Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
File: X_n07MXQUHYsVWmEQPheqW9zMPI.mft (raw, json)
Hash identifier: jqnA8BUqXtgknvNnAXxdF3QIPPUZd7EusYJI7Ip3qio=
Subject key identifier: 83:4B:83:61:22:41:AE:46:75:E1:AC:15:D6:B8:B9:99:7F:B4:D5:90
Authority key identifier: 5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
Certificate issuer: /CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Certificate serial: 01A1547798B5C8DBB0D8CE7B76CE960DC085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
Manifest number: 1AB2
Signing time: Mon 19 Oct 2026 14:01:26 +0000
Manifest this update: Mon 19 Oct 2026 14:01:26 +0000
Manifest next update: Tue 20 Oct 2026 14:01:26 +0000
Files and hashes: 1: X_n07MXQUHYsVWmEQPheqW9zMPI.crl (hash: ACPJXowrIoUo2xvavVw9l9EOmwnw+ugr3JEmFn+KM1s=)
2: cF9T-jxoP9kV3otKbs6wprWqe14.roa (hash: By9z72uPVXpGvtlPCEnMJBu0BtKh3WPCweFaBQSyntA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:77:98:b5:c8:db:b0:d8:ce:7b:76:ce:96:0d:c0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff9f4ecc5d050762c55698440f85ea96f7330f2
Validity
Not Before: Oct 19 14:01:26 2026 GMT
Not After : Oct 20 14:01:26 2026 GMT
Subject: CN=834b83612241ae4675e1ac15d6b8b9997fb4d590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b8:1b:d9:fe:a1:0f:00:3f:af:34:c8:b6:c4:
d7:7b:a9:73:2c:49:f3:8f:15:ec:42:76:7c:59:0b:
3e:23:da:da:11:f9:0a:96:7d:c1:60:c6:29:96:8e:
7e:ee:20:eb:59:cf:11:f9:35:2f:4b:99:a4:65:ac:
5e:86:b5:c9:a8:86:83:11:b8:98:9f:52:21:a9:f8:
6d:c5:2f:90:f3:90:c9:d7:c8:bf:d0:c1:b4:27:3b:
a2:d6:ff:9b:97:10:4b:52:14:ba:0f:13:83:0f:0f:
ee:69:e8:2e:da:f8:89:f3:c6:9d:8d:cc:d7:2f:82:
7e:07:7c:5b:54:fe:7f:4d:ac:ac:93:da:92:2e:7a:
f9:b9:b0:44:cf:8b:57:6e:2d:64:1e:9d:9b:b7:89:
15:4d:ae:bd:c6:b5:47:1a:6e:be:93:46:c8:eb:8a:
81:a3:a5:b6:1c:21:48:75:9a:3a:ab:37:86:38:2c:
0f:f3:a8:08:23:3a:28:83:0c:1a:16:5a:4c:65:cd:
92:14:5f:4f:bd:e0:11:4b:a8:5d:b7:ad:70:93:ff:
f4:c5:3e:7c:fd:8b:3c:9b:ae:65:91:0f:d3:9f:27:
62:85:fe:71:3b:04:ec:22:b9:bf:47:be:15:76:ca:
38:b4:83:d5:9b:b1:58:d3:98:20:f6:ec:c0:2e:0a:
d8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:4B:83:61:22:41:AE:46:75:E1:AC:15:D6:B8:B9:99:7F:B4:D5:90
X509v3 Authority Key Identifier:
keyid:5F:F9:F4:EC:C5:D0:50:76:2C:55:69:84:40:F8:5E:A9:6F:73:30:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_n07MXQUHYsVWmEQPheqW9zMPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/77c660-f82c-4106-abc9-4c1e49ec8f16/1/X_n07MXQUHYsVWmEQPheqW9zMPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f9:ef:18:a2:48:6b:ca:4b:67:79:39:7d:bd:b8:29:63:66:
de:2b:55:d7:22:fe:99:66:86:8a:e1:0a:f9:ea:a8:c7:ad:6a:
3a:5e:f3:a1:19:06:78:6c:e4:ec:31:b6:7e:66:fb:ee:78:56:
56:ee:8c:36:14:f2:96:7a:d4:a1:12:12:08:a9:e7:c3:9c:a8:
d9:9b:c4:19:a3:c5:68:5f:82:c3:5b:fd:be:be:ee:76:67:36:
3c:72:d3:42:6d:50:82:b8:8e:b2:3c:14:4a:a3:69:f3:f8:cf:
08:aa:b9:a9:83:4b:65:f9:6c:e2:c9:f4:16:3f:00:c1:d3:88:
77:86:9f:9e:72:21:24:a2:52:01:a8:26:21:56:81:98:03:e7:
0f:f7:74:cd:26:00:02:37:2d:a9:f8:ae:97:c6:73:1e:d6:b6:
73:6e:2d:b1:4b:0a:55:ad:8f:f7:94:52:80:3c:7a:d0:40:9a:
c9:7c:14:57:fd:92:42:21:6a:8f:df:63:f8:36:8f:97:4e:f3:
26:d0:11:c2:fa:55:18:90:c3:e1:0b:a1:d2:e1:3d:0b:11:c4:
fb:e8:8b:07:93:6b:80:e2:16:d8:44:99:44:82:7d:82:0f:33:
c9:ef:7d:f3:4b:fe:fd:db:bf:76:df:90:74:a5:41:0f:1f:b7:
8b:ca:d6:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 17:26:09 2026 by rpki-client