Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
File: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft (raw, json)
Hash identifier: bVVbGCXdNNzWG6lVhGL/0RDxvI3RvMcA4EAcQD6aXc4=
Subject key identifier: 30:C8:79:76:6F:2E:C5:F4:44:0B:01:8C:F3:80:7A:9F:87:31:E5:0D
Authority key identifier: 5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
Certificate issuer: /CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Certificate serial: 01A06E031D033D740C0035236E369287F391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
Manifest number: 0DA6
Signing time: Fri 04 Sep 2026 20:01:32 +0000
Manifest this update: Fri 04 Sep 2026 20:01:32 +0000
Manifest next update: Sat 05 Sep 2026 20:01:32 +0000
Files and hashes: 1: OvbRlSnTXlATqx6AnWYr1toDU7w.roa (hash: Q7J38waQ9GMMd+3BefTKWI7xIc5v9QQp9c12zI1W6yo=)
2: X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl (hash: AC6y7zfk91SSr0rq4/eiZ/P5of7zBNfcehKFaF4Prv8=)
3: ka4LXP3r8o1mdLFuGzD128vQb8c.roa (hash: b2UoUARxm+G737EGkLibfrOXAzwN80OkLpiAV/fDR/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:03:1d:03:3d:74:0c:00:35:23:6e:36:92:87:f3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fb88d91788fe9921089d9b6271e210f7f8914a2
Validity
Not Before: Sep 4 20:01:32 2026 GMT
Not After : Sep 5 20:01:32 2026 GMT
Subject: CN=30c879766f2ec5f4440b018cf3807a9f8731e50d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:5a:50:1f:2d:2e:6a:64:e6:b5:4c:fe:3b:
65:68:da:7d:f3:19:69:1d:28:6b:6d:fc:a4:21:47:
38:74:c4:a7:bc:7c:b0:cb:c8:58:ba:45:d3:7b:77:
bd:14:5d:31:10:d2:0d:80:b0:bb:0e:46:90:94:ee:
89:e4:68:67:36:4b:97:e8:2a:b2:26:31:30:3e:bd:
62:ee:b5:47:ab:0d:8d:d8:7c:f5:07:26:7a:08:a9:
24:62:51:f7:31:30:cf:a7:ce:57:4b:ab:d5:c1:30:
67:a7:68:e0:dc:0f:e5:ea:3e:76:83:92:b5:4e:f1:
3f:c3:29:a9:2b:a9:b0:74:9d:61:3c:2c:4f:62:03:
a5:81:39:b6:81:60:84:36:94:96:cf:7d:9b:58:aa:
99:60:b2:3e:16:de:0d:63:6c:15:0a:74:f0:0b:1d:
fb:df:61:52:e8:59:76:dd:87:94:13:02:5c:1d:df:
d4:12:b5:85:d0:d2:74:99:a2:48:b6:21:9f:14:6e:
b6:e5:83:9a:61:79:08:5f:f1:48:b4:52:2d:25:28:
ed:99:e8:7a:da:99:d6:9f:56:a9:15:d9:56:5a:a6:
72:aa:1f:fe:da:a3:c9:94:fd:72:7b:0c:5f:40:85:
12:9a:1e:c6:59:bb:58:a5:8b:37:7f:da:ff:52:79:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C8:79:76:6F:2E:C5:F4:44:0B:01:8C:F3:80:7A:9F:87:31:E5:0D
X509v3 Authority Key Identifier:
keyid:5F:B8:8D:91:78:8F:E9:92:10:89:D9:B6:27:1E:21:0F:7F:89:14:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f7bcd-a7ea-4e10-ba34-4ce4d8fea6ef/1/X7iNkXiP6ZIQidm2Jx4hD3-JFKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:bf:7f:e3:2f:ed:72:10:68:09:df:b3:c3:b9:7f:20:0b:06:
26:a6:7a:59:ec:ca:ac:19:22:97:bd:61:8d:42:9e:43:c3:35:
60:5a:67:cb:b7:0a:5b:19:a3:de:39:ef:d6:65:15:ab:d6:30:
17:87:24:6b:32:2e:0a:89:a5:6f:67:5f:e7:fd:5e:01:7b:77:
93:21:0f:45:25:20:23:04:22:f4:1b:d1:32:16:46:f3:b9:55:
f6:8d:d8:7b:bc:a9:9b:6a:6c:83:a5:ea:0e:79:e2:85:84:35:
3c:59:ad:18:77:b8:2d:02:53:ed:58:11:8b:21:4a:64:19:df:
a5:0b:93:46:dc:e2:d4:ef:a5:a9:81:80:af:70:0d:2c:94:36:
e3:fe:e7:97:25:3b:3a:50:66:bb:aa:0c:d1:94:4d:2c:f0:c7:
c5:08:e3:5d:d9:d1:f0:e9:d2:1d:fc:54:90:53:f1:a5:4f:e3:
01:1a:a8:65:60:d4:6c:1b:d9:f0:05:93:e4:74:fb:59:82:2f:
d6:82:83:7d:9e:14:cb:f0:be:4a:fa:e4:22:c1:1b:1c:a8:8d:
42:b1:37:35:b6:d8:57:33:49:17:32:f1:6e:4a:d4:fc:e9:b5:
81:16:4d:de:10:42:6b:82:ed:cf:f6:e9:d0:17:eb:70:64:ba:
54:2c:32:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:27:34 2026 by rpki-client