Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
File: X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json)
Hash identifier: Rb3nUJRazKX1DTBjSgHtk3sXZm3rRb+99noYcUZd/JU=
Subject key identifier: D3:C8:89:78:09:01:C6:4F:CF:4B:7F:E1:76:3E:26:67:73:CC:C1:BA
Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Certificate issuer: /CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Certificate serial: 019D99995A2E6FF2FD6041752E2A47A39CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
Manifest number: 12D6
Signing time: Fri 17 Apr 2026 04:00:57 +0000
Manifest this update: Fri 17 Apr 2026 04:00:57 +0000
Manifest next update: Sat 18 Apr 2026 04:00:57 +0000
Files and hashes: 1: OgANtrj8j6WImSC_x9463NVhsNw.roa (hash: 0EdUSPwLZaULLi34jwJduN5d3rfdYn4zQ6i+IIL5P2I=)
2: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: 33HGO9/10bQmaY6g55wNOshyC9vwCKS7biSxNuhRXuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:5a:2e:6f:f2:fd:60:41:75:2e:2a:47:a3:9c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Validity
Not Before: Apr 17 04:00:57 2026 GMT
Not After : Apr 18 04:00:57 2026 GMT
Subject: CN=d3c889780901c64fcf4b7fe1763e266773ccc1ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b1:d0:90:c7:d0:6a:e0:c9:01:80:76:db:86:
3a:07:6e:fb:4f:80:52:84:d1:24:7c:62:df:f3:fc:
85:a4:7e:17:83:dd:19:f0:b3:44:5a:3b:cf:a9:6c:
03:7b:a8:56:df:41:b7:db:85:1a:5f:6e:d3:02:ce:
15:7a:15:71:ae:57:52:bd:01:f5:8d:c1:bd:71:79:
39:79:65:7b:95:20:b5:8d:7f:90:78:99:df:58:ce:
8f:cb:39:00:a6:46:9f:ae:15:f7:80:31:5b:6f:bb:
94:a4:75:e5:65:76:35:10:3a:dd:0f:67:ca:a3:e3:
f8:d0:a7:f3:b4:25:ba:75:d0:69:68:a0:63:fc:b0:
b8:c9:c6:d7:51:c2:68:87:34:40:3b:46:cc:cc:61:
48:61:2b:21:ac:d2:60:16:81:70:67:9b:93:1d:09:
fd:11:ff:3a:19:e3:25:2a:57:40:0d:80:64:ca:9d:
60:20:ab:e5:38:04:cb:ea:a4:d0:b2:6a:e1:7c:a9:
24:53:1b:f4:0b:fd:90:a8:92:1c:f9:ec:c9:e1:d0:
4b:81:47:7b:f8:95:84:13:4e:69:a3:66:13:4b:48:
26:af:1f:c3:66:54:ea:09:a5:d0:5c:d3:cb:75:d3:
5e:09:8b:5f:29:8b:e6:b4:6b:29:7b:c2:d9:54:77:
66:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C8:89:78:09:01:C6:4F:CF:4B:7F:E1:76:3E:26:67:73:CC:C1:BA
X509v3 Authority Key Identifier:
keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:70:d2:ba:8d:8c:5f:03:b6:e0:f7:dc:a8:9b:a7:0f:a5:50:
59:5e:b7:b6:78:73:a2:1a:a3:22:12:1e:3d:fb:01:bc:02:a8:
59:0b:d3:52:fd:02:6c:c3:5b:2c:30:70:c0:f3:f8:47:8e:34:
0a:57:b8:bd:7a:f3:23:4c:82:f7:f6:95:9e:03:a2:20:88:52:
a2:dc:d9:b5:3e:21:d2:8d:b8:b1:d5:db:37:c7:99:56:98:2d:
1a:d1:3d:25:5d:37:39:39:eb:b0:7b:14:31:10:d6:cb:8b:21:
d4:16:ed:b2:75:e4:b1:4d:c9:43:2a:de:c8:fc:56:57:58:41:
9d:a3:71:a1:6c:81:b9:4a:3d:c3:13:09:b5:fc:6e:cf:fd:47:
04:6d:e4:c3:45:ac:2e:3a:9d:81:e2:ae:9c:2e:03:fa:54:cb:
d1:3f:bd:bb:a4:14:dd:29:13:9b:4e:03:e0:96:0f:2a:d9:71:
d3:5b:c3:b0:9f:2a:6a:62:d1:72:ee:75:9a:08:b5:88:fc:89:
ac:61:75:6c:a2:eb:30:2d:65:1b:f4:e8:26:f7:5d:5e:d4:78:
23:11:d0:12:b6:b7:07:a1:e3:e2:34:a2:cc:72:e4:e7:7e:0c:
34:b6:43:2c:3f:3d:84:bb:1a:b0:cd:98:fa:6c:66:36:7b:b3:
11:51:f6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:00:17 2026 by rpki-client