Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
File: X2tkyBuOyHNUU-lAP72UlpiWmUA.mft (raw, json)
Hash identifier: QNcCuK65kVuBrRcKPszuHWmRI8zvM4UJLi2+p6TBD9k=
Subject key identifier: AA:40:BD:90:9E:2C:F8:6D:CE:4F:0D:6C:CF:16:36:3B:27:B9:8B:D0
Authority key identifier: 5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40
Certificate issuer: /CN=5f6b64c81b8ec8735453e9403fbd949698969940
Certificate serial: 01A0DF1785D615A3FD20631C8382D8DF02A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
Manifest number: 010E
Signing time: Sat 26 Sep 2026 19:00:55 +0000
Manifest this update: Sat 26 Sep 2026 19:00:55 +0000
Manifest next update: Sun 27 Sep 2026 19:00:55 +0000
Files and hashes: 1: MwwTtfqSDI8q5-iLJ6gRVj5w5_A.roa (hash: 1nyg//DPGxUyvWbSkzZcVUWN8V8QWNENdy2yUz4eoxQ=)
2: X2tkyBuOyHNUU-lAP72UlpiWmUA.crl (hash: +f3qfMhbxOi/0t5a41rRiItm8AwLpZ2zBQNz9WCYQG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:17:85:d6:15:a3:fd:20:63:1c:83:82:d8:df:02:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b64c81b8ec8735453e9403fbd949698969940
Validity
Not Before: Sep 26 19:00:55 2026 GMT
Not After : Sep 27 19:00:55 2026 GMT
Subject: CN=aa40bd909e2cf86dce4f0d6ccf16363b27b98bd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a7:61:21:b3:bc:84:d9:2e:f4:0e:3e:b2:4f:
54:91:d6:9f:7a:74:d5:ea:8f:cf:40:38:fe:da:f5:
99:15:ac:27:04:5f:89:a1:33:66:c3:6c:11:8c:c0:
ea:86:bf:5b:12:51:d6:0b:b9:22:2e:f8:6b:ab:b1:
13:0b:f0:05:f0:7a:57:e4:8c:d3:a0:fb:16:33:6b:
63:b6:a3:42:a1:36:7f:43:b3:72:f4:b7:16:d6:9c:
a9:3e:d1:b1:11:4a:4a:b7:7a:0e:91:ea:06:a7:77:
ab:a3:09:d1:28:79:d8:a1:33:1d:df:2b:9c:01:11:
38:a5:20:7a:68:45:f9:38:5f:5d:b2:e6:00:3a:bc:
07:11:24:e9:64:4c:f5:be:8e:cd:ed:cf:6c:3f:a0:
be:4a:86:17:ba:0d:5f:4c:83:c5:29:e4:8b:22:a7:
c6:c6:40:28:e2:61:dc:90:80:96:c9:0d:a3:79:98:
f0:d1:9a:aa:1e:7c:5d:4c:46:dd:87:a1:78:47:2a:
09:00:5d:bb:3a:46:bd:df:15:9f:33:25:f3:70:83:
fa:8a:75:7f:1b:5a:4d:13:04:20:75:49:68:6b:ef:
9f:70:9b:f3:90:2d:75:5a:ad:23:2b:f2:4b:02:0e:
20:46:84:38:dd:2b:ca:c9:f7:b5:ce:9d:6a:3a:a0:
a5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:40:BD:90:9E:2C:F8:6D:CE:4F:0D:6C:CF:16:36:3B:27:B9:8B:D0
X509v3 Authority Key Identifier:
keyid:5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:29:05:ef:b0:61:31:ac:11:9d:90:79:25:d8:e2:5f:df:b7:
04:c8:f3:87:a0:ec:62:de:58:02:0c:84:f8:89:01:9d:02:fe:
5f:a4:0d:fb:49:88:c8:69:18:f0:58:e8:b6:12:7d:11:0c:b1:
7d:f0:ef:dc:c9:fd:3e:65:01:1c:05:8e:5b:47:c0:b2:7a:91:
14:d4:43:ac:b5:73:43:4e:be:33:1a:59:1c:84:be:4e:51:62:
58:2b:6b:7d:2c:b1:90:cc:45:b2:92:0e:f9:34:78:8b:6a:dd:
52:b9:a3:47:bb:59:95:57:67:58:34:44:14:b0:bb:a8:8b:d2:
e7:f6:6d:e4:88:97:a9:d7:06:23:36:43:cb:e9:f9:d0:e5:60:
23:61:67:4b:5b:d6:95:84:ba:aa:84:31:b0:01:b8:4a:10:f5:
b2:05:63:22:29:e4:3f:eb:c1:1b:e0:72:01:72:f1:1b:ba:13:
fc:98:d2:15:d5:f8:7d:cf:89:9f:1e:dc:f6:0e:1e:d5:2a:c6:
47:71:da:d9:68:25:b3:ec:89:d5:bf:a2:06:ac:ee:db:45:e7:
da:cf:11:58:4f:37:46:e8:30:54:f0:53:6f:ae:b1:f3:86:b4:
ea:5c:27:81:6f:63:4d:38:eb:5e:49:e8:94:b0:27:ef:f0:ba:
50:72:77:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:39:06 2026 by rpki-client