Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
File: X7qw05-2l5_k09JIOgG908k77O8.mft (raw, json)
Hash identifier: IYBTIAzF/bM6Z97AyUhatogJxmhEhffqKvmBsEU5Ylc=
Subject key identifier: 76:AA:CE:68:C0:9C:A2:0B:4C:0E:5E:60:46:20:75:9C:23:71:1C:52
Authority key identifier: 5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
Certificate issuer: /CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Certificate serial: 01A18307225D39F882540B583B246A11F681
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
Manifest number: 0FD8
Signing time: Wed 28 Oct 2026 15:00:45 +0000
Manifest this update: Wed 28 Oct 2026 15:00:45 +0000
Manifest next update: Thu 29 Oct 2026 15:00:45 +0000
Files and hashes: 1: Fnr8UBCRPeUQhRVFOAHVctCKPfo.roa (hash: PgOyYUmMG9zgljOcOgtP5byxd2cN3HfKRRt85MDBTwk=)
2: X7qw05-2l5_k09JIOgG908k77O8.crl (hash: EkGpNRrB5yum261WVrpNy7Q540f3SxA0zEeY+aTKvaY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:14:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:07:22:5d:39:f8:82:54:0b:58:3b:24:6a:11:f6:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbab0d39fb6979fe4d3d2483a01bdd3c93becef
Validity
Not Before: Oct 28 15:00:45 2026 GMT
Not After : Oct 29 15:00:45 2026 GMT
Subject: CN=76aace68c09ca20b4c0e5e604620759c23711c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:72:c5:ab:cc:c9:01:c9:a5:0e:13:8a:43:1e:
c9:12:39:b7:19:ab:bd:67:7b:37:7e:a2:18:c7:40:
d1:9a:d4:49:62:7d:99:c0:fa:0b:f3:b0:d3:9d:48:
da:a9:7b:b7:ee:96:a1:be:8b:92:ab:8b:32:32:dd:
e8:4f:f9:f8:4d:d3:cc:c0:10:47:30:74:16:6c:11:
0f:8d:1e:f2:39:89:db:65:8c:fe:c5:f3:b5:6f:6f:
b3:a0:9d:c7:65:68:17:13:db:32:4a:e3:ce:8a:4d:
82:a5:0f:43:d5:b8:e8:9d:ae:d7:59:6d:12:06:3f:
61:91:70:15:19:ee:d7:32:70:c7:12:ae:66:54:bf:
8f:81:7b:27:0c:8c:5c:df:8a:8d:bb:e2:45:f5:d4:
d2:4c:40:3b:72:fa:f4:a0:be:87:f9:a7:4f:3b:03:
5a:b0:31:9c:56:6e:a1:fb:c7:ef:56:89:2d:81:8f:
13:0c:eb:d8:42:bb:6c:2b:a9:66:15:32:ec:02:c1:
f0:2d:92:2b:4e:dd:8b:32:f5:c3:1e:62:bd:8d:16:
87:2d:ae:8e:85:97:eb:f8:6d:87:e2:63:a3:77:9c:
c0:5c:22:f0:a5:d0:26:92:16:d2:a0:ef:da:f4:b3:
f9:5c:06:a6:3c:31:f3:69:e7:4d:6d:5b:fb:d6:4d:
7d:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:AA:CE:68:C0:9C:A2:0B:4C:0E:5E:60:46:20:75:9C:23:71:1C:52
X509v3 Authority Key Identifier:
keyid:5F:BA:B0:D3:9F:B6:97:9F:E4:D3:D2:48:3A:01:BD:D3:C9:3B:EC:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X7qw05-2l5_k09JIOgG908k77O8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3c524e-12b8-4dcc-8f10-30df62429df0/1/X7qw05-2l5_k09JIOgG908k77O8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3a:44:45:af:e2:93:86:a4:4a:e1:7d:8c:b7:aa:9a:c7:19:
e4:fc:d9:aa:3d:43:c9:0d:ec:9a:56:64:48:ab:af:c3:91:05:
c2:e7:05:9f:17:1c:c6:0e:12:2c:4a:8f:4e:cf:cf:59:81:57:
c8:b8:bc:10:9d:6a:27:e9:0c:f6:01:40:96:5d:b8:2b:13:14:
8f:7a:c2:f2:01:38:b2:af:4d:cc:cb:e9:0d:8a:c6:1c:b1:63:
7e:05:2f:f1:e8:47:a2:31:53:5d:40:5f:df:5c:8c:d3:16:3e:
18:7d:41:15:e5:f5:24:c0:fe:ab:11:f8:db:d8:c4:3f:f0:ce:
f1:f2:a8:f5:c2:9b:d6:df:62:13:6a:db:da:23:6d:23:96:e2:
fb:e6:dd:cf:85:d1:d9:6f:97:5b:6f:cf:fb:41:3c:81:38:8b:
22:4b:91:b4:e6:84:59:be:87:17:9e:be:e5:7a:79:1e:13:2c:
f3:da:3d:62:bb:25:c2:a6:b1:56:ac:6c:76:52:f9:31:f7:ee:
e9:64:ab:8d:00:f0:88:0b:bb:50:45:a9:cd:95:f4:48:d4:dd:
9b:ef:05:f2:19:9e:fa:04:92:40:eb:c5:09:ff:f0:24:fa:0b:
ab:b5:7b:53:80:35:b7:73:e5:d1:e3:fa:07:6e:fe:bb:ef:9c:
1a:ee:c6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 22:49:28 2026 by rpki-client