Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier: osLXggHx7MCaoVZPgBqQ8qJsmqjyxb/lRuMjPJmRSEw=
Subject key identifier: AC:A3:B8:02:BD:1C:A1:E6:3B:05:EE:44:F2:BC:98:AA:0A:48:13:CB
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 019D284DB77E1C4B5F300A5FBB2FA58DE33D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number: 1123
Signing time: Thu 26 Mar 2026 04:01:15 +0000
Manifest this update: Thu 26 Mar 2026 04:01:15 +0000
Manifest next update: Fri 27 Mar 2026 04:01:15 +0000
Files and hashes: 1: 8saY52FM3OItyl4VOSm_edBIkos.roa (hash: BD5qCuL+dtuTG+pcsvXNBMfwvdqjtVm3dC9TZz4R5tA=)
2: AgsPlaew9BxC8H6svqcKUEs4Qhk.roa (hash: 4UR8Vh6eTw1Tv7xe4kRQAuAMN978t94veu9L+yIEOOw=)
3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: 4bc9GUyizByqvGQe3CvtTJM8IWUV3b+Xt1UjRZJDbUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:b7:7e:1c:4b:5f:30:0a:5f:bb:2f:a5:8d:e3:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: Mar 26 04:01:15 2026 GMT
Not After : Mar 27 04:01:15 2026 GMT
Subject: CN=aca3b802bd1ca1e63b05ee44f2bc98aa0a4813cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:f0:90:39:c1:44:e3:a3:88:b7:95:f8:01:
c9:79:13:a4:c5:ff:48:52:de:c1:83:1f:83:62:a9:
be:35:42:b3:66:ab:ce:f2:80:09:e7:8a:fa:1d:72:
29:ce:3b:3d:91:20:d6:42:05:35:73:fe:6c:a3:5f:
11:8b:26:43:41:51:a3:58:64:a3:82:a5:41:cb:d4:
5e:34:9f:90:55:a4:42:91:e5:b0:2d:5d:73:3a:3b:
30:20:c5:7a:a0:7f:80:6a:ae:4f:42:97:14:41:58:
80:3b:12:60:31:90:83:fc:ad:bb:4b:d1:f2:b9:98:
95:9e:42:33:89:37:76:ca:02:1c:d2:d5:47:f6:e3:
bd:5b:66:de:79:6d:b2:44:7e:89:59:a2:63:c4:23:
27:be:6d:52:60:d3:5e:bf:c6:18:68:f7:94:09:71:
30:71:fc:8d:ca:7a:b4:9c:55:51:f7:ff:e1:af:09:
f3:d0:f6:82:1a:c7:61:2f:fa:30:da:11:9b:13:2d:
81:e2:16:95:f7:d3:9f:ce:ab:d7:1b:17:9d:6d:01:
10:31:ca:fa:a7:68:01:8f:8b:88:27:2d:58:ef:75:
64:07:cd:a4:56:47:e1:9a:b7:c5:af:8a:b8:aa:7c:
53:91:a8:3b:0e:39:39:6d:8d:98:47:4a:0a:89:2c:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A3:B8:02:BD:1C:A1:E6:3B:05:EE:44:F2:BC:98:AA:0A:48:13:CB
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:42:7b:c0:5f:94:04:50:09:78:cb:7c:f1:8d:22:e3:f8:4f:
8d:cd:71:1c:c7:29:6b:fc:37:c5:79:39:f3:fa:03:d2:4b:70:
17:23:3a:11:63:a6:f1:57:81:bf:03:37:53:0d:d0:a9:8e:67:
f0:c6:da:8b:c6:81:af:4d:55:ed:30:69:91:5e:93:f5:27:93:
7f:01:b0:6e:9f:3b:87:89:8c:a4:41:0d:0d:96:1e:5a:59:ff:
18:03:e2:f0:fd:57:9c:9f:fd:a5:07:f0:91:82:85:de:54:00:
e9:b8:e8:ef:7f:50:fa:0f:6a:01:7e:e4:55:88:e0:21:4e:f5:
3f:b9:14:43:13:3f:14:ff:21:4a:35:05:73:c4:cc:7e:64:52:
14:c8:78:0a:7f:21:06:9c:19:c4:11:32:55:d9:07:4c:ba:47:
76:d1:78:ab:28:0a:4c:cf:cb:92:9b:80:0c:85:ac:d3:c5:d4:
10:7f:2f:23:bc:12:68:60:a7:60:f3:66:e5:d2:ce:a8:cb:21:
09:34:35:88:ce:31:59:2d:1b:76:cd:fd:6d:33:a5:cd:fe:d7:
05:09:37:e0:c2:22:8d:2d:f1:76:2d:4b:3d:02:27:70:d5:37:
81:11:cc:48:c1:12:2f:b6:06:da:54:7d:97:ca:85:db:d6:c2:
b5:f3:52:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:02:43 2026 by rpki-client