Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
File: X4KumjBKwILBiiiRZm9kzugdXKg.mft (raw, json)
Hash identifier: o/SeRNCo36lhX9BkxCBnrgA80+vhDxhQGL78O1cS0T8=
Subject key identifier: 68:1A:AE:FE:86:B1:2E:6D:9E:75:D3:98:26:57:E0:E6:65:37:3E:FC
Authority key identifier: 5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
Certificate issuer: /CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Certificate serial: 01A07328AC9922DA86D477C4C9FEFFCB9601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
Manifest number: 11A1
Signing time: Sat 05 Sep 2026 20:00:40 +0000
Manifest this update: Sat 05 Sep 2026 20:00:40 +0000
Manifest next update: Sun 06 Sep 2026 20:00:40 +0000
Files and hashes: 1: FpMR3_wbyPoQ3SpLC3msQFuHBCc.roa (hash: mnRTyPfeR1b8jfxG5BpoCLK6zLk4lmp1OJjO9At2igc=)
2: X4KumjBKwILBiiiRZm9kzugdXKg.crl (hash: Zn1AQ0UWq268HuTllinR8g99Q+bMnAEtx0OyZ9cr6e8=)
3: YcE6ReHh6unnU83H-TjyslkyeUw.roa (hash: McwZCMtZVwtttRxvoSUbvLr+7AkamJmadn/zlM3onqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 20:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:73:28:ac:99:22:da:86:d4:77:c4:c9:fe:ff:cb:96:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f82ae9a304ac082c18a2891666f64cee81d5ca8
Validity
Not Before: Sep 5 20:00:40 2026 GMT
Not After : Sep 6 20:00:40 2026 GMT
Subject: CN=681aaefe86b12e6d9e75d3982657e0e665373efc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:10:09:57:e0:f8:36:d2:8a:f3:da:de:5e:2e:
6a:1e:3f:43:27:1a:19:34:d4:09:f5:34:67:5d:5c:
b3:65:d6:57:53:a5:13:3a:cf:4a:37:3c:a7:06:15:
f4:de:a0:7e:c8:a0:ae:e3:87:00:58:97:64:fa:b5:
88:8c:d0:fd:8b:21:a7:db:60:45:27:99:6a:03:67:
6b:7c:ac:77:15:b4:c3:98:f2:97:ba:b7:38:2d:22:
22:58:2a:a2:a7:77:cf:ff:d8:25:9c:94:be:17:ba:
a5:87:a5:d5:2d:83:68:12:62:4b:e8:2f:bd:25:36:
13:2e:e1:df:3e:51:1b:63:92:7b:15:12:77:fc:87:
6f:3b:bb:db:cd:c3:b9:82:80:4d:fa:7c:d3:d0:4f:
63:e7:b4:5f:44:98:9a:dd:86:1e:0e:ba:1a:04:e7:
f9:87:0a:ce:f0:f0:18:16:61:cb:28:2a:98:50:1d:
d1:5f:fd:ad:9e:bc:8a:7c:d1:fb:fe:86:24:26:a0:
81:38:a0:75:88:dd:79:24:cd:8a:42:b3:77:46:fe:
5d:4d:88:43:e3:d4:e5:64:be:cc:24:fd:43:66:9d:
eb:ec:5e:6a:a8:bb:aa:75:ef:e8:6a:43:fb:01:e9:
ae:5b:8e:d8:36:1c:46:36:cd:3d:28:bb:97:a9:0f:
6d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:1A:AE:FE:86:B1:2E:6D:9E:75:D3:98:26:57:E0:E6:65:37:3E:FC
X509v3 Authority Key Identifier:
keyid:5F:82:AE:9A:30:4A:C0:82:C1:8A:28:91:66:6F:64:CE:E8:1D:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4KumjBKwILBiiiRZm9kzugdXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/d6dbd8-6466-48d0-a597-3ec447310dfb/1/X4KumjBKwILBiiiRZm9kzugdXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:46:a3:4a:81:1a:60:ba:f3:b8:45:44:9e:fb:ec:ac:ee:89:
4e:cd:1d:e5:f7:8a:86:2f:e1:7a:f6:47:5f:ac:96:f4:8b:cc:
26:05:3a:47:55:dc:df:7d:3d:25:e9:f2:cd:1d:d1:97:a9:83:
a6:f9:2d:39:8c:1d:cb:39:7a:35:9d:ad:4b:f0:ef:b7:21:bc:
82:0f:1c:24:ee:40:fd:0c:a0:4d:31:9f:9c:3e:3e:63:81:c0:
eb:7f:31:39:78:ef:50:b9:8a:72:20:4f:be:2c:57:12:0a:3a:
5f:a7:fa:1c:69:20:5b:18:73:cd:2a:d1:31:11:da:64:03:ea:
1b:8a:f3:a5:ec:90:37:5b:80:31:29:3d:28:8a:36:82:ba:4b:
e0:f2:cd:89:55:36:e3:30:a5:2a:ef:77:45:26:59:56:29:3f:
6d:4d:84:e4:98:a4:d4:e4:9d:61:c1:40:08:bf:36:00:bf:ac:
96:5a:d3:56:a2:67:ed:5c:dc:cf:bd:a3:95:e3:9d:50:b2:d7:
13:71:9c:ea:da:f0:b5:d2:14:cc:0b:af:ed:d7:32:3f:c1:9a:
a2:c1:62:ed:92:e9:82:0a:c9:23:65:58:ae:16:21:33:93:bc:
28:87:5c:0d:20:3c:ef:bd:7d:ed:7a:00:8d:a9:c8:ad:84:a7:
4e:21:c8:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 6 05:58:24 2026 by rpki-client