Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
File: X2tkyBuOyHNUU-lAP72UlpiWmUA.mft (raw, json)
Hash identifier: rOzu9ngSEV4pSbGAuP9if9bUnirhF9uPP1prJ/cwVfk=
Subject key identifier: 80:0C:E2:4B:1F:DC:18:79:FF:19:CF:E6:45:03:00:6D:D3:60:68:F1
Authority key identifier: 5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40
Certificate issuer: /CN=5f6b64c81b8ec8735453e9403fbd949698969940
Certificate serial: 019FAC08D7D8F8B90CAEBABDD6389F045443
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
Manifest number: 6F
Signing time: Wed 29 Jul 2026 04:01:28 +0000
Manifest this update: Wed 29 Jul 2026 04:01:28 +0000
Manifest next update: Thu 30 Jul 2026 04:01:28 +0000
Files and hashes: 1: MwwTtfqSDI8q5-iLJ6gRVj5w5_A.roa (hash: 1nyg//DPGxUyvWbSkzZcVUWN8V8QWNENdy2yUz4eoxQ=)
2: X2tkyBuOyHNUU-lAP72UlpiWmUA.crl (hash: ILpIqSB5e1UqlEHlQsyMIFfJEOGLjD7x7XiiOF9dsJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:08:d7:d8:f8:b9:0c:ae:ba:bd:d6:38:9f:04:54:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b64c81b8ec8735453e9403fbd949698969940
Validity
Not Before: Jul 29 04:01:28 2026 GMT
Not After : Jul 30 04:01:28 2026 GMT
Subject: CN=800ce24b1fdc1879ff19cfe64503006dd36068f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:05:3d:43:82:5d:84:c9:43:5f:42:4a:56:c8:
f8:f4:7e:b0:c5:5d:2c:ce:94:20:cb:92:5f:c0:e7:
bb:3b:de:90:1a:fe:15:4c:9a:5e:9b:a2:79:8e:ad:
9a:47:4a:fe:df:01:40:1d:7d:d3:3d:90:50:86:57:
7f:8a:fe:f3:74:62:cd:7f:bb:fb:83:bc:ec:45:13:
2a:ac:24:da:43:43:c8:19:81:8f:be:62:bc:46:bf:
8c:a1:2a:5c:3c:a2:87:be:2f:40:c0:ba:5d:ba:ac:
69:54:02:f8:10:c8:12:5e:fa:8e:a3:2a:52:69:7d:
3d:93:42:88:5e:0b:b3:df:ac:9d:6b:cc:18:9f:d5:
ce:65:3a:b6:3c:24:e9:6c:01:ee:ff:af:50:e9:5e:
8d:26:01:9e:28:eb:cb:cf:b1:8d:4f:07:f9:86:db:
cc:a7:89:8e:20:72:17:18:a8:2e:29:ee:1f:e3:a6:
64:24:f1:76:15:de:b2:6f:cc:bc:41:dc:6d:57:a0:
f3:92:fb:f7:61:78:2e:b9:9b:ee:5b:42:87:8e:37:
25:27:2a:23:06:8f:ef:ad:c0:8e:b2:0a:65:de:eb:
48:39:e4:28:61:60:ef:ea:88:1f:6f:bb:47:64:67:
3e:6e:ae:91:d7:c6:0b:6a:07:63:43:8c:8e:2a:0d:
b5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:0C:E2:4B:1F:DC:18:79:FF:19:CF:E6:45:03:00:6D:D3:60:68:F1
X509v3 Authority Key Identifier:
keyid:5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:bd:45:f9:24:27:10:61:fb:dd:fe:33:40:c9:3d:7d:e3:12:
f6:1a:95:e6:3a:db:76:38:e0:4e:e7:8c:57:37:55:95:d8:d2:
76:5a:29:d1:f1:c1:af:c9:07:3f:64:56:da:94:f9:ed:8e:c1:
1c:8b:22:74:89:ca:c0:f3:46:4c:29:64:e5:2b:6c:1f:85:75:
14:9c:0a:39:5b:61:f4:e5:12:79:51:74:39:27:9b:21:0e:f6:
12:51:2b:7b:15:3d:70:9b:80:25:7a:18:d8:6b:f6:db:f4:f4:
6b:ef:0d:9b:b4:f4:11:24:4e:9c:19:e2:fc:8c:a2:5a:18:25:
5e:da:5d:78:91:bc:85:45:d4:08:92:90:a1:5f:81:47:77:48:
1c:5b:2c:29:50:73:fd:a9:eb:f6:67:95:2f:db:56:ea:08:30:
16:f3:a6:eb:af:7f:47:22:3c:8e:97:bf:4e:be:91:8a:12:74:
bf:f7:02:96:27:ad:cc:cc:4e:87:83:bc:b6:c7:67:4f:3f:60:
d1:0b:d3:d2:98:58:cb:95:52:7e:56:6c:04:c4:b0:86:56:d0:
25:86:6a:f1:70:a8:85:6e:0b:18:d0:f7:38:db:f5:ba:67:27:
e8:be:5c:9b:49:6e:f3:23:da:bb:d9:25:c6:31:30:58:04:72:
9e:5d:47:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:02:43 2026 by rpki-client