Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
File: X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json)
Hash identifier: mGL5k6V/u9IbrtYXXQ8fEPbgpA+pamqaQiWo4rklSMY=
Subject key identifier: 56:5E:06:AC:5D:86:52:33:E2:B9:06:2E:EC:B0:50:E3:8A:6D:A9:48
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial: 01A0C8215A140A9E7E4D79055DF42023D7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
Manifest number: 1A67
Signing time: Tue 22 Sep 2026 08:00:23 +0000
Manifest this update: Tue 22 Sep 2026 08:00:23 +0000
Manifest next update: Wed 23 Sep 2026 08:00:23 +0000
Files and hashes: 1: 7t-QMh_AB92nrya7tNjufAiIaNU.roa (hash: LTbV2PdrQop6XvBMoLsBRV4fZwR2wk3jFKlBOeHWh48=)
2: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: gKfltoZnrYgPs5JzE7aTnzbhZJs9f3ehx8pMAQnWv60=)
3: tyhGCGUUUxBeIkOEmn5CIWeCMz0.roa (hash: Mn4RuAcnVGGM8GO1ajZF2VYJS7eHnyi2wQ/w4qHvAaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:5a:14:0a:9e:7e:4d:79:05:5d:f4:20:23:d7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Validity
Not Before: Sep 22 08:00:23 2026 GMT
Not After : Sep 23 08:00:23 2026 GMT
Subject: CN=565e06ac5d865233e2b9062eecb050e38a6da948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c0:ca:03:7f:26:c2:f9:7e:31:9c:54:a7:ec:
a1:b1:bb:6c:05:2a:f2:19:7b:08:7d:73:3d:5e:8a:
8a:02:fd:bd:d6:1b:ac:83:d6:33:12:ad:37:8b:ed:
fe:b5:7b:a2:99:bd:83:9d:98:76:8f:1c:16:47:5e:
84:bb:0c:ad:36:22:5a:20:72:f8:33:15:79:99:ac:
c1:c6:c1:56:97:62:f4:9e:7c:bb:cd:37:2c:75:57:
ed:5b:c2:82:8a:24:b4:a3:4a:1f:4b:e3:3b:52:c1:
e2:6f:62:79:0e:35:92:e6:44:e7:b9:6f:55:3c:0e:
a9:1c:65:42:ff:b2:83:d8:82:60:cc:83:32:71:0b:
a3:bf:05:e8:98:81:79:bb:cd:cf:a1:31:53:18:dd:
5a:6f:93:37:95:a1:15:32:b8:ff:11:20:00:96:9d:
c2:b9:21:29:a5:74:f9:3e:e0:8b:62:ac:00:84:e4:
94:a0:cc:b3:e3:95:bf:91:63:cf:2b:5b:24:e5:f1:
a3:12:a0:a2:55:7d:54:20:13:b3:18:0f:f0:17:61:
c8:ca:54:2d:3f:59:06:aa:21:51:04:22:99:18:80:
57:a2:46:96:41:ef:bc:c7:13:62:6d:de:a6:e9:74:
25:17:ca:4a:07:b5:03:b9:fa:c9:43:c9:be:7e:5d:
b2:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:5E:06:AC:5D:86:52:33:E2:B9:06:2E:EC:B0:50:E3:8A:6D:A9:48
X509v3 Authority Key Identifier:
keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:11:86:b4:e9:ad:bd:91:69:2d:b9:dc:14:19:2d:24:64:93:
e2:ec:d2:54:97:fd:c3:87:13:dd:61:1a:70:71:8c:8f:8b:51:
81:eb:5d:04:d2:24:88:be:bc:db:fd:42:7b:cc:8f:f9:d0:c7:
34:64:4f:6d:50:f7:f2:cd:72:dd:ed:ef:84:02:81:f3:b0:95:
6d:e4:ae:d1:00:fc:a7:af:17:1a:78:ce:4e:2e:83:8d:6b:5a:
f7:0e:8b:a3:67:cf:55:56:bd:76:a1:02:7e:61:ee:47:18:29:
43:ed:85:c6:7c:a1:e7:9c:24:37:d7:5d:cb:55:5f:e1:67:1b:
33:b0:97:8a:de:7f:8a:2d:46:29:ad:b9:b6:c2:8c:89:33:a7:
b3:1c:83:cb:e8:f8:1e:52:46:ca:9c:fc:bf:25:08:69:7f:e5:
fe:d3:2d:5e:eb:ae:83:9e:b0:3d:47:a4:d9:a9:93:1e:be:a0:
c9:e1:6f:c1:d6:73:93:36:9c:47:5c:c7:c2:11:45:9d:5d:77:
fa:29:13:bf:64:38:e4:2d:92:05:19:33:15:65:25:f1:4b:6b:
b5:2d:b0:03:ad:77:e9:aa:c0:a8:66:69:ec:9c:0a:a6:68:ee:
ee:c6:3a:1c:e6:ba:52:61:19:24:09:5a:e6:5b:4e:8f:ff:d0:
61:7d:34:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 11:18:23 2026 by rpki-client