Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
File: X8SomHZcMDixWg01lyQ5Qdo8CWw.mft (raw, json)
Hash identifier: N2LAX6W6D88ZKkgcLjQCbl4RHpzw7q0jUKr25+UDpkA=
Subject key identifier: 8A:10:7C:C4:B4:86:F2:2D:6F:6A:73:F7:EA:69:24:CC:09:82:C5:28
Authority key identifier: 5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
Certificate issuer: /CN=5fc4a898765c3038b15a0d3597243941da3c096c
Certificate serial: 01A130A16FCC2BBC97A2A714842E1EEC283D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
Manifest number: 0234
Signing time: Mon 12 Oct 2026 15:00:48 +0000
Manifest this update: Mon 12 Oct 2026 15:00:48 +0000
Manifest next update: Tue 13 Oct 2026 15:00:48 +0000
Files and hashes: 1: X8SomHZcMDixWg01lyQ5Qdo8CWw.crl (hash: PbO8Jmky2EugiEuO/B1nJoqpjPz0zG2sysDbaq/pLPg=)
2: Y3QKQzEPDmZm8PJypZh9nJ9wgpY.roa (hash: uGJeMzvWRvF44ZA525KqGwzFGcmEAKAT9aDouXzGutU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:30:a1:6f:cc:2b:bc:97:a2:a7:14:84:2e:1e:ec:28:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc4a898765c3038b15a0d3597243941da3c096c
Validity
Not Before: Oct 12 15:00:48 2026 GMT
Not After : Oct 13 15:00:48 2026 GMT
Subject: CN=8a107cc4b486f22d6f6a73f7ea6924cc0982c528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:20:22:56:bc:42:44:43:9f:94:4f:5b:4d:1f:
16:33:da:81:27:86:9c:04:7d:48:b0:1c:ce:5d:1f:
ee:0d:a3:97:d2:87:c4:c7:b5:13:e8:0e:13:15:a8:
a5:e3:97:31:7c:08:c5:8a:81:5f:d4:5a:e0:0d:a3:
02:b3:60:f8:d9:36:a5:76:1c:60:90:43:dd:2b:a1:
f1:89:c8:89:ce:8d:57:b0:2e:b9:08:09:11:49:78:
aa:62:7c:3d:ec:1c:93:24:94:e6:f1:43:90:2c:1f:
d4:c0:67:8c:af:2b:3a:19:5e:3a:f7:78:8f:53:b3:
db:2b:0d:c9:21:c6:4f:7e:ca:b8:55:5a:03:dc:4a:
19:3f:a7:11:5d:bb:20:3d:6e:bc:76:7a:56:6b:48:
3e:88:43:41:f5:30:66:ac:c7:c8:ca:0c:18:41:48:
51:33:0f:c6:12:4b:8a:53:4b:e6:e8:4e:1a:8f:1e:
8d:7a:af:81:e4:bf:d6:1b:88:17:2b:fb:6b:40:ff:
7d:ae:ff:01:2e:4e:79:29:47:84:46:10:ef:75:ea:
84:9c:ea:c8:77:d2:9b:e8:f0:b0:e4:af:4c:96:0f:
65:dc:94:7b:cd:9f:ca:45:61:16:8b:56:2e:ba:b1:
12:7f:77:0b:3b:ec:89:b7:b4:50:f2:7a:cb:4f:85:
24:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:10:7C:C4:B4:86:F2:2D:6F:6A:73:F7:EA:69:24:CC:09:82:C5:28
X509v3 Authority Key Identifier:
keyid:5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:22:8d:8a:73:12:3c:e7:c5:44:46:0f:cf:6e:16:e8:71:61:
7b:bc:00:2e:29:77:9a:2a:28:ed:09:45:64:3b:1d:ec:e1:f0:
d7:33:2e:84:8d:21:08:0d:f2:26:45:91:51:68:fe:c8:2a:40:
6a:f0:77:3c:4a:2f:86:ae:eb:5a:95:30:95:b6:ef:70:42:18:
2c:1e:0a:23:c7:a1:9b:49:3e:cc:52:b4:15:9f:2d:aa:23:bf:
56:bd:be:71:d7:dd:87:19:a6:ed:dc:9a:7a:d6:f6:f1:30:b7:
a5:97:23:49:71:9a:83:d3:5d:8f:84:a1:1f:a8:0b:a1:ab:ce:
50:2f:78:3b:22:98:f1:c6:7a:cc:5f:79:72:2c:f5:be:01:27:
a9:3c:a7:d3:05:4a:ad:f1:92:c0:17:d9:7a:08:ef:dd:5f:96:
59:7f:ee:c2:2f:95:78:86:6f:91:46:08:85:92:ac:7f:f2:55:
41:ba:8e:e9:a5:57:4e:13:20:38:3a:0d:c6:bc:23:30:62:d8:
62:de:98:ae:c3:a4:1d:7d:e1:c1:ab:b5:d9:17:a5:2b:f5:30:
ac:50:64:08:1e:ae:a9:03:e1:01:d9:c7:79:ec:79:d6:4b:f5:
de:e5:c0:a6:ee:e2:bf:cb:72:4c:b2:ca:60:ea:b8:93:71:c9:
db:6d:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:49:48 2026 by rpki-client