Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
File: X8SomHZcMDixWg01lyQ5Qdo8CWw.mft (raw, json)
Hash identifier: lIyp6vIJIkHTwv9M4HSB//wvkDS10bcdSG2tc/Xc2a0=
Subject key identifier: CE:2A:19:15:76:44:EC:8D:6A:1D:88:AA:96:D6:58:F3:4C:C2:18:B6
Authority key identifier: 5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
Certificate issuer: /CN=5fc4a898765c3038b15a0d3597243941da3c096c
Certificate serial: 019D2B4DFFAEAE1316C97F3251425BCE150C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
Manifest number: 1F
Signing time: Thu 26 Mar 2026 18:00:25 +0000
Manifest this update: Thu 26 Mar 2026 18:00:25 +0000
Manifest next update: Fri 27 Mar 2026 18:00:25 +0000
Files and hashes: 1: X8SomHZcMDixWg01lyQ5Qdo8CWw.crl (hash: xzCPrG3IaXndcdArQLEuT2UcZaSrh2E/Xe/Ts9bEq0k=)
2: Y3QKQzEPDmZm8PJypZh9nJ9wgpY.roa (hash: uGJeMzvWRvF44ZA525KqGwzFGcmEAKAT9aDouXzGutU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2b:4d:ff:ae:ae:13:16:c9:7f:32:51:42:5b:ce:15:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc4a898765c3038b15a0d3597243941da3c096c
Validity
Not Before: Mar 26 18:00:25 2026 GMT
Not After : Mar 27 18:00:25 2026 GMT
Subject: CN=ce2a19157644ec8d6a1d88aa96d658f34cc218b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:95:13:9f:4c:04:14:47:96:2f:dd:4d:74:
1a:8d:2c:5e:60:a2:0e:72:1c:0e:7a:29:96:28:ce:
5c:24:a5:b0:b1:7b:67:18:c9:c8:41:9e:d1:1e:26:
ca:fb:89:73:3f:fe:e0:4d:43:0e:3e:2e:ae:f0:82:
c0:95:75:4c:74:7b:48:53:34:27:ab:dc:a5:63:2f:
24:b4:fd:53:a6:da:df:d4:f0:c9:fc:b4:a9:c8:41:
1f:b6:77:03:49:13:d6:54:b7:85:03:5b:97:12:3a:
94:35:b7:47:6c:74:57:a7:34:9c:45:39:51:f5:13:
ef:03:b6:e4:0d:fa:4f:fc:bd:be:c1:47:c4:cb:28:
b7:a0:65:4f:40:f8:62:ea:37:03:9a:ff:52:a6:41:
d7:82:16:b3:ec:3b:56:0d:67:63:2a:3d:54:f9:6a:
74:55:41:1d:98:56:e3:ac:7d:3f:2d:a3:8d:39:57:
1f:11:00:00:8c:8e:e5:11:14:d6:7a:2c:94:5c:ab:
24:7c:e7:6d:43:90:d0:b1:58:65:df:05:38:a9:a9:
4a:e8:19:c5:c0:5f:67:b2:54:75:3e:ea:63:ec:01:
42:b8:a9:22:38:80:a6:69:2d:43:71:8d:e5:3c:b0:
4d:f4:71:9a:79:2a:10:53:42:8f:09:f8:e1:c2:4c:
74:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:2A:19:15:76:44:EC:8D:6A:1D:88:AA:96:D6:58:F3:4C:C2:18:B6
X509v3 Authority Key Identifier:
keyid:5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b8:96:35:cb:2e:05:79:b3:e4:d1:dc:95:92:9d:31:81:6c:
15:a9:d1:75:f3:e2:f8:49:ce:00:c2:65:c8:15:c1:d9:6a:1d:
90:0d:05:53:24:fc:07:a8:7b:59:d4:cc:62:f4:7c:50:dd:6f:
d4:cf:c1:cf:60:24:d6:6b:5a:86:66:b8:40:b7:93:ed:2c:8b:
a5:9d:6d:b3:7a:42:82:4a:5a:22:ea:a7:50:a5:40:d5:2c:58:
f2:97:70:90:9f:2a:8c:c6:5a:38:05:5d:05:1a:8f:c2:e5:e2:
2a:2d:6e:52:18:a3:55:f6:ed:1e:ba:8d:88:3e:68:70:df:28:
6f:07:80:6b:f5:93:ee:b9:43:74:fe:6a:db:9a:28:54:e9:34:
a2:6b:6c:9c:a0:69:d0:66:f4:70:f1:73:36:c3:42:df:4e:3c:
db:c4:c8:96:e0:7b:ae:b7:2b:44:e4:9e:3a:7f:e6:28:72:17:
a7:ef:0e:76:26:b9:7a:06:44:17:c3:e8:e7:15:63:fd:d5:fe:
b5:d4:2d:22:31:61:ce:66:26:e1:52:2c:56:e4:a6:51:60:0a:
c2:41:5a:13:33:af:e3:b5:83:23:8e:08:fc:f3:c1:61:22:d9:
27:45:96:d7:a3:19:b7:ce:10:75:82:bf:f8:a1:da:1a:c1:09:
cb:b8:8d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:33:55 2026 by rpki-client