Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.mft
File: X3xLrCTiMhOZILbFzqcF74MP11U.mft (raw, json)
Hash identifier: e+cqa7J+fCoYjKjJ0OQp+XOpR87YwISkYYqCC3g1J30=
Subject key identifier: FE:AA:0A:7D:12:E2:BA:5F:26:92:86:BD:0D:D8:12:8A:A0:20:B1:42
Authority key identifier: 5F:7C:4B:AC:24:E2:32:13:99:20:B6:C5:CE:A7:05:EF:83:0F:D7:55
Certificate issuer: /CN=5f7c4bac24e232139920b6c5cea705ef830fd755
Certificate serial: 01A0C8FD268EC07012D5A8AEFE020F16C994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3xLrCTiMhOZILbFzqcF74MP11U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.mft
Manifest number: 4F
Signing time: Tue 22 Sep 2026 12:00:28 +0000
Manifest this update: Tue 22 Sep 2026 12:00:28 +0000
Manifest next update: Wed 23 Sep 2026 12:00:28 +0000
Files and hashes: 1: 7zDEmWPI1ENhomTy26ZsTYp2BBk.roa (hash: HMKeSJgU65eJmE17l+0Kgm4LpuhW6XeTtaT/MhlrW+s=)
2: X3xLrCTiMhOZILbFzqcF74MP11U.crl (hash: 2bAuCF65BVAjGGj1mLebUuGk0zJ5V7K5ccInqLUPvFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3xLrCTiMhOZILbFzqcF74MP11U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:26:8e:c0:70:12:d5:a8:ae:fe:02:0f:16:c9:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7c4bac24e232139920b6c5cea705ef830fd755
Validity
Not Before: Sep 22 12:00:28 2026 GMT
Not After : Sep 23 12:00:28 2026 GMT
Subject: CN=feaa0a7d12e2ba5f269286bd0dd8128aa020b142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:64:57:8e:52:4c:90:63:ed:81:db:44:59:88:
bc:88:33:74:87:f3:67:72:ce:88:e3:b9:76:9b:df:
c7:f9:35:01:09:ee:c0:b1:9d:db:6b:eb:e6:af:4f:
54:7f:b6:eb:41:44:ba:0b:d0:f3:12:cc:87:25:2b:
93:71:c9:b5:64:26:90:19:3a:7e:ff:4d:b6:e9:00:
3a:16:bd:a2:d2:80:09:65:43:1c:b4:5f:72:fe:d6:
b0:15:3c:69:13:b6:87:20:e9:2e:0e:5a:05:9e:cf:
09:cb:94:80:ca:a4:08:b0:87:72:7e:03:02:f9:83:
1a:3b:75:7c:bf:8c:53:f3:da:eb:4b:ec:f2:05:5e:
7e:8a:61:13:0c:eb:31:53:7a:ed:38:82:e7:34:a0:
2e:c5:b9:4e:19:26:71:c0:70:91:88:c0:55:34:98:
43:fd:3b:d7:1c:24:7a:a2:47:c7:d9:9c:f4:25:84:
26:bb:78:dd:83:3f:86:f9:10:4f:9a:ad:b4:6f:61:
1e:da:21:03:a9:46:64:13:09:a3:19:36:db:d9:13:
f8:b7:29:c1:2b:37:0c:0a:83:1d:27:c4:52:38:26:
20:eb:49:98:3a:50:ca:e8:9a:88:ef:ff:3c:b5:b3:
ac:1f:46:47:d7:c4:ec:52:fd:93:a9:0d:cb:9a:76:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:AA:0A:7D:12:E2:BA:5F:26:92:86:BD:0D:D8:12:8A:A0:20:B1:42
X509v3 Authority Key Identifier:
keyid:5F:7C:4B:AC:24:E2:32:13:99:20:B6:C5:CE:A7:05:EF:83:0F:D7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3xLrCTiMhOZILbFzqcF74MP11U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:24:f5:99:ca:74:cc:82:2b:9b:3b:1a:98:8d:35:af:9b:cf:
97:cc:72:3b:b0:52:56:5a:3b:52:a3:61:9b:55:63:cf:f0:f7:
57:10:6d:27:12:a4:94:16:f3:09:cc:ee:98:c8:63:c3:a1:54:
9e:b2:f0:93:1d:dd:e7:ab:f4:f9:f2:ff:17:41:89:02:1e:64:
ff:d0:1b:bb:e3:eb:f4:ab:44:7d:b5:a1:9c:66:9d:f0:1c:bc:
52:f0:64:e9:d7:08:55:b4:08:d2:09:53:3a:b7:86:8d:98:72:
bb:43:33:4f:1e:a8:af:be:04:71:c2:ec:46:8f:0a:9e:89:d0:
46:5b:e4:8f:5c:99:48:e0:fd:48:cd:85:6e:6d:a1:98:89:45:
f3:b8:8d:0b:fa:a9:f1:b5:6e:ab:45:82:65:87:d2:28:9c:30:
67:bd:d4:31:6b:75:64:a3:5e:72:b8:61:3a:d6:ec:2a:fa:ed:
f9:8c:ce:97:45:2b:a8:8f:94:eb:2e:f5:7c:23:b8:00:db:31:
2b:f4:f5:f3:34:83:45:95:c1:a9:3f:9f:9e:3a:8d:bc:fe:2b:
e5:93:84:5b:52:ad:35:51:2b:77:2d:b5:55:1a:0b:98:96:39:
5f:f8:7a:c7:b6:94:99:e8:23:b2:08:de:cc:46:52:fd:54:bb:
b9:1a:b3:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:52:49 2026 by rpki-client