Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
File: X8SomHZcMDixWg01lyQ5Qdo8CWw.mft (raw, json)
Hash identifier: hs1iokZNH+51/beuhPFG1BGToetivtqdkr9MCvkpP10=
Subject key identifier: C5:65:FB:FD:BF:4D:8C:3A:F7:F6:08:1C:12:0B:D0:29:84:7A:A1:DF
Authority key identifier: 5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
Certificate issuer: /CN=5fc4a898765c3038b15a0d3597243941da3c096c
Certificate serial: 01A1328FCDAA35D8FAE5AE30DACB546C52B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
Manifest number: 0235
Signing time: Tue 13 Oct 2026 00:00:47 +0000
Manifest this update: Tue 13 Oct 2026 00:00:47 +0000
Manifest next update: Wed 14 Oct 2026 00:00:47 +0000
Files and hashes: 1: X8SomHZcMDixWg01lyQ5Qdo8CWw.crl (hash: j4dRwHL6EW3GACLctBaiKHCSsw+qor0eFoqNgT5EzE4=)
2: Y3QKQzEPDmZm8PJypZh9nJ9wgpY.roa (hash: uGJeMzvWRvF44ZA525KqGwzFGcmEAKAT9aDouXzGutU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:8f:cd:aa:35:d8:fa:e5:ae:30:da:cb:54:6c:52:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc4a898765c3038b15a0d3597243941da3c096c
Validity
Not Before: Oct 13 00:00:47 2026 GMT
Not After : Oct 14 00:00:47 2026 GMT
Subject: CN=c565fbfdbf4d8c3af7f6081c120bd029847aa1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f3:e7:e2:80:78:58:a0:fb:b2:92:10:a4:15:
f1:50:c8:f4:19:c7:0e:03:f8:e6:1c:3c:bd:6d:6a:
41:58:c2:c0:7c:0b:6c:19:ed:d1:c9:e9:17:9e:52:
b2:fa:76:87:40:dc:6b:a0:d6:79:63:73:fd:1d:b2:
21:f4:43:46:92:04:2d:a9:35:4f:76:68:c9:19:b6:
79:27:d1:07:97:c4:97:d7:0b:d0:3e:94:a3:7a:7f:
dd:98:6d:2c:91:29:9e:a5:2c:36:01:cc:82:7f:f6:
c3:ab:81:d8:58:d4:42:b4:88:fc:c5:bf:82:7f:98:
cf:87:df:2c:57:b3:2b:43:8a:06:a6:c3:02:43:ac:
62:64:58:0a:2c:f8:15:d8:36:f0:0b:4d:51:d1:3c:
06:11:e4:78:7c:45:1a:91:28:73:12:eb:30:c7:54:
e4:61:73:33:a8:8c:67:d7:c2:75:b1:24:02:dd:de:
46:62:77:57:19:2d:dd:ae:2c:19:fe:dd:59:ff:1b:
5f:f6:02:bd:7d:0f:f8:08:15:02:d4:16:5d:c2:28:
a7:1e:7c:82:08:be:95:1f:b6:85:68:a6:0c:43:e4:
16:98:eb:9a:d3:40:c4:76:3c:86:2b:4f:46:3e:18:
2b:a0:d8:92:61:29:4b:6d:9c:9f:66:9f:eb:10:bc:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:65:FB:FD:BF:4D:8C:3A:F7:F6:08:1C:12:0B:D0:29:84:7A:A1:DF
X509v3 Authority Key Identifier:
keyid:5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:67:88:f9:00:6c:d7:b2:09:93:b3:73:74:4a:0b:9b:8d:64:
c0:83:dc:0d:28:2c:53:d6:77:20:9f:05:a3:93:76:fa:50:7d:
95:bc:70:4b:47:92:52:23:98:7f:7b:cf:8d:9e:9d:ff:ee:71:
10:0b:e6:c3:03:3c:54:f0:cd:d6:09:85:73:dd:ed:23:ed:b5:
86:ad:94:51:9b:3d:17:fc:23:de:e7:1f:f9:53:ec:8a:41:09:
73:e5:ac:a8:17:23:bf:70:30:4b:d9:ce:48:c8:44:7c:85:94:
bb:61:ce:14:0a:f2:8e:5e:c7:7b:54:c9:75:d2:0a:74:7f:aa:
20:05:9e:58:8d:35:60:85:dc:c9:23:31:84:18:37:60:98:12:
e8:30:99:c3:44:9d:4a:a5:61:8c:1b:e6:50:da:f3:b6:bb:35:
57:f3:29:95:33:f4:d3:db:a0:a1:be:72:1c:aa:7c:85:47:e6:
99:22:c5:c3:68:7b:11:c6:0d:94:3f:56:08:25:b2:69:88:ce:
d8:b6:65:8c:ba:ca:0d:ca:02:df:08:af:33:7a:50:9b:7e:71:
a4:88:a9:8c:af:f1:90:8f:05:b9:17:ad:11:d7:2a:4b:13:18:
e7:c7:a0:41:34:a2:dd:3d:1f:db:4a:90:91:84:6e:e6:8b:49:
f7:0a:21:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 10:48:08 2026 by rpki-client