Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: hvikjQ1UHw9UFLBsjR7h1s368DamiisqTqAqpQvlg6c=
Subject key identifier: 27:5F:41:70:AE:9C:11:7D:E8:3B:71:73:EA:BB:76:ED:10:23:4B:FB
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 019CAAFD631C6FEEB31654CC6CD774D2B1C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 05E8
Signing time: Sun 01 Mar 2026 20:00:58 +0000
Manifest this update: Sun 01 Mar 2026 20:00:58 +0000
Manifest next update: Mon 02 Mar 2026 20:00:58 +0000
Files and hashes: 1: 3FLJS_yRN2ma4LftunXw1H0RwYQ.roa (hash: WdS91TIfLxE4oSIwEK2fRZ7HNBIwlQZVjvUqp01YTtQ=)
2: 56Kmc-Cz64ulFDN7LZkLpLy2Uyk.roa (hash: M1LxSBYIiPUs1C9HbHfgJfFfNoWmm4ypO8QoHN7KG7k=)
3: Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa (hash: yA+b+JTKhvzBntnbRz8H3TVoNPvRK8TlZDevDFWYPVU=)
4: LX-ARaBvjhL1OCxybAxnFHn8WPw.roa (hash: z5k53jG7hGiyHO30GuFIqCTEvuGJih3P4io8dzdcoxM=)
5: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: MJCrhoeu9L8EeYB5fE1zJmi6BcLaegVLhUZyB9zVrzM=)
6: Za3vl_jOJ0pGYslBqqMRsVt7h_s.roa (hash: YOFAZhaKlii8wEnPzm8mR4aNFVEe5XwwG7RLJLy04yA=)
7: y7rxPQXdQykP2HWundiTAhRuuNE.roa (hash: kwq12jPHanXZhrxqm5HaXAm17ns+Kl4rOD8Lx3F1wV8=)
8: yc0EM4Q7YegfvWHtUfZGE2JYYt8.asa (hash: YVzGGL9uGiyH33DfGylRpABv7Bt0LM4Hn9Ld7YwL2Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:63:1c:6f:ee:b3:16:54:cc:6c:d7:74:d2:b1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Mar 1 20:00:58 2026 GMT
Not After : Mar 2 20:00:58 2026 GMT
Subject: CN=275f4170ae9c117de83b7173eabb76ed10234bfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:19:5e:b6:7d:55:97:41:82:35:dd:03:59:
41:c5:02:8d:8f:24:f6:48:18:77:66:a4:37:a4:43:
e0:b6:89:1d:88:94:bc:aa:22:e6:e0:e8:a8:4e:e6:
f6:bd:6b:d8:ca:c5:49:0d:0e:1f:b8:e8:0a:9d:c2:
07:7f:e4:6d:5c:0c:d8:81:1f:80:6b:55:26:b3:1a:
6e:0b:ef:95:64:1b:82:77:b6:84:8b:91:4c:8f:c3:
cf:4a:67:ba:8f:16:13:5a:a9:9b:95:e6:62:b0:1c:
dc:c3:0f:bc:e0:ae:ed:0d:2b:8e:b9:5a:a4:68:ab:
58:eb:58:99:a0:00:f6:80:8b:90:da:33:b7:49:d3:
a7:f1:46:0e:f3:72:80:ae:9e:47:93:88:c9:b8:42:
4e:20:52:29:7e:26:88:f9:e5:95:e9:89:7e:f5:86:
81:3b:16:6e:96:8c:1f:4e:a3:fc:4b:98:88:fe:f1:
35:c4:eb:77:d9:b3:c2:7a:92:db:18:66:92:b5:ee:
0e:23:02:91:ed:cc:5b:24:f5:06:b5:b9:74:cc:b6:
2f:be:c2:85:b4:b1:90:44:77:e6:9f:f3:f3:f1:46:
7a:fc:b4:b8:a2:d9:4b:26:a1:f6:2f:08:a9:fd:4f:
ca:77:81:ce:3c:02:69:b1:95:69:a4:17:bb:09:a2:
26:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5F:41:70:AE:9C:11:7D:E8:3B:71:73:EA:BB:76:ED:10:23:4B:FB
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f2:c6:4d:55:88:db:46:f5:81:ae:d4:f7:55:07:f6:b3:ce:
da:2e:c0:6f:07:4e:f5:f5:27:c7:a4:5d:f1:16:00:c3:f3:6d:
5b:bd:93:78:ff:b3:4c:07:f5:c7:41:de:96:fd:f7:cc:f4:9e:
22:75:a1:86:3f:a9:a8:53:22:af:9a:d2:4d:45:1f:08:ba:21:
70:43:35:29:72:9b:1c:51:18:c5:35:86:fb:2a:6e:4a:db:67:
a0:c8:3a:82:75:b2:4b:55:2f:f6:28:2e:27:03:88:56:22:34:
a9:8e:1a:72:14:11:9b:24:bc:a7:ff:6f:6e:1a:5a:56:2a:ac:
b2:80:80:db:f9:7f:4d:d9:8a:ab:bb:5f:fc:4b:c6:a9:1c:85:
a5:93:dc:69:f5:68:8e:b7:ac:ae:46:f3:60:c3:1d:9e:5e:2b:
a5:8c:f3:5a:e3:4a:58:f8:90:3a:86:39:81:a6:9a:8b:8f:15:
f8:ea:29:1c:d1:a9:fe:23:4a:33:55:a2:fe:28:34:be:47:93:
a2:20:4b:ef:a4:94:46:fe:04:ec:90:17:57:45:5d:90:ee:62:
3d:80:4f:be:56:81:4c:fc:79:b0:a7:c0:89:e3:3b:e7:b4:0a:
e7:ad:82:77:92:3e:d4:dc:f0:51:da:76:5d:59:3a:5f:3c:4d:
61:71:34:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:38:43 2026 by rpki-client