Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier: C7u8hQ41srrGbiFN7MXVBCr8Wr5yu3Fwk68/H+afrYg=
Subject key identifier: B9:00:57:4A:E4:E9:B1:75:28:5F:F1:E6:77:02:20:7B:9B:E3:0E:23
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 01A0E43E4167425DBCC94BD165BFDFC46067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number: 1312
Signing time: Sun 27 Sep 2026 19:01:20 +0000
Manifest this update: Sun 27 Sep 2026 19:01:20 +0000
Manifest next update: Mon 28 Sep 2026 19:01:20 +0000
Files and hashes: 1: 8saY52FM3OItyl4VOSm_edBIkos.roa (hash: BD5qCuL+dtuTG+pcsvXNBMfwvdqjtVm3dC9TZz4R5tA=)
2: AgsPlaew9BxC8H6svqcKUEs4Qhk.roa (hash: 4UR8Vh6eTw1Tv7xe4kRQAuAMN978t94veu9L+yIEOOw=)
3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: P5he9WIw9gtqyxlMye+W7tV0V/4N28IkG0Wo/5T69d0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:3e:41:67:42:5d:bc:c9:4b:d1:65:bf:df:c4:60:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: Sep 27 19:01:20 2026 GMT
Not After : Sep 28 19:01:20 2026 GMT
Subject: CN=b900574ae4e9b175285ff1e67702207b9be30e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6d:c4:06:2a:94:58:d6:85:04:96:e1:03:87:
ac:fc:7b:e4:14:7b:4d:38:04:b3:32:dc:e3:c1:94:
af:da:de:78:a5:4d:86:88:91:3c:73:91:1c:ae:96:
49:ca:8c:c9:fd:ee:26:64:14:aa:c6:c0:c5:b2:40:
f1:4b:b3:9a:d3:c9:19:e2:98:1b:04:b1:e7:6f:17:
e4:40:1a:a8:26:c2:6a:c8:64:20:cc:79:32:de:b7:
d5:46:2f:77:d8:e8:0f:ba:5d:fb:f0:92:74:18:75:
a7:4e:95:29:4a:ba:ac:2f:c1:a0:a7:61:05:9c:c9:
78:dd:5a:ea:69:b5:8b:08:b9:3e:9a:63:41:37:b8:
35:86:a5:85:d5:58:3d:35:f0:3a:b6:2d:cf:ed:0b:
a3:65:2c:c2:f5:92:fb:a4:6c:02:b7:35:dc:6a:1e:
24:97:7a:52:d7:79:c5:2a:ae:4d:35:68:c2:33:7c:
39:5f:cb:0e:62:71:9f:53:ce:e8:4a:f3:07:2f:a2:
77:a8:5a:16:e0:b7:66:74:23:f7:64:06:62:51:76:
31:0e:e9:b6:77:ab:6d:3f:11:91:cf:d9:5e:6a:27:
2d:25:01:6b:e7:f8:5c:de:45:6b:82:33:11:7f:19:
e3:77:29:55:c9:27:d7:e8:bf:ee:1c:b4:08:4a:c6:
86:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:00:57:4A:E4:E9:B1:75:28:5F:F1:E6:77:02:20:7B:9B:E3:0E:23
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e4:4b:a9:31:15:8d:a6:16:da:67:52:ee:14:3e:63:96:d8:
ac:53:57:5e:a1:a0:5d:dc:56:1a:b2:84:42:9a:e5:57:8f:a1:
a4:f7:6d:fd:91:99:c1:07:c2:93:e6:2d:b6:80:01:b5:b0:04:
f3:d1:ee:a9:03:9f:1d:52:e4:ef:d1:53:0b:ab:c5:f2:19:2f:
6f:b5:e3:3d:36:a9:3d:70:0c:b7:01:4a:aa:12:85:de:14:af:
bb:a5:e5:40:90:84:25:60:d7:90:87:f9:6b:72:f6:ab:93:8c:
f8:d6:53:ba:58:c4:bf:1e:e1:7c:09:96:2d:22:cb:ff:f5:5e:
f6:ae:0c:7f:53:f2:fa:86:dd:d5:ed:41:86:7c:e2:61:ab:d8:
90:1f:c7:64:3a:50:d2:50:28:ac:ff:83:ce:5c:82:da:35:b1:
e9:0c:81:d8:8a:7a:1a:8a:68:18:93:07:e0:32:b3:35:3e:13:
3f:0b:12:68:af:fb:fe:6d:a2:ce:7b:1a:7d:e9:09:89:2c:b8:
34:2d:e3:63:3f:b0:0b:72:77:1b:ed:81:af:ff:82:99:1f:e4:
ee:00:dd:88:3d:75:be:17:c4:b0:e0:cd:0a:5a:c2:5f:47:e9:
ac:0b:4c:9e:54:67:16:51:02:b3:66:64:f1:36:1d:77:ff:4b:
6a:0e:1c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:12:54 2026 by rpki-client