Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
File: X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json)
Hash identifier: gE9/PSzXVa0CwNDRIy1g8BZAqiXhmEPKVWGPl+EjZq0=
Subject key identifier: 82:CA:4F:73:19:C7:6E:06:8A:80:FA:7C:D7:A4:B5:21:27:1D:D7:44
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial: 019D389BABE2FBA4AD10D1A6B22D3B1C0839
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: 7t-QMh_AB92nrya7tNjufAiIaNU.roa (hash: LTbV2PdrQop6XvBMoLsBRV4fZwR2wk3jFKlBOeHWh48=)
2: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: Y0fVhZ2b9yeWRMgx5jmBiyPQ5igKZzK+z1JVGzS0Vq8=)
3: tyhGCGUUUxBeIkOEmn5CIWeCMz0.roa (hash: Mn4RuAcnVGGM8GO1ajZF2VYJS7eHnyi2wQ/w4qHvAaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ab:e2:fb:a4:ad:10:d1:a6:b2:2d:3b:1c:08:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=82ca4f7319c76e068a80fa7cd7a4b521271dd744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:89:2d:0c:b6:c5:7d:5f:83:43:06:4e:f1:1a:
8f:eb:60:c3:73:58:55:01:df:26:f7:66:79:f2:04:
24:23:78:8f:21:7b:6f:b3:56:8b:d5:db:85:3e:5b:
b5:a3:69:f5:dd:52:75:bc:59:85:e9:ba:aa:20:a2:
b9:de:f7:3b:17:8f:33:c7:02:e1:58:ce:a9:65:79:
5a:fe:77:dc:c3:53:5d:0f:b8:0c:a5:dc:2b:40:3e:
f1:dc:43:7a:0b:98:45:0a:50:57:66:53:50:9f:61:
e9:82:a0:65:6d:cc:e7:17:13:e1:66:23:7b:be:dd:
cc:b7:0a:c0:b3:95:ae:ab:0a:84:cf:b6:b3:be:0e:
b8:1a:97:37:5a:90:51:bc:eb:f0:ef:ab:a5:c8:62:
ae:7c:52:65:3d:89:fd:cf:f5:59:af:65:d4:72:b0:
25:09:c2:7b:30:9d:27:85:72:c5:5a:65:04:05:8c:
15:1d:4c:1e:af:b9:a4:37:77:ef:fc:f0:ec:ac:20:
fd:d9:3e:0d:83:16:00:46:73:21:96:ee:9a:99:60:
aa:c3:ae:56:ee:75:34:34:3e:87:65:0c:b1:24:9a:
54:b5:7c:c4:fa:58:e7:86:bb:ef:b4:d1:84:10:b2:
20:77:38:e3:35:cb:a1:d9:b8:3b:78:b6:9e:f3:d5:
77:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CA:4F:73:19:C7:6E:06:8A:80:FA:7C:D7:A4:B5:21:27:1D:D7:44
X509v3 Authority Key Identifier:
keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:8d:09:86:8c:ad:31:6d:fc:91:46:3a:db:95:7e:14:8b:ce:
27:95:5f:f6:8f:11:a9:40:86:5f:26:91:fd:27:cf:e6:b4:82:
fd:d1:b6:4c:a5:1e:54:f7:73:58:2d:31:8e:cf:b3:bc:ab:08:
59:d2:38:e5:5b:33:f5:f6:d5:9d:c3:a7:68:b8:48:21:c7:6a:
c6:a6:f0:d9:b3:ed:70:99:1b:68:bb:09:e4:ba:9a:8d:fc:f4:
80:f3:f7:f3:7e:10:33:14:a3:50:0a:4d:0c:4f:60:f6:de:d4:
46:f6:d7:d8:40:da:b8:c7:25:bd:91:a9:14:85:c6:6c:93:b9:
59:41:5d:79:d2:1d:ee:27:5e:d5:98:4f:23:21:f5:7c:ea:cd:
c8:d9:89:39:ba:54:df:41:6d:18:d7:34:f7:cd:9c:a6:65:91:
e1:72:3e:31:b4:bf:9e:35:49:f7:21:c6:c7:ea:e4:51:36:29:
ea:6a:e5:14:49:7d:dc:af:86:8c:51:02:29:55:2a:57:63:3d:
f5:cf:f0:bf:af:4e:37:3f:fe:d0:d3:25:e1:97:59:4d:14:f9:
d9:44:43:10:1d:a2:6c:90:2f:65:b7:fc:9d:95:4c:f7:35:97:
27:21:9d:b9:f4:01:b6:44:ed:7f:d5:98:c2:96:5a:68:7f:29:
9d:47:bc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:29:39 2026 by rpki-client