Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
File: X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft (raw, json)
Hash identifier: wy8SwHaGOETBDPCeF+mYg8lyvCxVbyHcRsmDipLWXEo=
Subject key identifier: 11:51:EB:5F:68:8D:6C:5F:11:B4:E6:BC:53:1E:A8:9D:22:3B:10:55
Authority key identifier: 5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
Certificate issuer: /CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Certificate serial: 019F92B62AC0704DF4F3AAB51C7A4A458561
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
Manifest number: 0333
Signing time: Fri 24 Jul 2026 06:00:39 +0000
Manifest this update: Fri 24 Jul 2026 06:00:39 +0000
Manifest next update: Sat 25 Jul 2026 06:00:39 +0000
Files and hashes: 1: 2aR01OFymFEwZxvW0ul_qajB_MU.roa (hash: uOcW0MztVBXCRsokN174A3EZiiQc7C1Cn12xFKZuxJI=)
2: X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl (hash: kspq8nyDMdl4PncZSI768+VLoDiqC6oPjvR5/9oT5yI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:2a:c0:70:4d:f4:f3:aa:b5:1c:7a:4a:45:85:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Validity
Not Before: Jul 24 06:00:39 2026 GMT
Not After : Jul 25 06:00:39 2026 GMT
Subject: CN=1151eb5f688d6c5f11b4e6bc531ea89d223b1055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1f:78:5e:04:fb:ce:e2:96:2a:b1:c6:34:05:
9d:19:51:71:14:cb:34:26:75:20:b8:2a:4a:b9:da:
f6:1b:01:81:61:b7:ed:b1:85:c4:b4:f6:c9:31:da:
87:6b:ba:60:44:14:d5:58:e8:4f:89:0d:fe:03:b9:
b5:69:49:00:67:60:8b:1d:83:c3:07:bd:a1:43:35:
b5:f3:f4:41:cf:d5:a3:47:33:79:6a:aa:88:fe:12:
62:07:33:cf:b0:b1:66:c9:e8:24:6c:21:f1:a8:72:
bd:1a:27:7c:18:40:e0:92:2b:1e:de:af:3f:d6:91:
59:e5:9a:b9:fb:3f:63:48:e5:f5:81:67:6c:28:d9:
fc:f0:25:6d:a1:e4:f2:24:77:01:35:e8:7a:40:00:
46:39:0f:23:d6:12:09:82:08:af:1a:0d:0b:42:31:
83:6b:ac:8e:5b:33:f2:b6:95:47:d2:90:0f:94:19:
db:66:fc:27:d3:84:4e:88:2e:12:55:da:d7:ee:e3:
ab:b4:ad:b7:02:56:5f:9a:c1:7b:00:8d:40:42:87:
5d:ef:55:f4:17:31:11:c6:b0:65:df:8d:d9:5f:37:
09:35:ef:44:c3:73:0a:6c:1d:82:c8:d9:30:2a:35:
a7:d3:24:b9:1a:da:dd:2e:34:7d:ed:73:98:c2:82:
72:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:51:EB:5F:68:8D:6C:5F:11:B4:E6:BC:53:1E:A8:9D:22:3B:10:55
X509v3 Authority Key Identifier:
keyid:5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:f6:e6:23:dc:6c:58:93:69:9a:22:cb:47:fe:8e:0c:b0:ca:
c3:17:9e:c4:92:70:3c:2d:c1:25:24:24:e8:73:36:c3:0e:56:
