Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
File: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json)
Hash identifier: rVL8HjVbvoDS82qT0vJ0uJ6WX9/DGcusD+ApTOoGcfA=
Subject key identifier: 35:A3:2B:2C:C9:25:1E:1E:9C:09:BC:C0:FF:EA:8E:9C:72:2D:6F:97
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial: 01A12F21A48685AB545F1BAF015003CD6DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
Manifest number: 06B1
Signing time: Mon 12 Oct 2026 08:01:36 +0000
Manifest this update: Mon 12 Oct 2026 08:01:36 +0000
Manifest next update: Tue 13 Oct 2026 08:01:36 +0000
Files and hashes: 1: je_dZ3uZwgn_oNlxsf8-FTUq220.roa (hash: ypEWzWUb+UjYyAsZX+8LRu9EB7C2RkmFTCbcPYB408Y=)
2: pt1RHK2niClvZGTwHDZ-ZsdvbEk.roa (hash: /6TgV1nZB5u4zUl3iLf85GJmzgWJev9Zymtz9O1XUPc=)
3: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: U9Dk5WMy2gtUDBqYEhnXJoLluxYprCV/PGgrI1UmR0E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:21:a4:86:85:ab:54:5f:1b:af:01:50:03:cd:6d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
Validity
Not Before: Oct 12 08:01:36 2026 GMT
Not After : Oct 13 08:01:36 2026 GMT
Subject: CN=35a32b2cc9251e1e9c09bcc0ffea8e9c722d6f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:91:3a:8a:9d:21:17:ae:a6:38:d5:af:50:13:
8b:7b:ce:88:7c:50:c0:2e:40:99:07:3d:37:32:bf:
a6:c3:96:47:e6:82:f4:92:8d:e9:81:4b:44:cf:30:
9e:49:6d:b9:ae:6e:80:0f:de:8c:95:6d:f8:aa:36:
5d:31:7b:b9:f0:b8:69:95:b5:a4:72:e2:57:5e:09:
08:63:b6:ce:b1:d0:a9:f4:99:06:a3:dd:92:e1:2c:
33:a8:46:0f:76:d3:26:e4:b3:ee:f2:61:f8:fa:1a:
6d:79:8a:79:15:8b:19:a6:dd:7a:7f:58:3a:0d:d7:
4d:83:05:5d:90:56:7e:ba:c9:43:f2:f7:fb:3b:3a:
1e:e1:5c:c7:fd:7f:90:71:2d:aa:7d:a3:ab:4c:7b:
f7:f3:82:d2:88:45:fd:79:6a:e2:9b:5f:57:c5:42:
3d:e7:d2:dd:a6:6b:3d:ae:46:3b:59:03:77:82:ae:
0d:cc:c8:42:4a:4d:c9:c6:ad:d8:88:e2:0a:a7:96:
45:8c:4e:51:72:74:de:d6:08:73:d6:e5:5e:ff:58:
23:5f:99:06:a5:17:34:4e:20:37:03:0d:be:1a:19:
d2:b8:1a:03:01:d1:30:7d:9d:ea:58:ea:94:88:77:
37:60:ff:28:fd:55:ad:fa:aa:e6:46:b7:a0:86:40:
8f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:A3:2B:2C:C9:25:1E:1E:9C:09:BC:C0:FF:EA:8E:9C:72:2D:6F:97
X509v3 Authority Key Identifier:
keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ff:a1:c4:3a:7e:69:7c:f1:90:82:db:59:89:0b:fd:0a:e5:
5f:a0:e3:93:23:ab:0b:01:81:e9:97:d7:01:ee:59:a2:5b:df:
43:37:9c:ff:81:c6:b8:77:0d:e8:8b:69:d6:2f:e3:4b:09:e0:
91:88:64:47:7e:2d:fe:b7:44:ec:84:63:9b:08:18:5c:94:31:
73:34:b5:f0:38:72:0c:a4:d7:fe:3c:7e:3b:64:8b:e8:ee:55:
cf:34:57:af:f3:48:fb:0e:ad:cb:28:4c:ae:04:af:69:82:c7:
52:6c:b9:cf:3e:47:60:2f:b9:b5:22:86:78:a3:26:4e:b7:d5:
26:5d:33:29:95:5c:e9:94:41:cd:08:54:2e:34:54:3a:a5:6d:
b4:d7:91:e9:cc:d0:4e:c6:d4:b6:ba:10:c5:5b:f0:4f:ee:00:
0b:7d:23:a6:d0:12:e3:d8:b6:05:32:49:33:d3:de:01:a3:0a:
4f:0d:b6:71:c8:98:f4:db:33:3b:19:b9:5d:38:fc:5d:af:ae:
bf:ed:83:54:5d:ac:cd:ad:ac:9c:59:ad:9f:8c:fb:0b:50:c4:
19:61:cf:53:7c:9e:1b:b6:c4:de:86:21:a3:95:02:00:e4:d1:
13:40:38:20:76:e8:6a:d4:ed:43:fd:59:38:88:5c:9a:b9:e9:
b7:be:36:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:36:07 2026 by rpki-client