Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: p/pBXjfFn1PnAsNOqhDEKyORcbtZGT4Y7bXB0pIHlkc=
Subject key identifier: B0:C1:DE:D8:4F:C9:48:B4:F0:16:65:90:D4:C9:72:A6:B0:73:8E:90
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 01A18D1D715BB0AA0A403598151F928DB855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 1233
Signing time: Fri 30 Oct 2026 14:01:19 +0000
Manifest this update: Fri 30 Oct 2026 14:01:19 +0000
Manifest next update: Sat 31 Oct 2026 14:01:19 +0000
Files and hashes: 1: FpMR3_wbyPoQ3SpLC3msQFuHBCc.roa (hash: mnRTyPfeR1b8jfxG5BpoCLK6zLk4lmp1OJjO9At2igc=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: 99xw7tAPbsrOanl52eK/IuhYwZx9Wm3URMOHgeyQkLc=)
3: YcE6ReHh6unnU83H-TjyslkyeUw.roa (hash: McwZCMtZVwtttRxvoSUbvLr+7AkamJmadn/zlM3onqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 14:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:1d:71:5b:b0:aa:0a:40:35:98:15:1f:92:8d:b8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Oct 30 14:01:19 2026 GMT
Not After : Oct 31 14:01:19 2026 GMT
Subject: CN=b0c1ded84fc948b4f0166590d4c972a6b0738e90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:d6:21:30:fe:a4:c1:83:3d:21:53:94:44:
34:e6:66:52:98:37:5e:b6:3b:d9:32:69:96:8f:23:
2b:b7:46:d0:78:0e:e1:71:62:51:12:99:a3:6e:ea:
0a:2f:a2:0b:da:dd:a0:35:6b:3c:94:8e:6a:5f:7d:
a3:9d:e0:6b:17:7b:ce:90:fb:e7:a8:69:ab:9a:b8:
b6:04:b0:33:45:e0:1b:bf:86:c0:8b:43:a0:71:59:
6b:99:a7:1f:35:28:7c:84:8c:d4:1e:0c:02:44:68:
37:44:95:35:1f:77:ca:e7:50:69:b8:69:b6:d8:74:
c7:a4:fe:eb:af:73:dc:ce:db:4b:68:65:3e:bc:fd:
54:56:09:2e:be:c8:da:78:32:b2:1e:2b:bc:fa:18:
42:a1:33:2b:d3:d9:68:ee:8c:c7:6b:31:13:7b:18:
90:0d:e5:53:04:f2:78:51:56:2c:da:31:a9:fd:c2:
92:36:a2:ac:45:e7:1f:ad:74:2c:68:77:a9:ac:f6:
c8:19:47:d4:6c:b9:8e:43:8c:df:97:7b:69:7a:aa:
a6:80:85:03:4c:b5:28:29:ed:f5:78:c0:38:f5:21:
42:f7:89:6b:34:c6:98:50:34:1a:af:64:c5:7e:76:
7d:6e:d7:79:65:15:0d:ab:c9:2d:33:80:18:52:1d:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C1:DE:D8:4F:C9:48:B4:F0:16:65:90:D4:C9:72:A6:B0:73:8E:90
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:71:59:a9:c2:e9:47:8b:67:fc:50:05:a9:d0:3c:fc:e0:13:
87:da:c0:32:02:d3:8c:69:2a:45:8c:ba:65:64:42:09:6c:cf:
d1:e1:9e:5d:a2:9a:67:b3:ae:5b:5f:10:eb:68:13:c4:69:5e:
cc:e9:2c:36:4d:04:f1:94:18:44:af:c6:2e:df:a3:46:30:1d:
76:04:44:b2:53:a2:10:0e:1b:93:79:c3:e3:2e:cb:d1:d8:6d:
2d:db:3c:e8:86:18:7f:f8:ba:64:33:5a:18:ef:9c:2e:44:d6:
b9:43:b6:f3:a9:49:f0:fc:f8:0b:ee:d5:5c:0c:f1:93:ea:34:
53:ac:5d:81:d4:54:ac:15:06:71:8e:1b:63:2d:1c:4f:76:84:
e6:eb:b6:09:0d:49:56:d1:e8:69:65:f5:de:eb:d4:eb:c6:7d:
bc:78:7d:6c:42:07:67:dd:62:a3:d9:29:f6:5a:91:20:00:9f:
4e:5c:a8:24:25:2c:69:f1:cb:2a:a6:df:0a:6e:7b:97:b7:7a:
78:62:44:6f:24:a3:47:a5:cc:ca:df:7e:5a:77:92:c9:ac:6f:
af:f3:e9:df:77:b0:1b:d0:0e:09:2d:f7:51:46:53:fd:fb:27:
54:d4:62:8f:41:f5:cc:75:19:fc:e8:c1:5b:cc:14:40:85:de:
e6:99:f6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 21:35:15 2026 by rpki-client