Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
File: X8SomHZcMDixWg01lyQ5Qdo8CWw.mft (raw, json)
Hash identifier: f1C/UnQj2JlWvW903fx0iIUnti9ucwJyjULR3T8B2Xc=
Subject key identifier: B7:76:8C:E8:7E:49:61:BA:47:AD:AD:66:DF:F1:C3:58:04:11:F1:88
Authority key identifier: 5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
Certificate issuer: /CN=5fc4a898765c3038b15a0d3597243941da3c096c
Certificate serial: 019EC2C8FED897740AEFBA127D777D487B37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
Manifest number: F2
Signing time: Sat 13 Jun 2026 21:00:12 +0000
Manifest this update: Sat 13 Jun 2026 21:00:12 +0000
Manifest next update: Sun 14 Jun 2026 21:00:12 +0000
Files and hashes: 1: X8SomHZcMDixWg01lyQ5Qdo8CWw.crl (hash: 2mTCcum2HlclLaeu9RdrZUSOZv6I+0dfwHuivTqpwxs=)
2: Y3QKQzEPDmZm8PJypZh9nJ9wgpY.roa (hash: uGJeMzvWRvF44ZA525KqGwzFGcmEAKAT9aDouXzGutU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c8:fe:d8:97:74:0a:ef:ba:12:7d:77:7d:48:7b:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc4a898765c3038b15a0d3597243941da3c096c
Validity
Not Before: Jun 13 21:00:12 2026 GMT
Not After : Jun 14 21:00:12 2026 GMT
Subject: CN=b7768ce87e4961ba47adad66dff1c3580411f188
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:3f:3c:9a:47:58:22:82:00:c5:40:98:d5:fe:
5e:fa:85:95:92:8f:8d:5e:f7:c9:2b:5c:1f:f3:66:
c0:05:9f:17:ea:7a:17:fa:90:9a:73:84:64:06:01:
2e:5b:d5:f7:0c:78:a6:1c:f4:4b:12:f5:4f:49:e1:
d4:50:bd:fc:e9:30:ab:8f:6b:5b:38:62:a5:d7:12:
90:01:a4:af:8e:c6:92:97:e2:78:22:e0:ba:52:5e:
54:cd:e4:41:64:ee:3b:9f:fa:5f:0a:2e:c9:b8:34:
8a:ad:cf:8c:99:fd:05:0a:5e:55:f3:5b:87:f5:95:
b6:e6:f5:1e:65:fd:f9:7d:d2:b0:1a:fc:f8:0a:51:
06:a0:d2:04:b3:dd:47:38:38:2d:7b:4e:69:95:fa:
0a:5b:79:a4:0c:f7:ba:b3:90:c2:c3:04:38:87:e4:
36:94:f4:70:74:48:5d:4d:c0:3a:7f:b3:5b:99:f1:
e6:fd:6f:27:7b:49:2a:b7:4d:bf:f4:40:ed:20:ec:
d8:b9:2b:51:a6:0d:33:de:cd:70:5d:f6:6d:02:d8:
3f:77:bf:c3:b4:60:51:be:e4:4f:d5:18:51:da:52:
fe:ea:16:b5:b3:6f:b8:b7:3b:f8:8b:e1:20:39:fb:
09:0b:7a:ce:0d:27:31:dc:83:14:da:87:cc:dc:46:
36:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:76:8C:E8:7E:49:61:BA:47:AD:AD:66:DF:F1:C3:58:04:11:F1:88
X509v3 Authority Key Identifier:
keyid:5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:ad:7f:39:c2:85:68:2e:22:fd:47:6f:af:2a:ab:73:ea:9c:
3f:75:22:2e:0d:cf:bf:1d:1f:6f:90:6c:4f:6c:2d:4e:ab:e5:
ba:cb:ad:19:a0:65:a9:cf:60:e7:15:77:42:74:6e:ff:73:c7:
3b:bc:93:79:45:15:61:8d:be:82:ee:47:4e:76:11:10:ea:64:
ea:98:61:c8:7a:d7:1e:23:8b:b7:cb:bc:a0:43:22:f1:7d:49:
21:65:e7:f8:24:c9:9b:0f:6f:55:ad:2b:40:c7:34:70:3b:24:
b4:41:f2:81:fb:d6:3e:e9:a6:d6:14:25:b2:ae:36:14:d1:1b:
29:bb:db:69:22:ac:19:c9:77:d2:8f:ab:0c:22:9d:0a:d7:cb:
05:9a:9d:ad:58:e4:93:b0:d2:64:23:68:49:10:29:f5:2d:4e:
f7:22:14:12:4a:c2:39:bd:d0:58:c7:1a:b1:5a:8d:06:88:4a:
58:74:ef:c3:63:54:7c:bb:ee:06:9e:4e:d2:b0:90:1e:8d:e5:
f8:11:1d:f7:b5:ed:68:8d:3d:84:39:2a:df:5f:78:55:df:fc:
b3:85:07:3a:cf:61:95:72:c6:6b:7c:3a:c6:4d:4b:4e:75:77:
df:86:fe:5c:9d:7e:6e:ad:b8:e4:da:ff:37:a8:46:ad:7d:da:
76:1e:51:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:22:17 2026 by rpki-client