Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: t3kQBeMMGFB2jCX62m2dN+nUUcDCx1+Tb815PFFrj7I=
Subject key identifier: 25:F1:99:C1:AD:7B:B0:63:D4:F3:C1:F3:F3:4D:32:53:85:82:1D:7A
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 019D25F1559BD8AB5F9386ADAF3E6DA71DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 062A
Signing time: Wed 25 Mar 2026 17:01:06 +0000
Manifest this update: Wed 25 Mar 2026 17:01:06 +0000
Manifest next update: Thu 26 Mar 2026 17:01:06 +0000
Files and hashes: 1: 56Kmc-Cz64ulFDN7LZkLpLy2Uyk.roa (hash: M1LxSBYIiPUs1C9HbHfgJfFfNoWmm4ypO8QoHN7KG7k=)
2: Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa (hash: yA+b+JTKhvzBntnbRz8H3TVoNPvRK8TlZDevDFWYPVU=)
3: Gz_1bJto4c1yEF2Q0CAMMKyQM04.roa (hash: XtyCodmY8171cj6WcCGbm/ih1IwcnbUwaLWquFazgPc=)
4: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: bn9JM4kVUjn185ZjHL9dfCwIWL1cF+LJlxF75OrN93g=)
5: Za3vl_jOJ0pGYslBqqMRsVt7h_s.roa (hash: YOFAZhaKlii8wEnPzm8mR4aNFVEe5XwwG7RLJLy04yA=)
6: apiIN38NWuwmq5zLGT_PGl7nwuE.roa (hash: fQnjVUyspxxLgvXaE1acXfTJyNh9B88oVMv1/VzeGlc=)
7: klZpNcpkOEquqUsO-jju5O69v1E.roa (hash: jxFHJzSImYx8wBjjvdBncxitlUill6En9a34gPRYQtA=)
8: y7rxPQXdQykP2HWundiTAhRuuNE.roa (hash: kwq12jPHanXZhrxqm5HaXAm17ns+Kl4rOD8Lx3F1wV8=)
9: yc0EM4Q7YegfvWHtUfZGE2JYYt8.asa (hash: YVzGGL9uGiyH33DfGylRpABv7Bt0LM4Hn9Ld7YwL2Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:55:9b:d8:ab:5f:93:86:ad:af:3e:6d:a7:1d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Mar 25 17:01:06 2026 GMT
Not After : Mar 26 17:01:06 2026 GMT
Subject: CN=25f199c1ad7bb063d4f3c1f3f34d325385821d7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d1:bd:3b:25:49:a3:bc:4c:4c:4d:ae:04:70:
fe:8f:e1:b6:f1:70:ef:24:0a:df:f9:ea:0e:44:51:
e5:0d:ed:ac:d6:00:9d:00:da:24:9e:1b:0c:6c:70:
86:b7:6e:89:cd:db:7a:f4:88:f8:09:c8:59:ad:1c:
d7:88:83:06:12:b1:66:db:ac:93:c1:7f:b4:cd:f3:
74:df:02:80:fd:f6:ae:00:e2:d1:cc:21:f3:63:fb:
2a:c7:f3:76:80:9b:b9:bd:50:65:36:3c:d3:8d:c3:
f1:8d:f6:36:84:70:cc:d5:86:9a:4a:fb:cb:63:84:
9d:f8:24:8d:d7:5b:b5:6a:26:a6:cb:07:39:f5:9e:
50:e2:35:4c:0d:f0:61:05:17:ec:73:44:eb:04:12:
de:b4:97:2b:a5:fb:dd:71:00:1b:40:36:61:52:45:
d2:84:73:a7:35:6b:77:ed:95:77:15:cd:1c:8f:ed:
78:5e:80:22:fe:f2:50:03:cb:30:a7:98:27:e1:07:
14:40:20:7d:85:10:38:4b:7b:c5:64:dd:5b:d8:f3:
e0:51:fe:19:53:9f:08:64:e1:3e:74:aa:8d:da:07:
09:07:d7:9f:61:0c:90:18:a7:c8:5e:d0:4b:ea:f5:
48:62:77:38:db:1d:79:14:8a:2a:e8:6d:72:cd:9f:
68:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F1:99:C1:AD:7B:B0:63:D4:F3:C1:F3:F3:4D:32:53:85:82:1D:7A
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:06:27:4a:33:94:2e:68:16:1c:e5:46:f4:76:54:53:9f:68:
8d:3b:e8:fa:45:4b:90:20:0a:03:42:4a:dc:d3:36:5f:61:85:
8a:e0:21:2b:10:d1:d4:4f:82:10:87:e1:60:54:da:b0:63:60:
66:a2:5f:2f:b4:08:15:b3:f3:92:ce:16:20:24:18:95:c3:a1:
12:77:57:8d:66:87:36:91:98:1b:01:4e:cf:2a:bd:60:85:dd:
6b:d2:58:df:23:82:40:f2:51:38:88:76:a8:3f:e1:b1:0f:5d:
1e:e2:8a:ad:3b:43:fd:41:24:9d:ba:87:17:49:6c:e7:fe:a5:
24:27:53:90:dd:c5:e4:1b:94:00:5c:b7:d3:e1:c9:62:55:f6:
e3:4c:c6:2e:24:40:96:81:3a:b4:43:0a:3e:1c:22:5c:7e:be:
cc:a4:aa:ac:cc:1a:e0:4f:4a:1f:68:5e:94:1c:2b:36:5e:99:
a4:9b:56:7c:28:10:c5:10:fb:37:a4:9e:4a:f7:0a:0f:32:b4:
4d:3d:ec:5d:b9:77:13:10:8a:98:3c:ad:f4:7e:13:59:9a:79:
d4:8f:2a:bb:ba:dd:a5:ea:0c:e7:8d:74:64:42:c8:4c:9b:fb:
d4:a3:6e:24:a6:52:d2:4f:ab:a4:95:8b:5f:03:07:b8:d4:8b:
97:bd:9a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:40:46 2026 by rpki-client