Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
File: X2c9L2Ia4xQHABdIu95jisvYYFA.mft (raw, json)
Hash identifier: xU1hWTjra4aHUwXHPjwd9U3jaIR8Vg6DshZRW6g3olU=
Subject key identifier: 89:D0:22:0A:38:62:A0:ED:70:26:54:F8:73:39:8B:44:D6:B5:3A:C1
Authority key identifier: 5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
Certificate issuer: /CN=5f673d2f621ae31407001748bbde638acbd86050
Certificate serial: 019D284D615325C4E67BF3ECC41DA2B2BD0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
Manifest number: 08FC
Signing time: Thu 26 Mar 2026 04:00:52 +0000
Manifest this update: Thu 26 Mar 2026 04:00:52 +0000
Manifest next update: Fri 27 Mar 2026 04:00:52 +0000
Files and hashes: 1: EFQb-DdMIUfYk8otFJG8FPsYqSg.roa (hash: xz8HTmmrpuajVW7QayylP4C5tRbZcnyfwKq4BdsJEEg=)
2: X2c9L2Ia4xQHABdIu95jisvYYFA.crl (hash: GJoHElJwtsl3jQcKKdpI4D7ZZf4kefZkZNH+vUStFrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:61:53:25:c4:e6:7b:f3:ec:c4:1d:a2:b2:bd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f673d2f621ae31407001748bbde638acbd86050
Validity
Not Before: Mar 26 04:00:52 2026 GMT
Not After : Mar 27 04:00:52 2026 GMT
Subject: CN=89d0220a3862a0ed702654f873398b44d6b53ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:82:57:3b:94:8c:29:30:5e:b0:c9:f6:34:
2d:a2:1e:29:51:ea:41:52:3b:09:ab:49:1d:af:6c:
94:2a:bc:4d:5d:4d:2f:f5:04:a4:b9:ec:a9:f1:de:
a8:5e:36:64:20:f8:5c:39:18:6e:62:fa:72:b9:6a:
98:29:79:5f:9b:90:4f:6a:9a:25:66:57:33:9e:65:
fb:25:ba:68:e6:59:28:e4:2a:b8:66:96:72:a3:0b:
5e:96:d1:60:b0:f3:26:e4:1a:99:c4:16:82:71:b5:
e7:1f:cd:f7:8d:8d:f1:53:7e:d4:5b:14:d8:09:f2:
d2:52:0b:fc:24:a7:ed:3d:d3:79:fd:22:0b:69:64:
1e:85:9d:c9:14:e2:11:3a:04:1a:aa:7b:84:47:a3:
87:cc:6b:3f:ef:9b:d4:77:2b:af:97:b2:b6:12:4a:
8d:b4:29:a5:ad:2d:df:78:9e:e0:0b:ba:51:8a:b1:
d5:9a:6d:4e:4c:3c:02:9d:e3:c6:53:f3:10:ad:ce:
0d:ba:c1:01:94:63:f2:72:47:01:d1:eb:c0:47:67:
9b:1e:f7:a3:5b:21:72:1d:55:c6:8f:1c:ee:0f:57:
f3:dd:d1:b1:46:60:08:f6:59:59:f6:23:15:99:b7:
08:3c:d3:d7:70:5a:45:8e:9c:a7:e1:db:91:bc:d7:
a4:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:D0:22:0A:38:62:A0:ED:70:26:54:F8:73:39:8B:44:D6:B5:3A:C1
X509v3 Authority Key Identifier:
keyid:5F:67:3D:2F:62:1A:E3:14:07:00:17:48:BB:DE:63:8A:CB:D8:60:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2c9L2Ia4xQHABdIu95jisvYYFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/652780-3ea1-415e-839e-844729137ee5/1/X2c9L2Ia4xQHABdIu95jisvYYFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7f:81:a8:a9:0a:39:cd:e5:90:d4:6e:ca:62:cc:38:74:23:
38:8c:32:9e:c7:92:72:24:06:de:c6:61:98:0f:74:e6:a4:49:
56:58:bc:1d:47:7a:fa:a6:e2:fb:74:16:cc:0e:cf:7b:de:51:
ba:63:32:70:3c:b6:c3:3a:6d:dd:7d:43:9f:5d:c7:60:68:25:
aa:30:8f:3d:7a:99:78:c7:5c:6b:8f:2d:8a:1e:8d:db:fd:0c:
21:5c:68:ab:b5:8c:2d:fa:8a:a1:dc:cc:a2:0b:c5:74:c6:e9:
e3:f6:5a:3e:78:b4:12:40:5d:d3:e3:b5:e1:92:8b:5e:d2:f9:
ee:60:58:07:28:22:b3:4b:d0:b3:db:66:06:21:17:dd:20:83:
ea:dd:7c:9f:e1:9e:21:51:e2:14:10:b2:08:43:8e:3e:e8:76:
fa:d8:07:90:06:bb:b2:16:dd:cc:a1:ba:b8:e7:01:56:26:e8:
d5:4c:c4:cc:9d:2f:62:2c:d9:2d:4c:4d:b8:cb:5c:09:db:ad:
05:d8:dc:df:69:21:03:6e:32:5b:9e:c3:be:fe:df:f1:6d:d6:
05:5c:82:4d:50:94:78:3e:02:9d:0f:75:c0:1d:e7:c9:71:a1:
4d:5d:d3:79:7b:ba:3e:4b:2b:a3:f7:d0:87:ab:ad:3d:c9:75:
be:8d:8a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:30:51 2026 by rpki-client