Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
File: X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft (raw, json)
Hash identifier: 0SmxJXJNBLxHUOcyPNDowmJ26ubwL/31NAmSiurvC34=
Subject key identifier: 0A:FF:8E:31:44:3A:EC:B4:F6:D7:ED:A2:FF:FF:35:59:C5:27:38:EF
Authority key identifier: 5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
Certificate issuer: /CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Certificate serial: 019EC224F7E7514E389751AC40FECC6BB6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
Manifest number: 02C7
Signing time: Sat 13 Jun 2026 18:01:03 +0000
Manifest this update: Sat 13 Jun 2026 18:01:03 +0000
Manifest next update: Sun 14 Jun 2026 18:01:03 +0000
Files and hashes: 1: 2aR01OFymFEwZxvW0ul_qajB_MU.roa (hash: uOcW0MztVBXCRsokN174A3EZiiQc7C1Cn12xFKZuxJI=)
2: X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl (hash: EmekEDqxIZLcFN3JWEWSVjCBZweXhDoffFqqWvSFAnA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:f7:e7:51:4e:38:97:51:ac:40:fe:cc:6b:b6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Validity
Not Before: Jun 13 18:01:03 2026 GMT
Not After : Jun 14 18:01:03 2026 GMT
Subject: CN=0aff8e31443aecb4f6d7eda2ffff3559c52738ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:eb:2d:25:f7:1e:86:31:45:cc:e3:03:63:70:
a4:05:eb:bb:b6:3f:79:bf:1e:6b:80:79:11:6f:a1:
99:2d:bf:33:27:27:39:97:7b:6d:39:c8:49:03:b1:
51:d6:55:6c:b9:10:77:f7:a5:4d:1d:f4:5a:e4:ec:
5b:a0:c6:7e:03:2e:b1:8e:2f:d4:96:86:96:ab:c9:
cb:f7:3e:ef:a7:07:14:f8:0e:ca:12:aa:3c:20:9b:
c8:d8:ca:8c:eb:c6:08:85:81:93:dc:56:d4:ca:3b:
40:2d:0e:6f:37:46:e2:eb:e8:0c:24:be:7f:c7:9c:
a5:63:07:f3:b8:03:68:9b:79:0d:ff:c2:ff:1f:07:
3d:b8:c3:07:1c:c9:0d:5a:ef:ec:28:10:b1:82:cf:
f5:7a:7e:86:cb:fd:b1:b8:2a:9c:fb:ee:02:72:92:
9c:5f:9a:4f:52:7d:aa:ef:4d:e9:00:ac:da:d1:43:
48:42:f0:85:1b:cc:d6:24:33:e2:ff:ba:fa:a9:86:
51:c1:f6:5b:90:b5:be:7d:b0:4b:7b:a3:47:1b:6e:
41:16:f3:53:c8:9c:ec:66:0c:db:d3:68:e4:e7:57:
f8:f3:9b:cf:84:84:32:d0:97:fa:f1:04:f3:de:25:
36:21:2e:b0:d8:c4:e1:28:b6:07:05:34:29:89:18:
de:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FF:8E:31:44:3A:EC:B4:F6:D7:ED:A2:FF:FF:35:59:C5:27:38:EF
X509v3 Authority Key Identifier:
keyid:5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:dc:d2:b6:8c:17:89:38:3b:44:1a:17:25:f0:b8:bd:e8:17:
b1:5b:7c:8e:2e:70:34:fe:53:53:0d:c6:fe:ae:82:56:98:83:
ad:a1:6a:91:bb:c6:ab:65:99:20:9c:cb:1d:a7:c1:28:e5:31:
6a:36:f9:4a:3e:61:cb:89:2f:ef:04:82:ec:ff:45:bf:b6:ee:
7f:87:07:fb:7c:85:65:f1:51:c0:da:a7:eb:74:0f:28:07:7a:
89:e5:c7:5b:2e:06:61:56:ea:1a:4d:f3:c9:e7:aa:75:58:05:
d2:e0:c0:e9:7f:3d:e2:bf:2c:f7:78:87:0b:fc:97:82:bd:ad:
f4:14:80:4f:b8:ec:54:bd:14:29:38:40:96:9a:e5:0a:fc:eb:
d4:fe:34:7d:77:a9:4d:b5:8f:2f:58:4a:49:38:0a:86:94:2a:
88:83:92:10:85:9b:6c:f7:3f:da:5f:8e:fb:cf:c6:cb:3f:66:
68:2d:a9:f0:65:e5:06:4f:16:7c:78:e9:4a:fa:cc:2b:24:a6:
24:b3:50:ff:cc:27:4a:1c:af:f7:e8:0c:1f:74:fe:da:5b:51:
c3:bc:e7:4b:9e:77:b3:6d:11:f4:17:84:52:5b:17:5e:0b:b6:
ff:34:1f:b9:e2:30:83:1b:30:fa:c5:20:30:fe:08:3d:08:ca:
7f:a9:6c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:06:15 2026 by rpki-client