Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: gvrbWL7c6OHNtenX58YJ5DROliT+5D6Px07zCS5BYwQ=
Subject key identifier: 6F:72:DA:53:3B:E5:A2:7D:26:67:C0:88:E8:A9:65:AC:8D:06:57:28
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 01A0DB723F471085FBD0D2F6C099408B0F34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 081C
Signing time: Sat 26 Sep 2026 02:01:32 +0000
Manifest this update: Sat 26 Sep 2026 02:01:32 +0000
Manifest next update: Sun 27 Sep 2026 02:01:32 +0000
Files and hashes: 1: 2ptS9RtqKyQICl-FF5XAQQMG1p8.roa (hash: CnIWNGibVsyJEPJ7wWfI/zOEpiDLnhOyvk0A6/tQZh0=)
2: 56Kmc-Cz64ulFDN7LZkLpLy2Uyk.roa (hash: M1LxSBYIiPUs1C9HbHfgJfFfNoWmm4ypO8QoHN7KG7k=)
3: Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa (hash: yA+b+JTKhvzBntnbRz8H3TVoNPvRK8TlZDevDFWYPVU=)
4: MHUiyig4q2dE9dcejzFeSdppyes.asa (hash: vsGXprjQpMNWSZX1y2syqnGE09eYObc2WoOHBWaktro=)
5: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: w2KXFrt4RRCjLe0GWYLkLx8FJcBpTp+8/gNsWwhaIYs=)
6: Z1V5lwUUrZll1KmPOgWR8Eag8b4.roa (hash: xUsruNjtSsoiCiUtber3+Ze8kadAYwEP/UxnWmjwonA=)
7: Za3vl_jOJ0pGYslBqqMRsVt7h_s.roa (hash: YOFAZhaKlii8wEnPzm8mR4aNFVEe5XwwG7RLJLy04yA=)
8: gbzBHonlRf7ivnA5P_wp2hX0XU4.roa (hash: Bg4gSoBZ6ks0LuCfTWEWHJ+rDpA/oTvHgiBzwgffaf0=)
9: klZpNcpkOEquqUsO-jju5O69v1E.roa (hash: jxFHJzSImYx8wBjjvdBncxitlUill6En9a34gPRYQtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:72:3f:47:10:85:fb:d0:d2:f6:c0:99:40:8b:0f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Sep 26 02:01:32 2026 GMT
Not After : Sep 27 02:01:32 2026 GMT
Subject: CN=6f72da533be5a27d2667c088e8a965ac8d065728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:c3:08:b9:5b:f9:46:85:8d:08:85:a7:f0:5f:
bf:4e:57:aa:6c:da:e0:83:e5:a2:32:06:34:97:86:
21:2a:c9:99:5f:e3:2a:fe:6f:ca:d2:74:2b:28:32:
b9:c3:eb:e9:75:8a:02:0a:48:33:81:96:c7:92:89:
b9:c4:8c:04:c3:7c:d9:92:8b:1b:69:75:b9:5d:84:
67:64:e1:e3:b1:42:79:24:a2:c8:c8:25:fa:4a:a4:
7a:fb:21:4f:f3:65:33:b1:fb:f6:35:45:52:a0:29:
95:26:e6:ed:a9:17:cf:90:6a:49:6e:1b:ed:9a:a5:
4e:26:4a:6a:4e:54:8a:61:1e:89:4b:46:6a:f6:78:
24:28:47:8e:4f:e6:ca:78:c7:61:fe:52:88:a1:73:
bb:45:dd:2e:8a:35:9d:c3:c6:1f:0a:97:30:a9:8e:
1c:0a:d0:03:40:e2:92:c0:af:26:c5:21:73:d4:1f:
43:6b:ea:38:56:e2:df:61:80:fd:c0:97:e3:b6:2e:
a7:a3:c2:27:7d:8b:f9:f1:e0:54:4e:7f:e1:33:58:
1c:4a:23:4f:9f:d1:ee:50:d0:fd:cd:8c:d5:9c:7c:
2f:96:1d:b2:8a:7d:c0:00:c3:44:05:98:e3:e5:16:
cc:46:43:c7:14:f3:2d:1d:a4:47:73:92:5d:0c:58:
