Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier: UvLI/OjF9m6XwvBkM1LAr6FB28Ik1TQH9yFVFBeNiu4=
Subject key identifier: 96:41:EF:E5:21:26:2D:A3:6F:5D:2C:FB:EC:89:1E:6D:BF:86:F5:CB
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 019CAAC67A8DA509FFE10D3B260F3CCE257F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number: 10E2
Signing time: Sun 01 Mar 2026 19:01:00 +0000
Manifest this update: Sun 01 Mar 2026 19:01:00 +0000
Manifest next update: Mon 02 Mar 2026 19:01:00 +0000
Files and hashes: 1: 8saY52FM3OItyl4VOSm_edBIkos.roa (hash: BD5qCuL+dtuTG+pcsvXNBMfwvdqjtVm3dC9TZz4R5tA=)
2: AgsPlaew9BxC8H6svqcKUEs4Qhk.roa (hash: 4UR8Vh6eTw1Tv7xe4kRQAuAMN978t94veu9L+yIEOOw=)
3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: m4iV4++nTVSDNKv+y5gcxSjSyvaZzZTKiUjruOWQFdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:7a:8d:a5:09:ff:e1:0d:3b:26:0f:3c:ce:25:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: Mar 1 19:01:00 2026 GMT
Not After : Mar 2 19:01:00 2026 GMT
Subject: CN=9641efe521262da36f5d2cfbec891e6dbf86f5cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:48:64:fe:f4:1f:b6:da:1c:03:4c:14:28:2e:
cb:c4:8f:9e:5b:98:81:bb:9f:f9:b3:66:fd:8d:f8:
96:88:5c:4c:ec:48:78:c5:23:48:fb:44:2d:dd:30:
17:88:b2:21:a7:51:da:1f:bb:77:1b:5c:4f:3b:8a:
3d:1b:7f:11:e5:05:0a:55:85:39:20:ca:93:f1:6a:
f7:c5:96:2d:03:5a:1a:29:26:14:6f:3a:b0:1a:a0:
24:f3:d2:0c:e5:37:59:79:10:fe:ee:93:1f:e2:78:
33:b6:7f:88:1d:6b:c9:29:ad:6e:42:f0:40:a3:e8:
45:42:45:43:10:b4:1f:c3:0f:9c:eb:46:09:bd:83:
74:42:b5:d4:ee:69:8a:75:e4:db:90:4a:6c:9e:5a:
71:4a:eb:70:39:b7:48:5f:3f:ab:1e:89:48:35:57:
c6:a5:28:96:80:19:aa:31:1c:5b:7d:a3:a4:40:fc:
b0:71:67:d4:b2:08:1a:9d:b3:01:47:81:d8:81:b7:
35:e7:fb:c6:41:87:be:cd:cd:a0:71:1e:9d:6d:bb:
6c:f8:ea:df:56:1a:22:c5:21:fd:2a:e9:b2:27:36:
63:64:25:a0:3a:e8:21:8e:1c:1b:b8:6a:c7:58:d1:
39:3a:7b:3f:4a:9e:3a:09:b9:c4:a7:fe:83:8c:0e:
90:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:41:EF:E5:21:26:2D:A3:6F:5D:2C:FB:EC:89:1E:6D:BF:86:F5:CB
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:da:a3:ff:ca:c6:4f:df:46:f7:2e:32:4b:df:7c:09:85:de:
3c:aa:5e:ac:c7:b0:a7:8d:5e:c2:c5:e8:2d:42:f8:50:dd:e9:
c4:dd:87:18:9a:8e:bd:52:5c:5b:a3:ad:f8:c4:b5:4a:e0:42:
70:be:51:21:3c:50:02:16:47:52:95:bb:23:77:70:5a:8a:27:
81:ef:e1:cf:9e:92:d7:26:72:10:38:60:f0:5d:e0:7e:ba:c9:
e9:a3:59:c4:77:ad:91:02:cf:fa:2b:72:18:57:b0:bb:89:00:
33:4a:21:7e:6b:34:8a:e8:1f:21:b5:52:e8:d1:c7:90:48:71:
db:c1:25:9d:cb:33:53:c3:35:ab:53:d5:4c:f8:8b:a0:0b:77:
44:1d:d1:65:89:0f:96:49:95:bb:9d:a8:41:08:f9:47:f4:59:
ef:e8:31:c9:a0:d6:77:a2:8d:7a:04:9c:87:0b:bb:7d:0e:a1:
9f:2e:56:e0:be:0c:dd:9c:f7:8f:e6:f2:4b:d0:fb:67:09:7b:
a5:02:42:9e:27:3f:af:0c:f4:06:73:fc:1d:03:f3:6f:df:ca:
46:06:fa:90:6e:2c:33:f9:fd:a8:e7:9e:40:40:e1:f9:1d:37:
39:70:72:10:ad:72:70:e0:12:3a:80:f1:f0:15:e0:aa:12:f7:
a3:81:c8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:57:32 2026 by rpki-client