Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
File: X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json)
Hash identifier: jI2lvgJ/bQApgIN7n3kzZERrU9LUlQ18c6IgqcsqiNA=
Subject key identifier: 3D:1A:61:53:C1:39:42:D2:3D:E7:7F:8D:43:20:85:9D:06:42:A7:EC
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial: 01A05A0DDDDC22A4E451F8116ED6D853E8C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
Manifest number: 1A2E
Signing time: Mon 31 Aug 2026 23:00:53 +0000
Manifest this update: Mon 31 Aug 2026 23:00:53 +0000
Manifest next update: Tue 01 Sep 2026 23:00:53 +0000
Files and hashes: 1: 7t-QMh_AB92nrya7tNjufAiIaNU.roa (hash: LTbV2PdrQop6XvBMoLsBRV4fZwR2wk3jFKlBOeHWh48=)
2: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: F8+kHcouFWIKNXRA5GYdSb4yt/PNzfveJdFPizQVX3w=)
3: tyhGCGUUUxBeIkOEmn5CIWeCMz0.roa (hash: Mn4RuAcnVGGM8GO1ajZF2VYJS7eHnyi2wQ/w4qHvAaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 21:38:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5a:0d:dd:dc:22:a4:e4:51:f8:11:6e:d6:d8:53:e8:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Validity
Not Before: Aug 31 23:00:53 2026 GMT
Not After : Sep 1 23:00:53 2026 GMT
Subject: CN=3d1a6153c13942d23de77f8d4320859d0642a7ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:af:c8:86:5a:0a:dd:bb:6b:3f:4c:0e:21:e0:
d6:78:32:c7:f8:bc:75:2d:57:0a:c3:da:50:20:7f:
0d:14:7e:83:e6:b7:54:2a:b5:84:40:15:35:45:41:
70:d5:84:15:d9:17:e9:6c:21:24:c2:63:9e:e1:1f:
96:f2:9c:6b:51:45:83:89:7d:b9:e1:81:15:bb:b1:
51:c6:62:b0:49:c9:2b:91:b4:cd:8f:2e:a6:2d:62:
b4:66:4d:dd:98:77:d7:3f:f8:d2:a1:ad:fc:7a:96:
7e:d0:28:66:1f:c8:ed:b1:43:46:19:3c:85:b4:56:
a6:f2:95:40:27:24:a9:ef:c1:6d:69:f8:22:6a:bd:
fb:df:71:27:37:10:ed:df:c1:63:57:9b:30:08:f8:
4f:fe:3e:68:ac:c5:01:3f:09:7b:a8:6c:97:ff:75:
c0:88:da:3d:f6:82:64:b0:03:b8:1e:a6:15:9e:a6:
d7:cc:63:8e:d5:1b:4f:fa:2f:0f:a0:ee:04:9d:df:
f9:2d:14:eb:71:80:9b:74:96:1b:bd:49:5a:77:bc:
6b:4e:0b:70:ea:56:47:5b:22:5c:a4:4f:68:69:a4:
43:fd:8d:96:72:63:6d:90:19:65:89:74:77:66:fd:
64:25:4c:9a:57:5c:da:13:bd:48:e4:a6:9d:10:62:
83:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1A:61:53:C1:39:42:D2:3D:E7:7F:8D:43:20:85:9D:06:42:A7:EC
X509v3 Authority Key Identifier:
keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:f5:61:45:4e:25:e8:52:0a:6d:1f:50:4b:48:ad:cb:0b:50:
ee:8b:c7:b7:ca:b1:bd:54:7a:2d:15:3e:de:ea:d3:1a:88:3a:
