Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: hTEDWdyq5n9YhDk9nq3i3enrL74CePIuFKFxrrogwwk=
Subject key identifier: E0:9F:AB:5F:8A:EE:4F:02:20:54:C2:E9:D0:4E:D0:BE:93:B8:F5:4B
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 01A0DCF2A5CB2E3CD474E93A8ED42ECCEE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 1A72
Signing time: Sat 26 Sep 2026 09:01:24 +0000
Manifest this update: Sat 26 Sep 2026 09:01:24 +0000
Manifest next update: Sun 27 Sep 2026 09:01:24 +0000
Files and hashes: 1: XZNXCKIqVDgpPc7kS3zYiOP2yVE.roa (hash: rxN9jO9dfAmhC4tVQzEusEgOoOYY+A90wdSvN0MmV5g=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: ui/pUGX8uYSlhDfnd31tDKxZKj7Cbxs8e1OLvUOyeL4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:a5:cb:2e:3c:d4:74:e9:3a:8e:d4:2e:cc:ee:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Sep 26 09:01:24 2026 GMT
Not After : Sep 27 09:01:24 2026 GMT
Subject: CN=e09fab5f8aee4f022054c2e9d04ed0be93b8f54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:db:07:0b:58:8f:20:04:62:5f:00:be:11:83:
d9:05:50:de:e6:2a:07:b7:49:33:a5:7b:01:18:71:
1e:f9:4e:01:67:c0:3d:05:98:c9:50:db:62:0a:f4:
8a:9a:55:70:d2:18:a7:20:94:0b:40:f1:df:24:3e:
0b:2f:1e:31:ab:a5:ab:c2:bf:a6:5a:13:3c:98:b7:
2a:6f:9a:e2:00:00:12:eb:fb:fc:d4:36:26:ff:19:
6d:bd:41:83:d6:ed:89:1c:a0:5c:58:5e:d7:71:15:
b5:77:4c:02:46:77:49:aa:30:ec:32:ec:ad:61:6c:
60:dd:08:8a:cd:ec:7b:9c:33:e5:99:9a:ad:8c:17:
38:99:69:ee:20:2c:96:f3:7d:ff:8e:9e:38:d8:97:
a8:e7:c3:5f:34:64:4e:cf:7f:c7:6f:75:5b:6c:ec:
11:c7:6f:60:59:f3:bf:8d:19:ad:81:43:eb:ce:83:
d5:c0:1f:5a:38:b5:54:42:b7:32:ab:4e:cd:66:70:
9d:ca:3a:5f:0a:8c:5b:30:95:d4:f4:14:e3:21:91:
d2:81:0a:24:5c:19:33:c4:4c:7c:b9:6a:52:0e:9a:
86:e7:ce:1f:f8:73:8b:7a:fe:45:d7:ae:96:87:de:
54:d4:99:04:98:ab:6b:89:87:af:bd:32:b7:98:a3:
0a:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:9F:AB:5F:8A:EE:4F:02:20:54:C2:E9:D0:4E:D0:BE:93:B8:F5:4B
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:a4:4d:23:66:85:db:64:bf:a8:da:ec:52:42:37:89:12:78:
68:4b:83:d1:98:b4:c2:86:91:51:71:86:0c:d8:dc:90:50:55:
c6:cf:c6:ae:10:94:50:cb:c6:8a:c1:7a:af:96:ed:1f:0e:7d:
1d:8d:22:a0:47:b4:f8:b0:c0:c3:91:7b:f7:f8:6e:f8:67:34:
c4:0c:e3:b8:7b:b8:13:85:30:c4:61:9a:34:87:10:42:4c:70:
c0:59:e2:51:7f:1d:d0:ab:bd:df:84:b7:10:76:d1:c4:8b:c1:
da:a0:36:f2:83:0b:da:e4:37:28:23:8c:97:61:82:84:e0:13:
9d:45:04:3b:18:25:38:45:2d:25:67:83:f4:39:51:e1:fd:fc:
a8:11:87:c0:4d:2a:4b:5d:16:f3:3d:3c:8a:7b:d4:70:81:03:
84:7f:3e:33:af:84:57:d5:f7:25:c3:38:f9:fd:cc:51:96:6f:
79:76:16:ac:0e:f7:13:7f:04:b9:b9:de:11:39:b8:65:e5:e1:
6a:61:4d:82:34:76:40:12:c3:7b:0f:be:6f:f9:59:53:f6:d7:
10:ef:92:ef:7a:cc:93:22:5b:11:87:c1:e0:89:f0:3c:9f:89:
af:61:c7:14:0c:fa:ff:9a:e8:8a:3b:63:d1:87:f4:16:22:47:
6e:c7:89:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:32:05 2026 by rpki-client