Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
File: X8SomHZcMDixWg01lyQ5Qdo8CWw.mft (raw, json)
Hash identifier: bg7RjDALjrFHE7BoRCTBGY+Onu16qFj5zMGcHWPlAEE=
Subject key identifier: 0D:95:6E:5B:A2:A2:DE:0B:DC:5B:A5:87:9C:1E:19:AE:99:CE:41:35
Authority key identifier: 5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
Certificate issuer: /CN=5fc4a898765c3038b15a0d3597243941da3c096c
Certificate serial: 019D9D3ED689DC62666B54C8C9056BE57522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
Manifest number: 5A
Signing time: Fri 17 Apr 2026 21:00:34 +0000
Manifest this update: Fri 17 Apr 2026 21:00:34 +0000
Manifest next update: Sat 18 Apr 2026 21:00:34 +0000
Files and hashes: 1: X8SomHZcMDixWg01lyQ5Qdo8CWw.crl (hash: 1LQQmYQeCjOA4LZiZXbBepxN+pzqHw5UWT/2mkr7Eek=)
2: Y3QKQzEPDmZm8PJypZh9nJ9wgpY.roa (hash: uGJeMzvWRvF44ZA525KqGwzFGcmEAKAT9aDouXzGutU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:d6:89:dc:62:66:6b:54:c8:c9:05:6b:e5:75:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc4a898765c3038b15a0d3597243941da3c096c
Validity
Not Before: Apr 17 21:00:34 2026 GMT
Not After : Apr 18 21:00:34 2026 GMT
Subject: CN=0d956e5ba2a2de0bdc5ba5879c1e19ae99ce4135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ba:8a:7f:ca:3f:db:ed:da:d3:6f:9a:d9:53:
20:e0:41:d5:b9:8e:76:d6:45:26:50:2d:88:5c:94:
65:0c:72:73:fa:40:eb:67:8c:41:83:09:64:89:fb:
fb:3d:ac:76:f7:03:73:37:d5:43:d7:bc:90:9f:1f:
fd:15:4e:59:7e:54:2c:b5:2c:f2:c5:ed:69:f3:bc:
e1:06:c5:01:2c:e3:32:f5:fe:d4:76:b8:d9:e6:ae:
c9:e6:68:3f:4d:da:46:38:b7:a3:24:fa:49:a8:34:
fd:2f:8e:8e:37:f3:de:c8:50:d8:33:a6:a8:60:67:
d5:ae:61:ac:d4:73:b1:25:19:d0:a8:00:9f:3c:e6:
87:7a:2f:f2:9f:aa:6a:de:44:c4:23:0f:6d:3c:4a:
1b:70:62:4e:6f:68:51:20:f0:27:ea:7b:5c:f1:c0:
75:1f:a3:3e:a2:a9:01:ff:be:b9:2a:34:32:19:b8:
94:3f:9f:b1:2a:81:52:a6:af:c0:c6:09:d6:79:63:
a7:c7:23:61:2c:96:cf:50:28:ac:d2:2b:3d:34:c6:
6f:fa:6f:13:fd:10:ff:48:0d:f4:e9:2d:14:c4:e9:
b8:a8:58:41:37:8e:04:53:b7:20:6c:02:f0:30:64:
ee:5e:f8:1d:cd:6d:3e:6e:65:4e:dd:ac:47:3e:cd:
b0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:95:6E:5B:A2:A2:DE:0B:DC:5B:A5:87:9C:1E:19:AE:99:CE:41:35
X509v3 Authority Key Identifier:
keyid:5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:21:94:69:65:1a:84:5b:7c:76:19:f9:e7:8f:40:09:bb:4a:
fd:f4:c5:bf:50:2f:26:51:73:82:ad:d5:5e:1e:08:5e:26:9d:
51:d3:99:f9:83:eb:c4:40:1c:84:bd:3d:8e:1c:9a:bf:6a:b2:
ee:54:69:5f:50:f5:e1:27:da:ba:bb:c1:91:8d:60:57:e6:66:
e5:fd:b2:5a:5c:4f:1c:65:ad:67:b2:72:d6:38:c6:10:76:46:
e8:b1:e5:eb:58:b7:f8:bd:03:00:b6:7b:81:38:06:55:a9:a0:
c6:8a:68:66:dd:73:e8:60:57:4b:ea:a2:55:32:75:65:bf:67:
78:78:b8:63:69:55:10:af:5d:41:de:a3:80:6b:28:66:a8:f8:
00:7f:c6:2a:dc:e2:66:db:86:dc:eb:41:34:4e:87:47:0f:76:
8e:cb:fd:8d:87:69:19:8c:71:71:63:66:89:a1:8c:6c:ed:63:
52:0e:31:c0:47:5c:06:69:a2:a7:cc:69:e9:26:82:c4:29:08:
58:3e:78:83:57:74:57:a6:df:fe:e2:27:87:23:67:a5:b6:4f:
a4:e9:a1:e0:65:e1:18:67:f0:4a:f3:b5:9e:2e:84:8f:cd:ea:
d9:01:8d:0d:8f:b9:b4:75:20:a8:2d:fc:42:5c:67:62:31:46:
ab:7f:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:29:32 2026 by rpki-client