Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
File: X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft (raw, json)
Hash identifier: gbYABFRGA1acU4+3hMozqbateLGsSxEK7T2dUMlUags=
Subject key identifier: 43:40:E9:B3:53:8F:F7:EB:73:72:FB:DB:C4:5D:E7:ED:13:E1:E6:2C
Authority key identifier: 5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
Certificate issuer: /CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Certificate serial: 019CABA25770459D68C509C95C767720B188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
Manifest number: 1006
Signing time: Sun 01 Mar 2026 23:01:09 +0000
Manifest this update: Sun 01 Mar 2026 23:01:09 +0000
Manifest next update: Mon 02 Mar 2026 23:01:09 +0000
Files and hashes: 1: FHIyxMNqXpJ39wGwkA-4nrLvTkc.roa (hash: ly+kVhxO/3fVLln2oSG/sFbuci0ZnP8XN3ql69hgFNU=)
2: X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl (hash: iz+UMo5nTeRGt0E9XIBxGYPdg+cNrumLrGqHjqFixv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:57:70:45:9d:68:c5:09:c9:5c:76:77:20:b1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fdd1e8c2394d18e876c2d57016e7ed89805a667
Validity
Not Before: Mar 1 23:01:09 2026 GMT
Not After : Mar 2 23:01:09 2026 GMT
Subject: CN=4340e9b3538ff7eb7372fbdbc45de7ed13e1e62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:d8:8f:ac:e2:21:7f:13:51:e3:bc:49:7c:ff:
b0:13:72:b4:cb:81:ea:48:84:77:4a:af:b0:74:be:
bc:25:4b:e4:0f:12:78:9c:3d:6c:0c:3c:f1:74:56:
1d:ea:3c:34:30:54:f0:c7:e8:39:3f:04:9d:33:1b:
c6:a6:7d:9c:6c:f0:44:46:e4:c7:50:0a:14:bb:99:
d2:94:2c:8f:3a:55:ed:6a:c0:14:ad:f6:3e:e0:d9:
58:da:4c:21:46:82:8d:38:95:0a:64:f3:1d:5f:7a:
e3:65:fc:34:c9:1c:97:de:0e:71:01:8a:d1:78:2c:
95:80:4c:97:be:45:3b:1d:1d:99:f9:a1:8f:f9:62:
c3:39:fb:1d:28:7b:a5:2b:b6:10:a4:00:4c:6f:6a:
f9:d2:56:fd:28:59:dd:61:fd:cd:be:2c:13:17:03:
a5:7a:27:1b:da:25:ed:27:c1:e1:50:0d:62:dc:8f:
91:7e:38:6f:de:9d:b0:23:76:c8:3f:52:78:85:82:
4d:34:fe:0b:05:78:1a:7d:27:d6:58:43:ef:19:3e:
ef:f1:80:a2:5a:ae:6f:77:f2:1f:ab:8b:bb:a2:b0:
c4:4f:7a:7c:49:64:51:54:37:60:80:88:51:d4:e4:
f3:47:d5:55:d9:a5:20:a8:bd:76:89:39:d3:cb:33:
7a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:40:E9:B3:53:8F:F7:EB:73:72:FB:DB:C4:5D:E7:ED:13:E1:E6:2C
X509v3 Authority Key Identifier:
keyid:5F:DD:1E:8C:23:94:D1:8E:87:6C:2D:57:01:6E:7E:D8:98:05:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X90ejCOU0Y6HbC1XAW5-2JgFpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/a6d42c-cfd7-4ed5-9f83-5ae93ec8fb11/1/X90ejCOU0Y6HbC1XAW5-2JgFpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:e6:16:5c:1d:ca:8d:18:a5:ba:54:cd:47:85:66:f3:1d:18:
37:cb:d7:5c:28:37:23:0f:72:b1:fa:ea:2c:1c:9d:22:c3:36:
d0:1e:d2:8b:29:58:71:13:43:18:6a:cf:c3:bb:e2:cf:77:31:
af:b1:5f:53:bd:5b:85:3d:10:b9:c7:10:ef:14:50:33:68:9b:
4c:3f:2c:e1:6a:a4:14:6c:6c:ca:a8:c5:9b:b8:69:d0:2e:6d:
9a:c3:30:c2:cb:56:30:c1:15:83:c5:e6:a8:db:a1:8f:fc:0c:
97:f3:9f:85:2e:41:8a:c2:b3:c7:6f:49:1f:3d:a5:68:e5:c0:
0a:bd:1b:3a:d9:f8:cf:a6:45:0b:b2:d6:14:c2:4b:37:f4:6a:
2a:38:02:d4:a6:eb:7b:16:c7:9a:d3:8e:01:c8:cd:da:fe:e8:
45:04:6e:7f:ec:f6:35:2b:8b:e5:b2:d9:2c:9a:30:cd:56:e2:
7e:c9:04:fc:94:9d:2d:a7:a7:5a:42:18:b6:24:fc:d3:86:a4:
d8:8b:dd:82:37:10:35:b0:a6:85:c9:a6:2b:86:ea:d9:6a:35:
da:58:a8:07:c4:64:12:de:97:ad:04:0a:fc:ab:c1:04:c5:f1:
b0:36:d2:14:d0:18:ea:cd:35:78:2f:15:af:c3:95:18:88:02:
a4:d9:3b:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:30:16 2026 by rpki-client