3f:00:db:16:23:8f:a5:2e:ef:28:ac:b8:60:c2:b5:0d:83:af:
25:60:2d:a9:7c:45:86:dc:03:d2:da:ab:8a:66:ed:aa:4c:af:
0c:b9:b1:f7:1e:e5:6f:4a:1f:f3:1a:93:f8:4a:6a:95:c3:09:
30:fe:e4:c0:fc:bb:43:c9:b8:d0:55:10:8a:8b:86:cc:3e:f5:
13:1b:82:50:55:bd:f0:2e:8b:8d:4c:0f:a0:de:17:40:22:84:
f6:eb:ae:56:c4:57:27:bc:86:82:b5:51:ee:6a:dd:52:f8:1b:
f3:a8:47:75:fc:a0:b6:c2:43:04:f6:b1:dd:69:6b:00:4f:78:
5d:47:f6:3c:3a:f9:aa:4f:eb:94:9c:1c:09:9f:23:98:e0:28:
3b:0f:75:ac:8f:ed:20:46:40:2f:bd:62:56:00:0e:8b:b0:32:
68:58:53:75:6a:9c:34:08:9e:aa:1b:17:c0:c4:0c:bf:83:11:
b8:da:ea:c7:65:bc:95:ca:9b:7b:6b:92:1b:36:c7:32:e7:d4:
62:c2:e5:6f:d0:48:2e:68:7c:3c:da:19:fd:a2:c7:37:51:c1:
b1:7e:1e:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBaDd3cIqTkUfgRbtbYU+jJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZjRiYzYxMzdjNTQwYTg5YjkxNzNjYzJkZTMyZWIwNGM5
ZTZlYWUwHhcNMjYwODMxMjMwMDUzWhcNMjYwOTAxMjMwMDUzWjAzMTEwLwYDVQQD
EygzZDFhNjE1M2MxMzk0MmQyM2RlNzdmOGQ0MzIwODU5ZDA2NDJhN2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAra/IhloK3btrP0wOIeDWeDLH+Lx1
LVcKw9pQIH8NFH6D5rdUKrWEQBU1RUFw1YQV2RfpbCEkwmOe4R+W8pxrUUWDiX25
4YEVu7FRxmKwSckrkbTNjy6mLWK0Zk3dmHfXP/jSoa38epZ+0ChmH8jtsUNGGTyF
tFam8pVAJySp78Ftafgiar3733EnNxDt38FjV5swCPhP/j5orMUBPwl7qGyX/3XA
iNo99oJksAO4HqYVnqbXzGOO1RtP+i8PoO4End/5LRTrcYCbdJYbvUlad7xrTgtw
6lZHWyJcpE9oaaRD/Y2WcmNtkBlliXR3Zv1kJUyaV1zaE71I5KadEGKDlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0aYVPBOULSPed/jUMghZ0GQqfsMB8GA1UdIwQY
MBaAFF/0vGE3xUCom5FzzC3jLrBMnm6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWF9TOFlUZkZRS2lia1hQTUxlTXVzRXllYnE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9jMDExY2EtNDU2Yi00ZjUxLWJjOGIt
MDA1Y2I0ZGNhNjNmLzEvWF9TOFlUZkZRS2lia1hQTUxlTXVzRXllYnE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9jMDExY2EtNDU2Yi00ZjUxLWJjOGItMDA1Y2I0ZGNhNjNm
LzEvWF9TOFlUZkZRS2lia1hQTUxlTXVzRXllYnE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUfVhRU4l
6FIKbR9QS0itywtQ7ovHt8qxvVR6LRU+3urTGog6PwDbFiOPpS7vKKy4YMK1DYOv
JWAtqXxFhtwD0tqrimbtqkyvDLmx9x7lb0of8xqT+EpqlcMJMP7kwPy7Q8m40FUQ
iouGzD71ExuCUFW98C6LjUwPoN4XQCKE9uuuVsRXJ7yGgrVR7mrdUvgb86hHdfyg
tsJDBPax3WlrAE94XUf2PDr5qk/rlJwcCZ8jmOAoOw91rI/tIEZAL71iVgAOi7Ay
aFhTdWqcNAieqhsXwMQMv4MRuNrqx2W8lcqbe2uSGzbHMufUYsLlb9BILmh8PNoZ
/aLHN1HBsX4eAw==
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:03:56 2026 by rpki-client