Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
File: X7qw05-2l5_k09JIOgG908k77O8.mft (raw, json)
Hash identifier: hNnH0ChxQHzrng/syHbrtFLYALx9QJsLW8Vu1n6kB48=
Subject key identifier: 2A:82:F0:3A:56:2C:D2:40:4F:97:DF:B1:AB:83:0C:AA:84:CF:B6:3F
Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
Certificate issuer: /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Certificate serial: 01A0DCF2DED029E8AE18C39F1178F06E9D05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
Manifest number: 0F82
Signing time: Sat 26 Sep 2026 09:01:39 +0000
Manifest this update: Sat 26 Sep 2026 09:01:39 +0000
Manifest next update: Sun 27 Sep 2026 09:01:39 +0000
Files and hashes: 1: Fnr8UBCRPeUQhRVFOAHVctCKPfo.roa (hash: PgOyYUmMG9zgljOcOgtP5byxd2cN3HfKRRt85MDBTwk=)
2: X7qw05-2l5_k09JIOgG908k77O8.crl (hash: Ux+f/4mGF2w9wqN5m5dYvEWzhFD9aZvKBmaQiJWxaCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:de:d0:29:e8:ae:18:c3:9f:11:78:f0:6e:9d:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Validity
Not Before: Sep 26 09:01:39 2026 GMT
Not After : Sep 27 09:01:39 2026 GMT
Subject: CN=2a82f03a562cd2404f97dfb1ab830caa84cfb63f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:36:16:48:7e:d4:a3:d2:46:44:eb:f4:55:3d:
00:8f:fd:f8:d9:8a:f5:c5:bc:98:fb:ff:25:81:4f:
a6:45:36:fc:5d:89:8b:53:0a:68:e9:1f:93:a3:50:
15:e6:7c:00:e3:f3:be:ef:18:a7:6c:5e:95:27:6b:
dc:c7:b6:79:34:a0:5c:ea:76:7c:60:a7:a4:8e:ea:
32:55:ae:36:24:fc:f7:82:84:63:eb:cc:ed:f0:58:
85:ab:fa:d3:cd:a9:cb:f0:05:b4:52:33:f8:88:86:
de:1b:a9:26:23:2c:78:a4:39:c5:c9:d1:69:d9:5b:
af:d0:a2:76:01:95:fb:7f:2b:88:69:9d:1e:db:0e:
9d:e3:05:e2:01:2f:7f:a0:31:40:e8:00:1a:23:29:
b9:c5:94:10:05:d0:b1:f5:db:7a:ac:9b:bc:e1:77:
56:4b:34:34:5b:1f:79:ad:b7:39:cc:c5:11:16:7f:
43:8f:bb:6a:ce:5e:1f:e6:88:0e:57:71:35:7e:a8:
e0:88:f0:1c:f4:40:6d:a6:4c:8a:f8:dc:a5:44:3f:
80:90:43:a6:d1:d4:72:85:ec:16:09:fc:da:78:2a:
b2:34:03:55:8d:49:46:8c:e5:01:e0:cd:35:d2:69:
de:c7:6f:fa:6e:14:66:95:77:1d:11:7e:eb:fd:6b:
19:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:82:F0:3A:56:2C:D2:40:4F:97:DF:B1:AB:83:0C:AA:84:CF:B6:3F
X509v3 Authority Key Identifier:
keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ae:a4:4a:92:27:3c:2f:fa:7f:e4:66:c3:fa:00:3a:68:37:
7e:e4:be:18:a1:d5:d5:43:83:e4:76:ba:11:db:b3:2a:13:6c:
94:85:a6:aa:40:f2:de:10:08:19:14:93:47:fa:1b:e7:d3:42:
1f:f0:2d:3f:b8:4e:70:0d:de:0a:36:dc:b1:e2:aa:f7:92:bc:
f8:2a:64:91:d1:cd:e4:51:8f:99:00:16:fc:8e:03:65:02:c6:
56:68:f4:db:fc:c9:e7:43:2b:f6:f4:98:22:8a:d4:d3:dc:8b:
1c:26:b9:5b:8e:14:2d:05:2f:64:e6:a7:45:eb:33:fb:33:6f:
8d:f4:ef:8e:77:9c:ae:5e:49:af:a9:9f:51:3c:36:0d:28:b7:
ee:3d:06:3a:71:a1:ef:61:e2:53:ea:40:54:9b:c3:9b:11:ee:
b7:32:f3:c5:a2:6d:50:15:4a:32:d8:7e:ef:60:e2:4a:7b:9d:
25:03:7f:70:7c:d2:88:1a:ea:0e:8d:dc:e7:08:d5:29:c8:ac:
2e:55:6a:e8:86:e7:f2:7a:97:73:d9:92:e5:4c:e3:8e:a0:a4:
58:a5:77:4d:46:1a:b0:1e:3b:f1:b9:9b:1d:86:5f:be:6f:0d:
73:49:cc:d4:07:42:88:24:91:a5:88:1a:88:09:b0:0d:03:c6:
b3:cc:94:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:26:18 2026 by rpki-client