 7H/s8bfQHFW6k1q0+FHWfKFzwz0TBvvLD09+Qjh3Rf8=)
3: mde2iraZFBwTbp97_tvjs2IMwjU.roa (hash: Q0iRTXsb5myu//hBM4zbKFOJNKJsTWjqhNvukcS55wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:f3:ec:bd:8d:bf:41:b3:36:46:e4:3f:a8:a5:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Sep 24 06:01:12 2026 GMT
Not After : Sep 25 06:01:12 2026 GMT
Subject: CN=6001c1d31670c009b36a2ccc0d89e0d572487581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:81:2c:c3:02:04:56:cc:30:ab:c0:df:79:e4:
b9:e1:7f:2c:a7:e1:71:03:01:a1:0a:8c:61:e9:a2:
8d:20:cc:2b:96:23:b0:a6:5d:3f:d0:dd:6d:a5:ec:
21:d0:d2:a4:6a:4c:35:de:85:0c:1a:4d:ce:78:89:
20:16:17:fa:7c:dc:48:91:11:97:76:82:72:16:35:
16:a6:59:07:9d:6e:c6:9b:a3:9e:78:46:1e:75:b4:
65:9f:b8:99:a9:da:74:5b:e4:24:d9:56:7b:c4:a3:
ae:49:80:30:b5:7e:32:75:57:0d:bb:8a:6f:c0:1f:
4a:aa:d0:08:49:57:ef:60:41:41:fa:33:58:9c:41:
52:7a:dd:f8:90:35:6d:5a:bd:0b:67:e5:f6:b6:df:
88:c6:28:35:09:8b:1c:d1:85:83:d5:55:f8:30:00:
4c:53:5e:81:16:5c:03:6d:c1:84:6d:8a:08:16:dc:
a3:d5:25:19:99:f1:57:02:53:fa:3f:98:95:f4:8c:
42:26:f0:c2:e0:e9:48:21:9f:0e:98:a6:7a:e3:26:
38:ee:70:b4:c2:5e:36:60:46:86:19:67:9a:e0:3b:
83:7f:03:e5:ea:f1:70:28:9c:88:d6:c6:40:ee:e1:
7d:6c:5c:52:3b:f4:30:6e:05:db:1a:a6:6e:d8:a0:
61:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:01:C1:D3:16:70:C0:09:B3:6A:2C:CC:0D:89:E0:D5:72:48:75:81
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:7f:4c:ae:93:aa:2f:df:a7:08:70:21:ba:d7:5d:d1:fb:6a:
3e:c9:14:bd:42:fc:7b:32:98:6b:b5:f7:99:a1:4a:3e:b1:1d:
71:b1:f6:00:f0:f2:9a:59:fa:b4:86:b5:7b:69:3f:b8:df:3f:
a6:9a:00:94:c5:d9:f7:d2:c8:b0:95:f9:bf:65:76:44:90:b4:
11:15:99:17:22:6e:29:b2:88:31:d7:f2:2a:5b:83:d4:87:dc:
a5:72:6e:ba:c1:30:ae:05:14:8e:18:cc:31:67:2e:1f:40:fc:
cd:f6:f9:fb:d7:c9:57:50:67:a4:33:08:0b:31:82:dc:bd:9f:
46:67:ff:29:80:a0:bc:e4:4c:4f:57:5c:ca:21:77:84:a2:1f:
f7:10:db:2f:64:9f:aa:41:84:61:03:f4:79:11:45:91:6e:c0:
a9:45:d2:96:f6:50:fd:c1:3e:2d:59:bc:8d:cf:0e:1d:13:f9:
7c:b9:b3:6b:8d:28:af:05:b1:ef:78:19:1a:6c:4c:9f:d2:a4:
c2:11:ff:04:da:a9:5d:39:30:c4:a5:1d:cf:1b:f6:1e:b6:ce:
12:8c:b4:06:3c:00:66:5f:54:9d:b3:81:aa:94:76:21:8f:01:
53:dc:d6:b3:58:24:4b:d0:8c:77:ae:33:82:4c:b8:b2:09:40:
59:ca:b4:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDSAPPsvY2/QbM2RuQ/qKWzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzI0NzQzMzA0YjdmZDlhMDY1ZDIyY2Q4OWNkYTk1MDQ1
ZTI2OWMwHhcNMjYwOTI0MDYwMTEyWhcNMjYwOTI1MDYwMTEyWjAzMTEwLwYDVQQD
Eyg2MDAxYzFkMzE2NzBjMDA5YjM2YTJjY2MwZDg5ZTBkNTcyNDg3NTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4EswwIEVswwq8DfeeS54X8sp+Fx
AwGhCoxh6aKNIMwrliOwpl0/0N1tpewh0NKkakw13oUMGk3OeIkgFhf6fNxIkRGX
doJyFjUWplkHnW7Gm6OeeEYedbRln7iZqdp0W+Qk2VZ7xKOuSYAwtX4ydVcNu4pv
wB9KqtAISVfvYEFB+jNYnEFSet34kDVtWr0LZ+X2tt+Ixig1CYsc0YWD1VX4MABM
U16BFlwDbcGEbYoIFtyj1SUZmfFXAlP6P5iV9IxCJvDC4OlIIZ8OmKZ64yY47nC0
wl42YEaGGWea4DuDfwPl6vFwKJyI1sZA7uF9bFxSO/QwbgXbGqZu2KBhJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGABwdMWcMAJs2oszA2J4NVySHWBMB8GA1UdIwQY
MBaAFF/CR0MwS3/ZoGXSLNic2pUEXiacMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMt
MGJhOTY3OWRlMmU2LzEvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9lNWEyYzctMDQ1My00OGJhLWIxMGMtMGJhOTY3OWRlMmU2
LzEvWDhKSFF6QkxmOW1nWmRJczJKemFsUVJlSnB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS39MrpOq
L9+nCHAhutdd0ftqPskUvUL8ezKYa7X3maFKPrEdcbH2APDymln6tIa1e2k/uN8/
ppoAlMXZ99LIsJX5v2V2RJC0ERWZFyJuKbKIMdfyKluD1IfcpXJuusEwrgUUjhjM
MWcuH0D8zfb5+9fJV1BnpDMICzGC3L2fRmf/KYCgvORMT1dcyiF3hKIf9xDbL2Sf
qkGEYQP0eRFFkW7AqUXSlvZQ/cE+LVm8jc8OHRP5fLmza40orwWx73gZGmxMn9Kk
whH/BNqpXTkwxKUdzxv2HrbOEoy0BjwAZl9UnbOBqpR2IY8BU9zWs1gkS9CMd64z
gky4sglAWcq0AQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 12:28:22 2026 by rpki-client