Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
File: X8SomHZcMDixWg01lyQ5Qdo8CWw.mft (raw, json)
Hash identifier: ygzu6vaLypYzI3PX9gvmJe8D+WNrLcQp3uO/DMDBJpQ=
Subject key identifier: 8A:FF:7E:7A:25:CC:3F:E1:82:58:FA:DE:2D:83:17:EA:55:09:08:08
Authority key identifier: 5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
Certificate issuer: /CN=5fc4a898765c3038b15a0d3597243941da3c096c
Certificate serial: 01A128E858D5592F3DB20645A4243012F54B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
Manifest number: 0230
Signing time: Sun 11 Oct 2026 03:01:18 +0000
Manifest this update: Sun 11 Oct 2026 03:01:18 +0000
Manifest next update: Mon 12 Oct 2026 03:01:18 +0000
Files and hashes: 1: X8SomHZcMDixWg01lyQ5Qdo8CWw.crl (hash: nHCK6AyC9lGCm5DLWLgsnLLUiHcUqTBksf/yW7nIJVs=)
2: Y3QKQzEPDmZm8PJypZh9nJ9wgpY.roa (hash: uGJeMzvWRvF44ZA525KqGwzFGcmEAKAT9aDouXzGutU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 03:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:28:e8:58:d5:59:2f:3d:b2:06:45:a4:24:30:12:f5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc4a898765c3038b15a0d3597243941da3c096c
Validity
Not Before: Oct 11 03:01:18 2026 GMT
Not After : Oct 12 03:01:18 2026 GMT
Subject: CN=8aff7e7a25cc3fe18258fade2d8317ea55090808
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:67:a9:8f:3a:90:a0:e9:02:bd:0a:6c:7a:62:
c8:df:f6:4d:f7:20:5b:bc:b1:27:f3:de:37:eb:d2:
9c:48:26:01:29:3c:82:72:3b:6f:eb:b0:c0:ef:d6:
d6:ad:f1:44:e6:39:ae:c2:5d:70:43:bc:a8:3f:3e:
36:2c:1b:d0:5b:77:c9:b7:4a:58:28:62:6e:02:97:
cb:dc:0b:3f:43:db:4d:cf:42:31:58:b3:67:2b:42:
67:e0:e9:c9:10:f4:ab:2c:6c:4d:32:e1:57:31:40:
a7:ca:7c:c4:93:8a:ab:57:3c:a6:82:40:6f:c9:af:
c1:ea:76:95:d4:b3:36:75:93:30:69:d9:c6:0e:73:
56:96:0f:45:8d:a3:f7:0d:6c:6b:fe:33:00:18:c7:
d4:de:10:6a:d1:4e:9d:db:5d:db:1a:a0:53:3e:40:
a6:74:14:77:a8:bc:bb:c1:1c:67:63:29:f2:3f:1a:
01:1e:2f:da:71:55:3e:0d:0d:96:8a:aa:da:86:73:
d5:76:d2:4d:57:a4:c1:0b:81:b0:16:1f:c5:5d:63:
e5:b2:5b:6a:72:31:ac:90:c6:76:71:41:c8:42:14:
3e:51:f9:28:58:b2:ce:ac:3e:de:63:97:06:fe:6f:
6f:0a:be:67:ca:ae:6b:63:09:f0:38:6c:aa:3d:06:
cd:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FF:7E:7A:25:CC:3F:E1:82:58:FA:DE:2D:83:17:EA:55:09:08:08
X509v3 Authority Key Identifier:
keyid:5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:6a:29:46:ac:1e:24:24:b2:94:f6:8f:56:7c:4d:70:88:d1:
c3:10:ce:b0:6a:15:d0:8a:32:64:eb:cc:1d:4b:a7:d1:10:6d:
91:82:cf:3c:1d:cd:32:69:d0:63:c8:8b:c0:b7:64:22:86:6e:
4d:d5:06:e1:54:73:3d:87:2b:3b:37:9f:0e:c6:47:a0:ba:80:
2d:52:04:65:cc:4f:38:4f:2a:3c:46:5f:28:31:b0:da:d2:c8:
9b:0d:7e:2c:ac:4f:b1:c5:f6:ac:f1:61:50:8a:cb:27:dd:18:
58:57:e4:f3:16:a2:0c:da:eb:b5:3d:83:c2:c3:fa:ba:7b:4f:
9e:bd:14:5d:be:dd:77:fd:da:ab:73:3a:20:9b:dc:27:ec:a9:
fb:7d:ea:31:ab:5f:9e:cc:76:c6:52:f9:21:b0:3a:5e:6d:7a:
d4:31:b3:f4:1a:ed:55:38:07:c4:82:05:63:4b:f0:4b:20:73:
5b:ec:b3:e2:77:ec:51:25:e9:d6:97:22:85:5b:f2:8f:d2:97:
ce:09:7f:d2:8b:04:7f:60:01:79:97:a9:32:c0:eb:e8:ea:8f:
9d:e4:61:06:03:f4:e3:e6:af:03:17:e8:78:f5:26:7c:81:43:
94:e1:4e:9a:9f:d9:30:f4:b8:02:12:8b:41:87:90:40:50:32:
8f:38:44:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 12:48:04 2026 by rpki-client