Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.mft
File: X6D0liYE-a0a0Yitw92fxcGS4ko.mft (raw, json)
Hash identifier: NTdozDzSAf9Nj3sTLO/PBNCIMFCC4tTyWKKBth3EX9g=
Subject key identifier: E0:F7:B3:3A:13:6A:66:E2:62:C8:26:06:D0:F9:4C:26:3A:ED:59:55
Authority key identifier: 5F:A0:F4:96:26:04:F9:AD:1A:D1:88:AD:C3:DD:9F:C5:C1:92:E2:4A
Certificate issuer: /CN=5fa0f4962604f9ad1ad188adc3dd9fc5c192e24a
Certificate serial: 01A11F768B354D4E02B6022CF7B14278579D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6D0liYE-a0a0Yitw92fxcGS4ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.mft
Manifest number: 8A
Signing time: Fri 09 Oct 2026 07:00:24 +0000
Manifest this update: Fri 09 Oct 2026 07:00:24 +0000
Manifest next update: Sat 10 Oct 2026 07:00:24 +0000
Files and hashes: 1: 3zNJZY1mynaOMt0PR_6OOhCID_k.roa (hash: eVoFznym7O4+TfKPzoOO9hJbiKl608aCcwNQSwV6jhY=)
2: X6D0liYE-a0a0Yitw92fxcGS4ko.crl (hash: ifVnubx+EtkuuF+DGHOJknME1vx5MT8emuWfZixw03M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6D0liYE-a0a0Yitw92fxcGS4ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1f:76:8b:35:4d:4e:02:b6:02:2c:f7:b1:42:78:57:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa0f4962604f9ad1ad188adc3dd9fc5c192e24a
Validity
Not Before: Oct 9 07:00:24 2026 GMT
Not After : Oct 10 07:00:24 2026 GMT
Subject: CN=e0f7b33a136a66e262c82606d0f94c263aed5955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:80:6e:7e:66:2b:08:f3:5f:70:1d:8b:e2:92:
55:80:59:8a:b6:45:9d:91:b6:a2:ea:53:7a:aa:83:
23:1e:c6:8b:3f:c4:3f:5b:c9:dc:a2:f8:c1:db:33:
52:f7:f2:06:1b:09:19:63:90:25:0d:ba:5d:40:ca:
df:5e:68:82:61:c4:e1:93:ce:e6:e5:f3:47:1c:15:
f9:b6:bb:93:20:a1:53:61:8c:9a:56:9b:74:8e:ce:
73:6c:af:ae:b2:52:2c:91:db:f5:3d:18:58:24:76:
8b:45:ca:e6:e1:7b:05:2f:99:6e:6a:d3:a6:32:6c:
e6:0d:ce:2e:e2:c2:4d:64:c7:8b:f4:91:e8:0b:75:
43:3f:fa:0f:20:d0:9f:60:57:d4:77:82:55:c1:1d:
01:51:21:39:fe:45:1c:45:4e:74:6f:b7:de:33:06:
6d:2e:0d:4f:8e:c7:be:b3:cc:77:eb:02:75:51:b1:
89:e8:9c:ab:73:a2:f0:4d:dc:c5:37:3e:2d:1b:79:
b5:94:eb:09:ea:36:61:ba:96:64:01:26:c8:9c:60:
9a:a5:21:02:d6:34:8a:f7:02:5b:f8:fe:e0:c7:81:
1f:71:95:bc:56:0b:c9:17:e2:c7:8b:a9:14:2c:8b:
84:0c:02:cb:1f:45:60:79:1b:81:2c:68:d9:bf:0e:
fb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F7:B3:3A:13:6A:66:E2:62:C8:26:06:D0:F9:4C:26:3A:ED:59:55
X509v3 Authority Key Identifier:
keyid:5F:A0:F4:96:26:04:F9:AD:1A:D1:88:AD:C3:DD:9F:C5:C1:92:E2:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6D0liYE-a0a0Yitw92fxcGS4ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9cc612-9bd0-4ce0-843d-60cc5bcb604f/1/X6D0liYE-a0a0Yitw92fxcGS4ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e6:ed:33:7e:69:d7:d0:cd:2f:8f:01:89:17:26:b8:2f:89:cd:
24:f2:14:3e:80:9a:93:1f:5f:76:fb:9e:3c:04:30:8a:b1:c9:
a7:f2:93:89:83:70:d4:ee:0d:14:07:46:39:e4:e7:1d:2a:99:
d6:4b:31:e3:b0:14:5c:63:c8:03:d9:cd:91:8f:11:cd:7e:03:
9b:4f:d7:4f:e8:dd:aa:e0:6f:dc:fc:6a:19:3f:48:ff:33:e7:
16:6c:e9:fc:e8:b4:8f:a5:2d:da:d3:4e:d4:6c:86:5f:30:4b:
55:ef:e1:7e:39:5f:ef:4e:7a:90:cd:44:f3:e4:b4:99:b4:b7:
6b:08:3b:fe:fb:3a:e7:f4:f0:a0:13:d9:ec:d3:7b:85:b4:fc:
23:d2:2d:cc:13:7f:35:9c:b7:c4:79:41:31:31:d9:de:30:90:
68:15:b5:63:33:5f:cf:df:70:d7:af:d7:00:40:18:5d:09:93:
e9:2f:07:ca:26:aa:23:36:e1:99:b5:1e:6b:3a:ce:e1:d0:23:
78:db:08:75:7b:1e:2e:b1:fe:ce:d1:77:23:25:fb:62:53:4a:
b3:ee:96:92:4b:bd:6b:d6:64:69:c1:c8:66:6e:67:91:cd:65:
6d:ed:6b:5c:22:22:df:44:88:a3:d8:39:a7:06:6c:ce:72:af:
b9:f9:b5:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 15:16:41 2026 by rpki-client