Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.mft
File: X3xLrCTiMhOZILbFzqcF74MP11U.mft (raw, json)
Hash identifier: Vw/CYusoVXNGyV28ifNvWJ8RPCrAzMasoXuCsdi7fR4=
Subject key identifier: 61:33:2B:E3:14:00:75:B0:6F:F9:69:92:C6:13:A0:3C:2B:B6:26:95
Authority key identifier: 5F:7C:4B:AC:24:E2:32:13:99:20:B6:C5:CE:A7:05:EF:83:0F:D7:55
Certificate issuer: /CN=5f7c4bac24e232139920b6c5cea705ef830fd755
Certificate serial: 01A0EDAFB8E6F8CE925200B0EFAF09E4FBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3xLrCTiMhOZILbFzqcF74MP11U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.mft
Manifest number: 62
Signing time: Tue 29 Sep 2026 15:01:51 +0000
Manifest this update: Tue 29 Sep 2026 15:01:51 +0000
Manifest next update: Wed 30 Sep 2026 15:01:51 +0000
Files and hashes: 1: 7zDEmWPI1ENhomTy26ZsTYp2BBk.roa (hash: HMKeSJgU65eJmE17l+0Kgm4LpuhW6XeTtaT/MhlrW+s=)
2: X3xLrCTiMhOZILbFzqcF74MP11U.crl (hash: wSaxr6Ez2alESMLDo5bfsQpN2JD1uyEpKEFbtdgPhL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3xLrCTiMhOZILbFzqcF74MP11U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:b8:e6:f8:ce:92:52:00:b0:ef:af:09:e4:fb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7c4bac24e232139920b6c5cea705ef830fd755
Validity
Not Before: Sep 29 15:01:51 2026 GMT
Not After : Sep 30 15:01:51 2026 GMT
Subject: CN=61332be3140075b06ff96992c613a03c2bb62695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:ed:b0:2c:f9:a6:22:53:21:5c:0c:0f:be:
b7:7c:2c:6d:9c:11:1c:2a:f3:2c:b6:ee:db:16:97:
02:01:2c:9d:f9:0c:7f:d4:74:ae:34:df:8f:7e:4c:
63:71:bc:49:a9:6b:f7:3d:9e:c2:02:f1:32:f2:20:
c5:5b:b0:60:13:09:c3:7f:af:b9:a4:55:22:71:11:
e8:ad:03:4f:9b:54:ec:47:2d:5e:ed:0b:c0:3e:e4:
9f:29:e4:ba:fb:17:b7:0f:94:91:68:c3:6d:07:80:
b0:19:08:b8:9d:cd:7b:4f:1a:b5:cb:31:85:7c:1f:
14:3d:a1:ab:9f:ca:10:de:50:c6:8e:14:56:b2:ce:
5a:f8:fb:d5:83:08:db:83:2a:5f:0b:a8:47:15:65:
b9:e7:0d:63:7b:f3:a9:ec:95:ab:ae:f3:f7:69:c7:
da:a1:28:d3:43:86:41:32:87:77:e0:72:e8:e1:89:
0d:a0:34:2b:6d:bf:bc:ab:49:ec:76:aa:54:dc:58:
5a:f6:cb:a2:8d:9d:97:93:08:d7:dc:79:07:21:e6:
6d:30:7f:bc:89:48:41:b4:41:c7:27:4d:7d:d2:c0:
2a:1a:15:4c:fa:00:70:66:ea:97:10:89:d4:6e:7c:
f7:21:76:e3:99:5b:a8:54:8b:14:b3:61:b4:04:a9:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:33:2B:E3:14:00:75:B0:6F:F9:69:92:C6:13:A0:3C:2B:B6:26:95
X509v3 Authority Key Identifier:
keyid:5F:7C:4B:AC:24:E2:32:13:99:20:B6:C5:CE:A7:05:EF:83:0F:D7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3xLrCTiMhOZILbFzqcF74MP11U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c7:a2:7d:7a:1d:76:bd:75:02:f1:a7:13:02:31:fc:7c:62:
f5:b0:41:f5:0a:83:31:bd:ba:4a:ea:07:15:0d:0c:85:a8:69:
5c:84:53:53:3d:31:94:42:3a:0f:f2:f2:0f:ff:06:64:ae:83:
ed:28:07:e6:3f:e3:22:fb:cc:76:97:90:8a:7a:3c:95:a9:f8:
07:89:47:8c:aa:9f:5d:76:43:20:b0:52:27:1b:6c:50:37:e9:
4c:bd:35:87:17:74:7d:69:01:50:bd:86:8c:e2:f7:aa:90:42:
b9:7e:ae:27:61:3a:28:30:e1:58:17:22:a2:52:ac:0c:75:f2:
11:87:8b:9b:ae:5d:31:4b:03:60:b9:87:73:6f:a2:fd:91:3e:
68:4b:7d:ce:90:3b:25:ea:67:6f:a0:dc:a5:d5:6d:be:6e:78:
59:0e:8e:bf:54:b2:a2:28:95:ed:4b:9d:74:52:0b:c4:20:17:
e7:8e:cc:dc:b0:85:af:70:36:f4:95:e8:b8:63:78:86:aa:61:
84:cb:0d:77:03:c8:8c:79:ac:22:1e:85:c1:9b:f1:3e:56:9c:
e1:73:57:35:6f:d5:9c:13:51:9a:4a:19:ee:64:89:8e:39:2c:
5b:95:ae:ba:a6:c8:f4:47:28:9b:ca:44:12:fb:40:2c:56:0d:
77:f4:5f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 01:55:02 2026 by rpki-client