Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
File: X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft (raw, json)
Hash identifier: /3YBqRe1odTAC5VuaqAKPluDLhU49l9Jyr+CK0wuVzA=
Subject key identifier: E4:E6:CA:6C:7C:3D:C7:11:3E:25:88:74:12:CE:10:AF:B3:C4:41:24
Authority key identifier: 5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
Certificate issuer: /CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Certificate serial: 019CAF10AB10BAADBD7798D92A686DCFA609
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
Manifest number: 01B4
Signing time: Mon 02 Mar 2026 15:00:31 +0000
Manifest this update: Mon 02 Mar 2026 15:00:31 +0000
Manifest next update: Tue 03 Mar 2026 15:00:31 +0000
Files and hashes: 1: 2aR01OFymFEwZxvW0ul_qajB_MU.roa (hash: uOcW0MztVBXCRsokN174A3EZiiQc7C1Cn12xFKZuxJI=)
2: X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl (hash: pjmXOpz4OW+3rUg6iO0hRpVrgEfgxPOokOBMpDFR03U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:10:ab:10:ba:ad:bd:77:98:d9:2a:68:6d:cf:a6:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Validity
Not Before: Mar 2 15:00:31 2026 GMT
Not After : Mar 3 15:00:31 2026 GMT
Subject: CN=e4e6ca6c7c3dc7113e25887412ce10afb3c44124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ac:2f:56:dd:7f:3c:bc:97:4c:b5:1c:b3:6e:
1b:42:d5:e2:ab:92:94:e0:ae:54:b3:fb:26:14:17:
c2:cc:7d:26:82:e7:12:30:1c:ba:cf:1e:60:ed:d7:
10:87:1b:8e:fc:d1:44:db:63:43:4d:18:d5:ef:5a:
e5:66:3b:a6:8a:37:f2:42:12:1f:26:67:c3:28:b3:
41:4f:6d:a9:48:92:d6:43:15:b6:a8:01:79:5d:7d:
99:c4:2b:71:b8:04:ec:ad:64:3d:3e:7d:66:d8:f5:
dc:5e:da:c8:c4:c8:14:09:8a:c1:3d:a3:e7:5d:26:
74:d2:44:2b:57:33:87:12:4f:29:3b:c8:67:68:f0:
f5:43:9e:38:97:5f:dd:3f:0f:0e:51:b6:13:06:9e:
8f:56:e5:b3:19:04:79:94:a6:ca:fb:0d:b7:f6:c8:
70:7f:00:07:40:e2:67:f0:ec:69:d6:c5:d6:2b:fe:
b2:93:b0:ff:f6:2a:cf:4f:30:ad:bc:55:ad:5e:59:
45:d3:6c:ff:bf:d9:ef:29:27:92:bd:df:d1:43:c7:
b7:1b:33:e2:98:b4:b5:a9:a1:1a:fe:1d:45:76:f8:
97:e6:8f:cc:0c:d2:7c:f4:54:41:93:34:44:6e:97:
a7:0d:4c:e0:ac:25:d2:f9:8d:6f:b1:3a:ff:45:aa:
45:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:E6:CA:6C:7C:3D:C7:11:3E:25:88:74:12:CE:10:AF:B3:C4:41:24
X509v3 Authority Key Identifier:
keyid:5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:47:3b:f3:df:68:6b:66:9b:a6:7f:1d:24:3d:ac:4c:91:a2:
63:84:07:8d:ab:45:fe:71:23:dd:03:6b:63:34:45:ab:9c:98:
a6:ce:f0:3a:0e:3c:cd:1c:f9:36:9a:72:84:36:ca:f5:15:74:
d5:60:78:67:27:cb:b3:af:62:3a:b2:4e:9b:41:94:21:1d:2a:
ef:01:6b:5d:b4:e1:0d:82:df:0e:41:b2:95:4a:80:bf:a4:57:
91:3f:90:30:64:7e:80:e0:7f:8e:46:ac:f4:2e:d7:49:f7:73:
26:d1:89:95:74:fa:29:df:ce:a7:eb:f0:0f:91:42:c8:97:73:
b3:b4:b9:7c:dd:5e:28:22:3a:6a:74:8d:b6:34:a7:34:91:21:
d2:a5:62:5a:2f:37:a4:fc:8e:af:16:e3:d9:58:b7:9a:da:0f:
81:cb:a5:5a:87:5d:1a:93:81:da:46:c6:c1:13:a5:73:7f:cd:
71:33:01:e3:41:5f:13:f2:b1:f2:d0:39:73:1a:cf:0c:38:92:
19:d8:63:87:d5:5b:29:f0:63:ab:5b:7a:e1:26:37:77:54:81:
29:25:f7:98:79:a4:32:fe:16:02:9a:73:38:18:97:77:c4:6e:
87:6c:24:bf:d5:9b:34:32:48:9b:ec:ef:6b:28:98:f5:11:1b:
72:f5:d6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:42:02 2026 by rpki-client