Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
File: X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json)
Hash identifier: ydQScoMcQMDCVZk/EUrIQ+9SyjRpkHy0hKad5alkFBw=
Subject key identifier: 7C:E4:89:E5:1D:69:01:79:E5:D6:F2:52:10:34:B9:90:55:49:D1:7F
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial: 019CA9B361B5BB9BB1636EE9DE84761DA3AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
Manifest number: 1845
Signing time: Sun 01 Mar 2026 14:00:31 +0000
Manifest this update: Sun 01 Mar 2026 14:00:31 +0000
Manifest next update: Mon 02 Mar 2026 14:00:31 +0000
Files and hashes: 1: 7t-QMh_AB92nrya7tNjufAiIaNU.roa (hash: LTbV2PdrQop6XvBMoLsBRV4fZwR2wk3jFKlBOeHWh48=)
2: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: EXH/UX2NMZ1sAKAhwOR90gN3WJLVh7ZBA3sYqkfWvKU=)
3: tyhGCGUUUxBeIkOEmn5CIWeCMz0.roa (hash: Mn4RuAcnVGGM8GO1ajZF2VYJS7eHnyi2wQ/w4qHvAaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:61:b5:bb:9b:b1:63:6e:e9:de:84:76:1d:a3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Validity
Not Before: Mar 1 14:00:31 2026 GMT
Not After : Mar 2 14:00:31 2026 GMT
Subject: CN=7ce489e51d690179e5d6f2521034b9905549d17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:89:b2:c6:4b:89:57:9a:c4:97:b0:38:91:4b:
c8:64:8a:2d:96:10:10:fe:67:b7:08:6d:02:c3:2a:
9d:0f:58:1c:9e:70:84:68:ad:d8:9b:58:f7:e4:7d:
47:6a:e1:c1:21:d3:a2:5d:9b:eb:eb:d9:20:4f:e3:
c4:9c:b7:de:fa:65:fb:bf:d9:49:9d:f1:57:9c:20:
fb:f8:da:31:ab:d7:8c:4f:7a:1b:c3:4f:1a:bb:1c:
86:da:83:2a:7a:37:8b:c6:10:73:26:e9:ac:32:1c:
ce:6d:2a:79:73:71:43:aa:41:2e:05:4a:e7:9e:3b:
07:2e:aa:64:c2:05:a3:5c:87:ca:16:37:0f:9c:22:
db:6f:1d:26:85:fc:4d:48:02:17:a8:1d:9c:af:4d:
67:a8:d7:12:48:ed:5d:04:11:c5:d0:cb:53:bc:e2:
4b:04:b6:86:6f:d8:b9:43:8e:dc:0a:e4:03:23:bd:
5f:a9:df:d4:eb:bc:9e:ea:3b:4a:c0:56:fb:07:d8:
ad:80:c1:77:5c:8b:e4:d3:cd:a6:cb:55:ce:d8:99:
9a:b6:c0:52:7e:77:3e:87:5a:24:dd:b7:7a:09:84:
36:42:50:4f:4f:71:79:a6:65:fe:98:e2:7c:af:ca:
0b:4e:fa:f8:42:e8:04:6d:24:a9:54:4c:8c:64:f6:
13:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E4:89:E5:1D:69:01:79:E5:D6:F2:52:10:34:B9:90:55:49:D1:7F
X509v3 Authority Key Identifier:
keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:06:05:76:0a:70:ed:18:95:75:29:37:7e:51:62:ed:b8:ce:
df:95:44:fd:db:32:59:f5:58:ca:61:6b:fd:ef:c9:60:81:fd:
41:be:b9:8e:f0:2a:f7:01:58:b7:f3:c3:a8:2a:75:3e:19:4b:
76:dc:4d:38:cc:15:93:c8:f8:8e:65:c5:5c:5d:0b:72:15:4b:
0c:01:ba:18:b1:e8:25:c6:f4:22:71:bf:5d:33:47:9d:e1:46:
f9:9a:18:63:1d:37:c5:7c:81:00:2a:ea:62:42:44:66:a7:aa:
3b:73:3c:14:9e:d0:f9:ae:cd:f0:a7:36:e2:9c:75:a3:94:97:
7a:c1:9e:54:7c:8b:e4:a8:a1:9a:c1:3b:fc:1f:e2:39:71:33:
be:2f:3b:71:36:20:58:7a:d2:b8:cf:2e:5b:b5:7b:71:51:aa:
db:20:69:95:68:b6:e3:f3:72:b9:0f:d1:ae:00:7c:09:63:d1:
01:b3:b5:ca:0c:62:ba:a7:a2:db:ff:4f:a5:94:1b:16:a3:bb:
39:f9:ea:86:18:39:39:76:fc:0f:02:39:1f:3b:94:54:cc:c7:
e1:14:4d:9b:1f:d2:38:7d:ff:68:3c:9b:39:11:68:b3:b5:2a:
d8:2c:da:09:d0:a1:9a:95:3c:1c:65:99:37:6a:6e:e6:9d:fd:
94:45:18:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:41:35 2026 by rpki-client