Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
File: X8SomHZcMDixWg01lyQ5Qdo8CWw.mft (raw, json)
Hash identifier: 4BzzXr6FksxV3CzyfEqquHzBs2KO3cgaUFCl1rzoj1I=
Subject key identifier: 25:2F:FF:05:84:5A:F9:51:4E:12:4B:3B:07:03:D3:6C:AB:64:18:E6
Authority key identifier: 5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
Certificate issuer: /CN=5fc4a898765c3038b15a0d3597243941da3c096c
Certificate serial: 019E2091FE948C6BF796C424DEB9BD5F387D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
Manifest number: 9E
Signing time: Wed 13 May 2026 09:01:39 +0000
Manifest this update: Wed 13 May 2026 09:01:39 +0000
Manifest next update: Thu 14 May 2026 09:01:39 +0000
Files and hashes: 1: X8SomHZcMDixWg01lyQ5Qdo8CWw.crl (hash: EEf1Pbvvg4fmvJnrrRrYlDHXix53xTQadaFzDFL7ho4=)
2: Y3QKQzEPDmZm8PJypZh9nJ9wgpY.roa (hash: uGJeMzvWRvF44ZA525KqGwzFGcmEAKAT9aDouXzGutU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:fe:94:8c:6b:f7:96:c4:24:de:b9:bd:5f:38:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc4a898765c3038b15a0d3597243941da3c096c
Validity
Not Before: May 13 09:01:39 2026 GMT
Not After : May 14 09:01:39 2026 GMT
Subject: CN=252fff05845af9514e124b3b0703d36cab6418e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:80:bb:1f:db:db:94:24:61:31:14:e0:f7:2b:
14:0f:d1:90:62:45:1b:45:d2:4f:6c:64:a5:de:9d:
67:5a:d8:38:ea:71:f1:77:9a:69:2b:8e:b2:28:7f:
0d:cb:f3:21:21:c3:76:07:a8:f6:6f:ef:9d:99:02:
91:a8:5d:d4:9a:5d:89:4a:95:a4:b2:1f:22:10:ca:
17:39:59:c2:44:c6:20:a9:5e:ea:56:13:45:39:86:
38:b0:ba:b6:64:3c:08:0d:80:a2:71:94:b2:f8:50:
f2:87:d3:0f:0c:3b:41:7b:fc:c5:7e:9b:8c:7c:1a:
7f:2a:15:2c:5e:ee:95:f1:f1:02:8a:a1:13:d9:92:
e6:f9:a5:ed:59:80:3b:1b:2d:d7:1f:fa:81:84:d5:
44:69:22:43:2a:de:51:cc:b2:be:17:18:0d:90:74:
d1:11:81:5f:b1:57:f1:53:22:86:11:14:db:86:d4:
c5:28:06:c0:6b:d5:ee:a3:3f:c8:b2:a1:75:00:39:
54:6b:16:db:c9:e1:c3:39:06:c9:07:8a:bb:09:14:
f7:d9:79:21:54:db:a6:7d:f9:08:34:6c:aa:2f:7e:
cf:f3:f8:2e:61:46:2c:9f:36:c6:52:45:ee:31:84:
8d:b4:34:6c:e8:31:7b:88:81:70:e7:79:1e:53:b0:
48:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2F:FF:05:84:5A:F9:51:4E:12:4B:3B:07:03:D3:6C:AB:64:18:E6
X509v3 Authority Key Identifier:
keyid:5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ec:cd:64:87:e8:da:39:97:5a:00:31:fd:48:61:31:0a:a5:
a7:08:c0:b5:02:71:3c:ce:be:88:9d:84:af:05:18:7a:ca:ba:
b8:38:83:1c:95:0f:7d:a6:99:cb:10:d5:74:2f:e1:42:6a:ca:
94:ed:ca:4f:61:e2:4c:f9:43:d2:88:3e:8a:45:26:b1:aa:2e:
8f:ca:fa:18:d5:67:91:51:40:37:05:92:14:a5:01:12:70:d8:
e4:1e:4c:af:5e:e6:85:5c:40:39:6b:1b:0c:9c:67:6c:37:3a:
d3:49:ee:dc:3f:14:b6:e5:f1:1f:5a:16:86:02:1a:84:0b:93:
e9:09:03:52:d3:f4:ad:52:2e:84:16:cc:41:60:a4:33:e2:cd:
bf:b7:77:32:ac:0e:ee:2d:2f:58:e8:97:b8:77:ba:10:7d:13:
da:c0:da:52:5d:9d:2a:92:a0:c4:2b:91:ed:ec:c4:1c:50:e4:
82:52:76:5f:c0:ef:d2:8b:81:0f:6c:ea:ce:8d:35:28:5c:a9:
02:6d:93:5a:e6:77:44:54:0f:2e:1d:bb:1a:60:df:22:5c:ce:
90:1e:f9:5a:6c:40:de:0f:28:ec:12:4d:ba:fe:f6:81:ee:5d:
7e:88:d7:57:48:51:5c:b8:0d:92:7e:71:2a:58:ca:b6:2c:cb:
38:92:a5:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:52 2026 by rpki-client