Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.mft
File: X3vX5dUz3lJtSY3NimMEZzkgjSE.mft (raw, json)
Hash identifier: bNwMsgrQXHWhTpVCLnugoY/Yp23qLJy3WhXJ1buvQ64=
Subject key identifier: 81:89:69:38:8E:A2:4C:DC:A1:F1:9F:68:7A:AE:28:9B:84:13:41:FD
Authority key identifier: 5F:7B:D7:E5:D5:33:DE:52:6D:49:8D:CD:8A:63:04:67:39:20:8D:21
Certificate issuer: /CN=5f7bd7e5d533de526d498dcd8a63046739208d21
Certificate serial: 01A0C3D6EE38D12C92D5E0431931FC627092
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3vX5dUz3lJtSY3NimMEZzkgjSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.mft
Manifest number: 59
Signing time: Mon 21 Sep 2026 12:00:37 +0000
Manifest this update: Mon 21 Sep 2026 12:00:37 +0000
Manifest next update: Tue 22 Sep 2026 12:00:37 +0000
Files and hashes: 1: HUhw9cLx8_fWSY-eLVPdIS95ScI.asa (hash: tay+QqVKxzFNXYmywf6FycLZJgzN0dQqtFAyPOYkOPM=)
2: X3vX5dUz3lJtSY3NimMEZzkgjSE.crl (hash: yiJvU6/EPpmJbUgdUSkaxJAtoXT2ic/cic3hLHgHUYY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3vX5dUz3lJtSY3NimMEZzkgjSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:d6:ee:38:d1:2c:92:d5:e0:43:19:31:fc:62:70:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7bd7e5d533de526d498dcd8a63046739208d21
Validity
Not Before: Sep 21 12:00:37 2026 GMT
Not After : Sep 22 12:00:37 2026 GMT
Subject: CN=818969388ea24cdca1f19f687aae289b841341fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:92:1a:d7:ef:4a:d1:c8:0c:4a:4f:04:fc:0e:
1a:47:58:a0:ba:ab:d1:fe:99:e7:9f:0c:f6:1e:2b:
6d:1f:bf:f9:49:18:e7:32:c9:2c:68:c5:f1:55:de:
01:7b:55:a4:5e:7a:3f:a4:36:14:9c:3d:60:94:f9:
cc:81:66:59:a7:05:46:7e:4b:37:da:a3:f1:40:25:
28:0a:6c:d4:2e:7a:a2:95:03:81:2c:ea:03:0b:12:
e4:e9:c5:51:46:2f:47:5c:18:c1:8e:09:5a:43:01:
d7:f5:58:d9:b7:e2:44:3a:c2:c9:04:85:50:60:ab:
f8:a8:50:a1:44:1e:95:ef:f4:34:32:b9:6d:b2:23:
b0:16:e0:30:84:fc:75:3b:7d:c3:aa:a6:e4:db:cb:
76:e1:e4:73:c7:b5:53:12:3c:d6:84:4b:f7:e4:f9:
9f:d6:69:05:62:23:04:6e:4b:c9:34:ed:48:76:84:
48:34:54:71:69:a7:97:3c:a4:be:03:38:6e:bc:b4:
ce:22:59:7d:f2:4d:f2:b8:3e:43:ce:9a:eb:b6:7b:
73:ba:4a:27:49:cf:4b:9f:df:81:45:1a:fc:cb:02:
0e:5c:36:c1:79:07:eb:34:0d:e4:07:a4:a9:b2:1c:
73:95:16:2f:bb:80:2d:66:1a:bb:4f:00:06:37:ae:
03:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:89:69:38:8E:A2:4C:DC:A1:F1:9F:68:7A:AE:28:9B:84:13:41:FD
X509v3 Authority Key Identifier:
keyid:5F:7B:D7:E5:D5:33:DE:52:6D:49:8D:CD:8A:63:04:67:39:20:8D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3vX5dUz3lJtSY3NimMEZzkgjSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:21:2c:91:05:c9:57:ca:48:7e:4c:7a:51:16:5a:be:df:9b:
94:3a:7e:37:b5:2b:4f:70:3e:e6:de:c1:10:d3:60:e6:57:ab:
79:cd:46:fa:19:ba:ab:cf:3f:de:0b:ab:3d:47:43:0b:16:9b:
51:66:29:f8:b6:5f:17:21:12:47:ef:53:3d:73:bd:22:5a:26:
a8:48:ea:bf:be:ba:7d:4f:66:20:b3:69:56:c0:b9:74:5c:58:
ba:dc:c9:a3:e6:fa:56:d2:b9:c5:1f:7f:ae:81:ab:00:01:11:
14:9a:52:81:c2:62:ed:37:5a:65:e0:d9:cf:9d:db:e7:3d:42:
97:24:7f:73:22:59:98:2f:46:15:46:ec:e9:c4:4b:39:a3:c2:
35:17:10:45:8e:48:ba:44:22:1e:c5:ba:07:2e:6d:ec:c6:9b:
e7:7f:b0:b2:13:0c:c2:44:4c:47:4a:ea:30:4c:3b:98:0c:3e:
a1:98:fd:66:25:c9:51:23:7b:04:b3:0c:23:21:99:71:07:be:
ee:da:e5:af:68:e7:0b:61:e5:23:00:74:39:65:ae:9b:e7:b8:
26:96:7e:7a:b2:67:50:77:25:f4:ed:86:25:40:ec:ae:ec:69:
39:94:12:db:17:ee:80:26:ca:1d:40:5f:2c:ba:7c:3e:5f:52:
a3:5a:40:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 20:29:05 2026 by rpki-client