71:91:2b:29:b9:bf:4a:8e:44:fd:2a:b1:4d:a5:d6:0a:0b:f0:
ff:58:07:b8:49:79:11:f7:95:d7:59:de:4b:21:86:62:f8:80:
5e:d2:40:09:82:45:a9:4c:5e:97:62:50:79:f2:9c:9c:8d:30:
b4:29:99:cf:63:d7:63:72:e9:31:f2:05:09:4c:79:ff:9d:32:
b9:db:7a:da:30:10:99:71:cf:49:3b:e2:db:2a:af:b8:2b:93:
c2:f7:63:9b:ff:5b:7f:2b:30:4b:fe:2a:1c:84:e3:f6:fc:4a:
cb:db:84:81:31:b1:64:d3:32:f2:25:b6:51:e7:95:da:a3:64:
78:99:f7:88:e2:c7:cf:26:21:4b:80:0d:4c:db:a3:2e:37:85:
18:54:65:59:dd:0d:0e:2c:52:9d:70:b0:f5:f0:4b:e5:74:96:
40:92:02:6f:2a:77:76:8b:c2:b2:b7:36:0e:ae:f7:57:9e:61:
96:c2:60:2c:d7:b1:65:c5:f1:6a:c2:54:f2:82:8f:2e:12:95:
6f:db:41:0e:9b:3c:44:02:66:9f:08:0a:57:58:37:ec:80:e8:
63:83:1c:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+StirAcE3086q1HHpKRYVhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNmI5MDAxOWQ0ZDJiNTJhYjRjYWY2NzFjMzdlOWM0ZDAz
YWRhNzMwHhcNMjYwNzI0MDYwMDM5WhcNMjYwNzI1MDYwMDM5WjAzMTEwLwYDVQQD
EygxMTUxZWI1ZjY4OGQ2YzVmMTFiNGU2YmM1MzFlYTg5ZDIyM2IxMDU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArR94XgT7zuKWKrHGNAWdGVFxFMs0
JnUguCpKudr2GwGBYbftsYXEtPbJMdqHa7pgRBTVWOhPiQ3+A7m1aUkAZ2CLHYPD
B72hQzW18/RBz9WjRzN5aqqI/hJiBzPPsLFmyegkbCHxqHK9Gid8GEDgkise3q8/
1pFZ5Zq5+z9jSOX1gWdsKNn88CVtoeTyJHcBNeh6QABGOQ8j1hIJggivGg0LQjGD
a6yOWzPytpVH0pAPlBnbZvwn04ROiC4SVdrX7uOrtK23AlZfmsF7AI1AQodd71X0
FzERxrBl343ZXzcJNe9Ew3MKbB2CyNkwKjWn0yS5GtrdLjR97XOYwoJyWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBFR619ojWxfEbTmvFMeqJ0iOxBVMB8GA1UdIwQY
MBaAFF9rkAGdTStSq0yvZxw36cTQOtpzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDJ1UUFaMU5LMUtyVEs5bkhEZnB4TkE2Mm5NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi84MDk2MTYtYTAwOC00YTExLWJjMGEt
N2NmMDMxZmE3NWNlLzEvWDJ1UUFaMU5LMUtyVEs5bkhEZnB4TkE2Mm5NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi84MDk2MTYtYTAwOC00YTExLWJjMGEtN2NmMDMxZmE3NWNl
LzEvWDJ1UUFaMU5LMUtyVEs5bkhEZnB4TkE2Mm5NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmPbmI9xs
WJNpmiLLR/6ODLDKwxeexJJwPC3BJSQk6HM2ww5WcZErKbm/So5E/SqxTaXWCgvw
/1gHuEl5EfeV11neSyGGYviAXtJACYJFqUxel2JQefKcnI0wtCmZz2PXY3LpMfIF
CUx5/50yudt62jAQmXHPSTvi2yqvuCuTwvdjm/9bfyswS/4qHITj9vxKy9uEgTGx
ZNMy8iW2UeeV2qNkeJn3iOLHzyYhS4ANTNujLjeFGFRlWd0NDixSnXCw9fBL5XSW
QJICbyp3dovCsrc2Dq73V55hlsJgLNexZcXxasJU8oKPLhKVb9tBDps8RAJmnwgK
V1g37IDoY4MczA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:47:40 2026 by rpki-client