Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: 0+qC62D5brTIr7OrXQ6V/4Pe0u8LhAlTsCQvbCP4HKg=
Subject key identifier: A0:3B:F3:1C:6C:95:01:40:60:A0:56:E5:FA:9F:92:93:B4:51:12:D4
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 01A0C28D70B4DBBE97F74CC3EAE12B383936
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 1A64
Signing time: Mon 21 Sep 2026 06:00:44 +0000
Manifest this update: Mon 21 Sep 2026 06:00:44 +0000
Manifest next update: Tue 22 Sep 2026 06:00:44 +0000
Files and hashes: 1: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: a3WYnF16BHKl7Si+QHD4I96+GD4c53QGaYNLJDIMJzE=)
2: YboTsZW5E_LquEoNeH4f-DKai2A.roa (hash: rVnU6oaQsX3x5ymp+Ryvp8mswyZTbG+O1Im+gcRa5NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:8d:70:b4:db:be:97:f7:4c:c3:ea:e1:2b:38:39:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Sep 21 06:00:44 2026 GMT
Not After : Sep 22 06:00:44 2026 GMT
Subject: CN=a03bf31c6c95014060a056e5fa9f9293b45112d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:31:40:ae:23:c2:96:61:c7:b1:4e:27:2e:24:
2e:3e:ac:60:08:8d:65:47:ea:c0:81:61:d1:80:b0:
5d:55:db:82:8f:88:62:7b:1a:98:10:a9:2a:b0:0a:
1d:ca:3e:92:7b:55:92:36:26:9a:1e:8b:52:e9:d3:
8b:15:bc:94:27:81:7c:ab:b3:47:8d:1f:43:76:43:
76:62:ee:09:92:e1:46:1b:c6:63:76:c4:3a:46:97:
ca:a4:ba:fa:2f:b5:a9:f2:b4:85:ca:43:af:e8:bc:
55:97:9b:95:ef:76:df:34:bd:82:0a:f7:30:f4:a7:
48:2e:41:84:d2:18:dd:3d:19:f5:d6:cf:f6:0b:8a:
e7:dd:28:bc:39:a9:58:06:38:47:f2:d7:ca:92:18:
3b:5a:00:e1:6f:15:54:60:f6:27:4b:09:15:e8:1f:
48:76:a5:c6:29:97:dd:05:fc:15:4a:c5:cf:e0:ad:
66:fa:da:63:3b:50:02:3d:75:09:a2:02:9f:55:e6:
30:d5:e2:91:a6:9d:6c:1d:97:8c:e8:41:33:ae:a6:
47:d3:e9:77:e5:0a:b5:1c:7c:fb:c7:17:14:9d:c5:
f0:53:86:37:d7:7b:79:92:9d:7a:7b:1a:f3:40:41:
d6:c5:d9:09:27:89:d1:0c:e6:6d:22:12:58:8e:3b:
24:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:3B:F3:1C:6C:95:01:40:60:A0:56:E5:FA:9F:92:93:B4:51:12:D4
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:63:b8:56:c1:e4:61:44:aa:7d:cf:f6:7e:64:fc:b6:33:17:
f3:a4:1f:b3:19:d6:e6:40:f3:3b:f2:49:13:7d:36:2e:ab:f4:
43:1e:01:50:19:b0:1d:e6:d8:61:84:c1:d2:39:78:f0:a4:c4:
5a:40:ac:c3:ea:ae:86:30:0f:44:0c:1d:36:b5:d2:ae:1c:20:
e6:b8:cc:5c:a1:ae:ce:82:c2:22:35:a6:8c:85:57:a3:f0:cf:
4c:19:96:f8:8d:de:96:c0:e9:89:34:35:97:37:87:e9:d9:98:
5c:7c:a4:ae:e2:a8:f2:bf:14:e4:d6:a2:e0:56:cf:b4:d9:36:
d4:65:02:da:4c:f6:87:96:43:0f:77:f6:17:c9:01:56:df:4c:
20:a9:0a:33:2b:c5:2d:39:4a:b3:6a:dc:a3:4a:a4:b5:e9:35:
89:8a:58:92:5e:1d:12:71:29:0b:eb:3e:2c:f7:d5:50:b7:51:
d9:d8:f1:87:9f:cc:f3:de:c5:53:26:f9:e9:f4:07:f4:31:49:
65:7d:82:2b:7f:2c:39:14:fc:6c:7f:88:8f:9f:0f:e9:05:a6:
c7:3d:7a:e2:93:ad:2a:1b:ae:af:dc:1b:b4:16:b4:1a:24:98:
37:71:e3:aa:7d:40:35:95:e7:a2:8d:4d:4b:ab:66:e0:85:93:
35:b1:78:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:46 2026 by rpki-client