Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
File: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json)
Hash identifier: QQdYP0rQsPQbQVw2qEJouUUKo9MtAETrro1w/neOCOs=
Subject key identifier: FA:69:23:00:7B:1D:9B:20:81:E1:B9:15:C3:44:F6:25:59:8A:86:DA
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial: 01A106939CC824B1DDB325DEC8EFBFA9218A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
Manifest number: 069C
Signing time: Sun 04 Oct 2026 11:01:39 +0000
Manifest this update: Sun 04 Oct 2026 11:01:39 +0000
Manifest next update: Mon 05 Oct 2026 11:01:39 +0000
Files and hashes: 1: je_dZ3uZwgn_oNlxsf8-FTUq220.roa (hash: ypEWzWUb+UjYyAsZX+8LRu9EB7C2RkmFTCbcPYB408Y=)
2: pt1RHK2niClvZGTwHDZ-ZsdvbEk.roa (hash: /6TgV1nZB5u4zUl3iLf85GJmzgWJev9Zymtz9O1XUPc=)
3: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: NFVUlZfjLUW4zYit/9hcODMV4tZdN1wjJxs9xdBj2uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:9c:c8:24:b1:dd:b3:25:de:c8:ef:bf:a9:21:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
Validity
Not Before: Oct 4 11:01:39 2026 GMT
Not After : Oct 5 11:01:39 2026 GMT
Subject: CN=fa6923007b1d9b2081e1b915c344f625598a86da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:1d:64:b1:d4:f2:5b:0a:41:1c:00:07:92:30:
9d:a8:ab:46:af:83:64:e5:bd:f1:f8:4b:10:2e:46:
08:6d:68:bd:10:42:36:b9:7d:f0:58:0d:b9:94:9e:
f6:7c:9a:9c:0a:a0:5b:45:d6:e0:2b:ad:1c:71:7c:
65:fb:c6:32:4a:43:18:36:13:4f:f2:06:4a:0a:05:
97:96:f1:27:c1:82:db:8e:47:bd:09:7c:71:60:b5:
04:ac:c2:0e:32:f7:6d:c0:a4:8e:d5:8f:08:e1:1c:
23:3c:8c:be:38:4c:02:81:89:68:4a:13:ce:ab:2b:
fa:e5:dd:dd:8b:e5:12:c9:a6:48:a5:2b:e9:c8:56:
5f:0d:94:ce:73:62:10:e1:18:a7:2d:37:8f:bd:aa:
b4:60:1d:5a:42:f6:71:4d:32:8e:dc:03:4c:d8:ef:
75:6f:92:95:9a:58:f6:bd:e4:ef:5b:be:7b:f4:a3:
b1:e1:50:51:8e:e4:04:0c:c9:c7:56:fa:96:34:98:
1a:75:64:a6:7d:94:eb:8d:9d:0e:2f:e1:87:5b:f9:
79:46:98:eb:f3:df:f9:7c:cb:4a:48:2d:99:38:77:
6c:6c:e8:b5:08:5a:c6:11:51:9a:53:7a:20:d2:ae:
87:78:a0:7d:25:d1:2a:31:51:9f:c4:6e:12:82:f8:
38:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:69:23:00:7B:1D:9B:20:81:E1:B9:15:C3:44:F6:25:59:8A:86:DA
X509v3 Authority Key Identifier:
keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:25:50:e9:61:44:b0:71:13:4e:4e:ea:5a:0b:f7:fb:02:79:
e6:d9:c8:e2:af:f9:f7:93:08:77:ca:77:0c:00:87:e3:69:dd:
05:7b:4a:8c:f3:01:5c:26:37:db:b2:e1:03:47:3b:6f:ea:56:
4c:10:6e:5f:ef:0e:fd:47:ef:a7:59:c7:3e:c6:f0:9c:ec:7e:
b7:52:90:07:7d:55:0a:5f:97:32:d1:22:8f:cb:d7:6e:7c:0a:
cb:c2:b3:de:c4:ee:7a:d5:b6:ac:2d:dd:9f:4e:63:9e:aa:71:
4e:e3:bb:4b:cd:2e:64:d7:10:15:ca:4e:72:b2:45:98:56:56:
8a:88:19:99:15:56:d1:24:92:7d:5a:e2:46:3a:65:3b:2e:a4:
8c:b5:43:77:c6:0c:33:00:86:73:e4:0a:32:2e:8c:f8:19:22:
cb:6f:5c:90:3a:18:e5:ba:93:4f:7d:c0:7a:d7:22:b3:2f:a5:
70:2e:41:a6:1d:68:bc:e3:c1:f5:be:40:99:e0:1e:bc:93:24:
ed:93:94:c3:a3:9e:3d:3b:c5:80:b6:89:83:50:ed:93:cb:95:
4b:bc:24:f6:54:c4:2d:62:87:90:12:ac:d4:3e:44:fe:30:1b:
8e:3f:8e:08:35:f4:dd:8c:83:62:02:aa:d0:3c:96:39:61:80:
43:cc:bd:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 23:20:03 2026 by rpki-client