Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.mft
File: X3vX5dUz3lJtSY3NimMEZzkgjSE.mft (raw, json)
Hash identifier: rsEfLv6R9YQ5rYWppU48CL7VEchxGioBPa/U7icPDp0=
Subject key identifier: B7:27:07:E5:E5:30:C0:D6:DB:94:41:EF:F7:17:7A:32:20:CD:61:3E
Authority key identifier: 5F:7B:D7:E5:D5:33:DE:52:6D:49:8D:CD:8A:63:04:67:39:20:8D:21
Certificate issuer: /CN=5f7bd7e5d533de526d498dcd8a63046739208d21
Certificate serial: 01A0CF6D6A4F5E7ED204CD15F6932D842850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3vX5dUz3lJtSY3NimMEZzkgjSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.mft
Manifest number: 5F
Signing time: Wed 23 Sep 2026 18:00:49 +0000
Manifest this update: Wed 23 Sep 2026 18:00:49 +0000
Manifest next update: Thu 24 Sep 2026 18:00:49 +0000
Files and hashes: 1: HUhw9cLx8_fWSY-eLVPdIS95ScI.asa (hash: tay+QqVKxzFNXYmywf6FycLZJgzN0dQqtFAyPOYkOPM=)
2: X3vX5dUz3lJtSY3NimMEZzkgjSE.crl (hash: TpZwzzh/yjPsFFJllsCcVnGBbK1cGi9F9azEh96OkVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3vX5dUz3lJtSY3NimMEZzkgjSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:6d:6a:4f:5e:7e:d2:04:cd:15:f6:93:2d:84:28:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7bd7e5d533de526d498dcd8a63046739208d21
Validity
Not Before: Sep 23 18:00:49 2026 GMT
Not After : Sep 24 18:00:49 2026 GMT
Subject: CN=b72707e5e530c0d6db9441eff7177a3220cd613e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:83:a3:a3:ae:18:54:aa:f6:41:41:e1:29:09:
02:2d:05:a6:26:95:a6:01:c7:c1:54:a6:55:67:f0:
f0:36:62:80:0e:51:62:8d:54:a2:97:58:c3:b9:0f:
a9:f8:f8:fa:7b:fc:da:a8:36:4c:ec:5e:d0:87:6b:
90:71:e3:c3:dd:ab:7f:e6:68:55:4e:3c:08:63:69:
31:60:df:c7:10:9f:1f:77:55:94:82:2d:ef:53:cf:
1a:c5:1e:4d:cd:7b:21:8e:b2:f7:d5:f9:be:e8:e7:
2a:6c:77:f2:71:a3:fe:79:0c:58:2a:ce:fa:aa:1e:
71:90:69:58:ca:5e:31:74:03:2e:64:b3:97:b0:6f:
61:4b:5c:9d:fc:59:f1:73:fb:2c:0c:3c:d7:73:0f:
0b:ab:90:fb:2d:5d:18:ff:55:7c:3e:46:b8:2a:0e:
ed:07:9b:86:a7:ae:f6:21:51:f2:ee:03:87:f5:55:
45:0b:12:39:11:f8:3a:9c:a3:bd:54:c2:2c:6c:32:
64:76:ea:55:c9:dd:c2:5f:ea:78:70:1a:e2:46:fe:
bf:e5:fd:59:ac:94:15:32:55:ab:4c:85:45:dd:2d:
ad:94:53:cc:f6:ca:1f:9f:ae:31:80:72:fb:87:95:
fc:05:2f:e4:f5:91:a8:f5:ef:a2:92:79:2a:87:17:
a1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:27:07:E5:E5:30:C0:D6:DB:94:41:EF:F7:17:7A:32:20:CD:61:3E
X509v3 Authority Key Identifier:
keyid:5F:7B:D7:E5:D5:33:DE:52:6D:49:8D:CD:8A:63:04:67:39:20:8D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3vX5dUz3lJtSY3NimMEZzkgjSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:49:cd:3c:a6:57:52:6c:24:46:aa:18:66:be:0b:0f:0d:9b:
b7:07:42:76:5c:d2:c5:06:26:99:b6:0b:44:f7:5b:82:0d:fb:
73:b6:34:0f:f2:aa:99:fa:b0:32:50:98:fa:91:b1:1b:17:00:
9e:f4:23:38:73:dc:09:ff:44:f9:f5:28:a8:e5:9a:30:7d:23:
b3:a9:6e:28:7b:72:54:56:61:57:19:86:a6:6f:fe:4b:41:07:
73:d5:7f:3d:fc:a1:93:19:5d:49:a9:3d:9a:89:da:5a:12:63:
82:9d:58:ec:53:da:56:50:15:08:83:00:f6:1b:1c:11:ad:1f:
ff:00:bf:ea:d4:b0:cf:c4:d5:dc:5a:a7:54:ec:19:2c:1e:e8:
5c:b8:44:fe:52:03:47:71:f2:aa:9f:4f:5e:e9:46:04:e3:17:
99:11:1e:d5:a6:cf:82:a5:17:15:82:41:50:96:6b:95:89:f5:
7e:8c:66:f7:6d:0f:fa:8a:e8:fa:8f:88:03:f3:1d:19:a4:96:
0f:d0:21:02:dd:df:e3:10:eb:ce:48:f6:bb:64:28:03:86:84:
53:04:0a:d0:04:77:86:89:31:e8:f7:96:65:bf:17:ad:6a:ea:
f8:2f:b9:ec:7b:d5:d7:b7:f7:61:30:22:86:84:d6:36:75:05:
01:a6:8e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:37:24 2026 by rpki-client