Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
File: X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft (raw, json)
Hash identifier: S7x2a2tDGyeKjRief8m5BApqA+YDkSwtgkl/WpdqVsk=
Subject key identifier: 7D:73:1E:30:89:5C:CB:66:45:C8:33:D9:74:59:83:65:1F:F0:CB:6F
Authority key identifier: 5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
Certificate issuer: /CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Certificate serial: 019D28BBB2B4338D7E3621DFE8B1F6E1E8E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
Manifest number: 01F3
Signing time: Thu 26 Mar 2026 06:01:22 +0000
Manifest this update: Thu 26 Mar 2026 06:01:22 +0000
Manifest next update: Fri 27 Mar 2026 06:01:22 +0000
Files and hashes: 1: 2aR01OFymFEwZxvW0ul_qajB_MU.roa (hash: uOcW0MztVBXCRsokN174A3EZiiQc7C1Cn12xFKZuxJI=)
2: X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl (hash: yQUA1Dm3uOboTe8Kv3l/GV9NXd0KuYddqRArOH/KuBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:b2:b4:33:8d:7e:36:21:df:e8:b1:f6:e1:e8:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Validity
Not Before: Mar 26 06:01:22 2026 GMT
Not After : Mar 27 06:01:22 2026 GMT
Subject: CN=7d731e30895ccb6645c833d9745983651ff0cb6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b7:e3:89:9f:3c:47:a0:ae:35:31:f5:0b:a2:
b8:45:b1:2b:1e:c9:74:52:64:76:2b:e0:5d:ea:3e:
d3:ce:29:ef:47:71:93:01:cd:b1:da:2b:79:27:b9:
1a:20:89:3a:cc:b0:59:e3:08:ff:63:f4:ff:90:84:
66:ed:cf:41:5b:9b:ee:cf:c2:36:f5:9a:06:22:4d:
a1:9e:af:ae:6a:7b:e2:df:67:38:f0:fc:e9:c8:05:
b2:e2:a9:86:87:26:da:71:6e:ef:9e:89:02:df:c7:
36:a0:2b:f2:86:9b:ef:b7:c4:7a:11:11:e7:35:53:
e4:58:c5:28:d4:7a:b4:0b:3f:a7:3e:b3:ae:14:fd:
e7:f8:c9:31:af:20:43:8f:d1:18:53:c5:a5:a4:f9:
d9:b4:7f:a7:58:80:ae:5e:03:35:a7:91:46:ba:f2:
a1:6f:6a:ac:c8:09:06:c9:ef:30:eb:ed:31:01:dc:
47:c4:15:ba:22:29:da:73:33:bf:c8:05:f4:36:60:
87:af:ed:61:65:9e:8c:dc:7b:21:fb:13:a2:94:84:
b1:ef:9f:2e:91:9e:c3:e0:2a:a5:11:0d:2f:21:c0:
23:91:e4:77:2d:77:08:51:cb:c5:20:29:d9:4c:03:
12:77:45:76:8d:74:6f:f0:4f:87:64:9d:a3:3c:ae:
03:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:73:1E:30:89:5C:CB:66:45:C8:33:D9:74:59:83:65:1F:F0:CB:6F
X509v3 Authority Key Identifier:
keyid:5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:d3:da:63:67:92:66:8f:5b:68:ef:e6:70:cd:d7:23:f0:62:
29:11:c8:f8:ed:81:08:ab:53:38:11:44:81:68:a2:bc:9b:ba:
b2:39:13:f6:e3:e1:e9:8a:be:ab:62:76:14:fc:ab:7d:b4:bb:
7f:3e:28:6d:1c:91:a5:b4:95:54:48:5e:30:dd:e9:e3:f5:c2:
36:17:af:3c:1e:4a:d9:09:a5:ad:4d:d9:03:95:4e:6d:54:62:
19:2e:8f:2a:8d:b3:3b:f9:08:9f:b5:dd:d9:78:37:6e:d9:e5:
19:55:e0:08:17:f9:88:fa:b0:95:e6:77:9d:cc:79:d9:fa:48:
2b:e5:3b:bf:00:da:a6:05:33:82:c5:1a:32:00:69:cf:7f:92:
79:8f:e7:8c:c3:43:c7:ce:9b:a2:99:c5:4e:69:8b:33:5e:16:
49:f1:66:7a:22:4b:03:75:e2:fd:1a:60:2b:4c:6d:de:48:b3:
44:60:ea:48:8b:fe:f0:af:37:39:94:61:c6:b6:65:16:18:03:
df:b9:53:4f:23:d4:e8:f7:26:bd:37:9a:a0:b5:dd:40:f3:58:
9c:82:af:cc:08:74:79:24:d3:dd:51:e9:94:7c:d4:b0:cc:a0:
11:05:c9:03:4c:54:02:ab:e2:95:a8:7c:9a:a7:2b:56:39:07:
98:80:46:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:54:03 2026 by rpki-client