Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: pYhBcVmi69PWLaWiwYg8dJXoGgG2QZ/YUII5r2WvmJo=
Subject key identifier: 30:56:6F:86:1C:2D:6A:1E:43:4E:D5:98:A2:04:29:BB:BA:C6:30:6C
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 019D29CE220D898EFCCFEF1C5EA849517ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 062C
Signing time: Thu 26 Mar 2026 11:01:08 +0000
Manifest this update: Thu 26 Mar 2026 11:01:08 +0000
Manifest next update: Fri 27 Mar 2026 11:01:08 +0000
Files and hashes: 1: 56Kmc-Cz64ulFDN7LZkLpLy2Uyk.roa (hash: M1LxSBYIiPUs1C9HbHfgJfFfNoWmm4ypO8QoHN7KG7k=)
2: Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa (hash: yA+b+JTKhvzBntnbRz8H3TVoNPvRK8TlZDevDFWYPVU=)
3: Gz_1bJto4c1yEF2Q0CAMMKyQM04.roa (hash: XtyCodmY8171cj6WcCGbm/ih1IwcnbUwaLWquFazgPc=)
4: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: UQY6wxZM6q1YLwzw16obTGjpItCkDswRZoRZEoRnryg=)
5: Za3vl_jOJ0pGYslBqqMRsVt7h_s.roa (hash: YOFAZhaKlii8wEnPzm8mR4aNFVEe5XwwG7RLJLy04yA=)
6: apiIN38NWuwmq5zLGT_PGl7nwuE.roa (hash: fQnjVUyspxxLgvXaE1acXfTJyNh9B88oVMv1/VzeGlc=)
7: klZpNcpkOEquqUsO-jju5O69v1E.roa (hash: jxFHJzSImYx8wBjjvdBncxitlUill6En9a34gPRYQtA=)
8: y7rxPQXdQykP2HWundiTAhRuuNE.roa (hash: kwq12jPHanXZhrxqm5HaXAm17ns+Kl4rOD8Lx3F1wV8=)
9: yc0EM4Q7YegfvWHtUfZGE2JYYt8.asa (hash: YVzGGL9uGiyH33DfGylRpABv7Bt0LM4Hn9Ld7YwL2Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:22:0d:89:8e:fc:cf:ef:1c:5e:a8:49:51:7e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Mar 26 11:01:08 2026 GMT
Not After : Mar 27 11:01:08 2026 GMT
Subject: CN=30566f861c2d6a1e434ed598a20429bbbac6306c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:84:55:43:69:da:18:86:58:5c:c1:9a:2d:38:
aa:f7:65:d5:70:55:28:d8:db:c3:08:5d:b7:76:00:
3a:e5:57:98:ab:b8:1a:b8:50:35:a6:48:d9:4d:d3:
7c:0b:41:b7:1b:08:08:0f:64:5c:75:1a:1a:f1:28:
d2:1d:ab:eb:87:a5:1b:ec:da:f0:e3:55:2e:76:53:
62:14:31:3e:ce:17:f7:e9:3b:ce:3d:e3:75:78:e5:
91:96:41:d2:56:93:50:06:b7:04:b9:f7:fc:c7:8d:
3c:64:27:50:ab:23:52:c9:e2:c8:1b:86:e2:bf:86:
c8:2d:64:ee:63:4e:39:68:80:dc:c6:25:e4:14:02:
a0:e6:ba:dc:4e:0c:8e:4c:44:77:5e:73:7f:00:7d:
69:75:f4:4c:fc:4e:0f:53:4e:d1:9e:ae:ea:30:32:
1d:4e:b2:09:f3:d4:58:67:bc:48:1f:6f:aa:3d:de:
5a:cf:2f:f6:f3:22:e6:23:85:7a:88:3a:84:8a:e5:
6e:77:d8:e7:42:03:75:b3:69:4a:29:9d:73:ed:4c:
9c:e2:3b:57:a4:7f:29:8d:a3:6d:bb:b6:6e:86:11:
8f:c7:39:a9:cc:f9:f4:f0:6c:8f:e2:98:ee:2c:37:
5e:48:ce:c9:dc:f2:31:59:c9:90:82:26:61:b6:79:
b8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:56:6F:86:1C:2D:6A:1E:43:4E:D5:98:A2:04:29:BB:BA:C6:30:6C
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:66:1e:b4:b0:c1:c0:d5:1c:a4:98:bf:32:1a:97:cc:f5:8c:
92:ac:8c:f4:b9:d6:ea:e1:ed:b1:09:2b:cd:64:62:40:23:27:
20:0c:01:7b:a0:fb:3e:78:a0:e5:f8:ea:0f:28:fb:a0:09:a1:
04:95:1f:b9:fe:1d:17:ff:4e:ef:64:8b:33:79:5a:d8:2a:31:
d4:8c:66:86:d7:26:5e:f0:bb:8d:d6:6f:00:d2:97:24:01:7a:
20:58:8d:69:17:45:69:f7:80:92:d2:99:76:b9:e2:fd:34:e7:
55:b3:9f:7b:eb:44:df:95:35:76:c4:bc:fa:4d:c2:9e:ee:86:
db:8a:01:f8:91:f0:37:7e:9d:11:d9:23:dd:df:a0:7e:6e:e5:
54:ae:7a:6c:69:26:17:8c:95:1a:76:ec:de:94:bc:64:c5:94:
72:20:13:88:4a:28:fa:15:9b:9c:ad:12:61:5d:e9:91:92:46:
32:c8:9c:16:00:69:55:99:40:69:63:81:f8:ed:85:b7:fb:4a:
80:5d:18:3e:f1:0e:c4:12:d8:b8:4a:d1:49:03:7f:53:b8:7d:
37:58:c4:b2:21:bd:bb:42:7e:6e:b4:b4:b7:72:c5:6e:1e:e3:
fb:ac:3c:1a:88:6c:e4:e6:34:c9:8a:27:11:a5:5c:3a:e0:ea:
f9:e8:05:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:00:24 2026 by rpki-client