Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
File: X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft (raw, json)
Hash identifier: XgEXP41DmDirzrO+YpfUq3g7iFvBP74Pkiu239Jp8Tk=
Subject key identifier: E2:BB:89:05:D8:7C:B9:01:A8:57:DB:E0:22:60:D5:08:62:AB:B1:1D
Authority key identifier: 5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
Certificate issuer: /CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Certificate serial: 019D9E8911F78DDFE2F75B9C5464FD0FDC9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
Manifest number: 0230
Signing time: Sat 18 Apr 2026 03:01:16 +0000
Manifest this update: Sat 18 Apr 2026 03:01:16 +0000
Manifest next update: Sun 19 Apr 2026 03:01:16 +0000
Files and hashes: 1: 2aR01OFymFEwZxvW0ul_qajB_MU.roa (hash: uOcW0MztVBXCRsokN174A3EZiiQc7C1Cn12xFKZuxJI=)
2: X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl (hash: qDvLIm6tcba/gGA+DLlpT9BnqnCu0FC6FCGgDD8ccWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:89:11:f7:8d:df:e2:f7:5b:9c:54:64:fd:0f:dc:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Validity
Not Before: Apr 18 03:01:16 2026 GMT
Not After : Apr 19 03:01:16 2026 GMT
Subject: CN=e2bb8905d87cb901a857dbe02260d50862abb11d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:1e:48:eb:ed:07:1d:5f:81:f0:60:40:7d:21:
2c:e6:80:5c:f4:0d:8f:41:cb:08:0a:30:83:d3:ed:
ed:dd:8e:53:87:06:dd:98:a2:09:3a:c6:f9:97:36:
23:03:af:2b:99:40:f2:6c:ac:51:fc:45:60:05:a9:
fb:c4:50:ff:4c:a4:a1:1e:b0:76:2c:51:93:db:8c:
29:02:41:8e:aa:89:e7:13:00:69:95:bf:b0:01:8a:
be:5c:bb:75:89:47:69:8a:c3:46:83:db:fb:3f:7d:
ba:31:e1:46:47:69:51:74:92:5b:b5:da:69:ed:98:
94:9e:d6:a5:39:55:ac:7b:6e:fb:7a:3e:1d:75:f5:
83:0c:47:3b:26:97:3b:0f:28:4a:9f:d5:51:74:47:
2f:f4:c2:dd:11:8f:b6:c6:8b:29:39:97:39:ae:b3:
f9:7d:a7:06:25:e2:f9:b2:36:60:0a:1a:e8:60:b4:
d1:68:56:91:82:6c:42:98:35:fe:be:2c:1d:67:51:
d0:91:61:4e:89:54:5d:c6:52:8e:9d:d9:ee:fa:f6:
c6:34:12:dd:73:69:aa:c5:34:30:6b:41:96:9b:29:
97:ce:48:50:d3:ee:dc:fa:e8:8b:b2:79:3d:7a:ba:
2d:7f:e3:41:96:cd:a9:bf:37:2d:76:dd:e1:d8:e0:
d1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:BB:89:05:D8:7C:B9:01:A8:57:DB:E0:22:60:D5:08:62:AB:B1:1D
X509v3 Authority Key Identifier:
keyid:5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3f:c6:79:94:14:b6:c8:6a:3a:1b:c1:98:2d:8b:d5:ae:3b:
a3:54:a0:f8:bf:80:c5:38:d0:f7:66:be:6d:a5:fb:ea:61:f6:
da:a1:17:1b:57:11:26:04:f2:43:f8:98:f6:5d:5a:7c:ce:3a:
d7:4b:0b:55:22:3c:7e:fc:87:10:4a:f3:0e:39:91:5e:95:3d:
33:2e:da:9f:4b:73:da:bb:bf:82:ed:88:78:5e:3a:4e:55:a5:
9e:74:fb:b7:0b:8b:3b:a8:01:15:83:04:73:bb:63:2c:2c:18:
4d:2a:33:d7:38:72:a4:28:1a:31:96:e3:dc:9e:1c:2a:1e:8f:
38:63:30:20:b7:a5:ca:98:0e:a6:59:fb:2d:a4:56:cb:8b:09:
eb:75:96:ee:27:26:85:4f:12:d3:49:c5:31:ea:73:b0:b7:e1:
1a:63:f8:57:0a:f6:88:4f:d8:4b:5e:7f:1b:9b:40:b3:58:94:
66:70:d6:a7:76:7e:a2:04:d9:b7:e0:b6:b2:d3:bd:22:8b:10:
b5:6f:c0:a1:e5:4e:f5:71:0c:cf:e1:16:c9:c9:6b:07:19:4b:
17:dc:63:39:4b:d4:6b:24:1f:3e:5d:0b:7c:31:ea:cf:c0:ad:
82:10:78:f4:35:ac:76:c3:70:4b:f2:54:22:92:77:f2:b9:8a:
1d:65:d1:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:08:23 2026 by rpki-client