d9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:72:DA:53:3B:E5:A2:7D:26:67:C0:88:E8:A9:65:AC:8D:06:57:28
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:3a:91:aa:62:37:f5:ff:db:97:22:74:32:77:df:8e:4b:95:
95:48:4d:60:cf:4a:71:23:f6:b1:51:78:95:a3:13:c0:66:12:
90:ec:e1:49:30:e7:0d:79:9d:91:7a:ad:2c:30:68:66:d7:dd:
d2:a7:09:56:05:d3:09:66:66:53:b0:8f:33:c8:d9:df:86:70:
89:ef:21:d0:b4:65:c8:2e:c9:79:2f:41:6a:44:c5:7b:b6:0f:
68:1d:11:9f:b8:9d:e1:6d:12:95:e3:95:03:38:46:84:68:47:
d1:34:90:63:1a:0a:6e:90:8b:2b:e8:18:fc:33:e7:21:44:ad:
5b:14:17:0a:ba:a0:c7:67:d5:d3:66:6c:c4:a7:57:1c:58:b1:
b5:5e:0e:7b:5c:00:74:d5:94:68:5c:bb:79:51:dd:af:f2:d5:
00:81:67:d9:ae:d2:f8:90:2a:16:8e:77:0a:04:62:41:f2:54:
9e:11:bf:2c:fd:f7:ee:23:22:8e:7e:12:8c:a4:d6:b9:61:74:
7f:73:c4:1d:20:fd:a1:85:26:f5:5c:34:2d:8f:ff:d2:6b:fe:
1b:1b:5d:c0:da:4c:53:b3:fe:aa:2d:43:ea:96:31:1b:63:09:
3f:56:ea:04:a7:90:0c:df:5c:1b:70:c2:85:25:e9:87:a6:8e:
96:f4:2c:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDbcj9HEIX70NL2wJlAiw80MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmYzkwNTE4ZGY3MGIxM2Q3MDZiZmUyMzdhYTVhNzY5MjZh
NTc2ZDEwHhcNMjYwOTI2MDIwMTMyWhcNMjYwOTI3MDIwMTMyWjAzMTEwLwYDVQQD
Eyg2ZjcyZGE1MzNiZTVhMjdkMjY2N2MwODhlOGE5NjVhYzhkMDY1NzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3MMIuVv5RoWNCIWn8F+/TleqbNrg
g+WiMgY0l4YhKsmZX+Mq/m/K0nQrKDK5w+vpdYoCCkgzgZbHkom5xIwEw3zZkosb
aXW5XYRnZOHjsUJ5JKLIyCX6SqR6+yFP82Uzsfv2NUVSoCmVJubtqRfPkGpJbhvt
mqVOJkpqTlSKYR6JS0Zq9ngkKEeOT+bKeMdh/lKIoXO7Rd0uijWdw8YfCpcwqY4c
CtADQOKSwK8mxSFz1B9Da+o4VuLfYYD9wJfjti6no8InfYv58eBUTn/hM1gcSiNP
n9HuUND9zYzVnHwvlh2yin3AAMNEBZjj5RbMRkPHFPMtHaRHc5JdDFjZywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9y2lM75aJ9JmfAiOipZayNBlcoMB8GA1UdIwQY
MBaAFF/JBRjfcLE9cGv+I3qlp2kmpXbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEt
YzgzMDJlODJlYTIyLzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82NWNjMjAtMGRmYi00MTgwLTlhYzEtYzgzMDJlODJlYTIy
LzEvWDhrRkdOOXdzVDF3YV80amVxV25hU2FsZHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXjqRqmI3
9f/blyJ0MnffjkuVlUhNYM9KcSP2sVF4laMTwGYSkOzhSTDnDXmdkXqtLDBoZtfd
0qcJVgXTCWZmU7CPM8jZ34Zwie8h0LRlyC7JeS9BakTFe7YPaB0Rn7id4W0SleOV
AzhGhGhH0TSQYxoKbpCLK+gY/DPnIUStWxQXCrqgx2fV02ZsxKdXHFixtV4Oe1wA
dNWUaFy7eVHdr/LVAIFn2a7S+JAqFo53CgRiQfJUnhG/LP337iMijn4SjKTWuWF0
f3PEHSD9oYUm9Vw0LY//0mv+GxtdwNpMU7P+qi1D6pYxG2MJP1bqBKeQDN9cG3DC
hSXph6aOlvQsgw==
-----END CERTIFICATE-----
Generated at Sat Sep 26 10:23:38 2026 by rpki-client