Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File: X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier: mNButR9WZm4//z3a6Oh+aLeNbwcmxp5gAXPBMGESIYc=
Subject key identifier: 2B:04:0A:EB:A4:3A:1B:6A:30:8E:9F:7D:31:88:F0:6D:C3:2F:36:A4
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial: 01A17F9896C2A4E946B272EB4669A4C81A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number: 1ACA
Signing time: Tue 27 Oct 2026 23:01:08 +0000
Manifest this update: Tue 27 Oct 2026 23:01:08 +0000
Manifest next update: Wed 28 Oct 2026 23:01:08 +0000
Files and hashes: 1: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: +YEPwjfpywp7PUn8yBlccDhkzpw1cjz5TRYNEQxuPZg=)
2: f14wvH4Znzg6WIk8GxVNwDQOTW8.roa (hash: dWPM7JhBRPyTZuaRPxFbnXkRidLxpwn4nCmrshJkS9k=)
3: oX2MuFZ8yaRVQjpSCUgD1HiKoUg.roa (hash: gdua3nJQKjVmAVvDW1nuoRrLS6iVbV5h3laEz26kzUQ=)
4: qql6gI777A1gergrcYaN_jGizsg.roa (hash: nvniz/deTAtTtE36BhXTJgk+6BLR6Hthi8M387vZVHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:98:96:c2:a4:e9:46:b2:72:eb:46:69:a4:c8:1a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
Validity
Not Before: Oct 27 23:01:08 2026 GMT
Not After : Oct 28 23:01:08 2026 GMT
Subject: CN=2b040aeba43a1b6a308e9f7d3188f06dc32f36a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c7:3c:3d:ca:0c:08:cd:ab:b9:57:01:3b:2f:
61:14:4a:67:da:7c:81:df:a1:73:ce:60:d3:3a:57:
89:e7:23:1c:74:b1:b8:99:51:23:f1:5f:3e:07:59:
e3:a0:3d:e2:2e:81:a5:47:fe:ca:fd:f3:ae:db:33:
cc:ca:ef:ec:9a:24:c3:90:bc:7b:3b:a8:08:8e:8a:
5f:43:f1:38:6f:5b:ae:dc:aa:f6:e2:07:53:3b:cc:
4d:bb:c1:2f:68:9a:d8:a0:48:c8:e9:35:f2:c0:76:
32:a2:a1:1a:53:8e:99:f4:bb:1b:32:fb:9d:b7:85:
a7:7d:33:e6:02:70:95:d5:82:ed:55:75:90:c6:e6:
dc:71:94:63:f7:b2:eb:49:b3:30:a4:4b:cb:b4:0a:
f5:47:b3:57:28:7c:80:e9:e6:e9:45:5a:c2:68:fc:
4d:50:94:de:64:67:40:c7:04:65:eb:d5:cb:84:32:
7e:5e:9e:b0:6b:9b:86:f0:95:ac:49:e7:40:fa:14:
9c:85:0c:27:74:c7:ec:77:e3:35:b2:20:3c:28:bc:
49:ef:59:f9:bf:45:05:ce:8b:ee:94:11:9a:84:41:
2a:28:00:c5:a8:2f:3c:9d:5e:ae:a2:20:9a:75:58:
4c:90:08:75:e4:45:c9:84:4f:3e:0e:35:25:2a:be:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:04:0A:EB:A4:3A:1B:6A:30:8E:9F:7D:31:88:F0:6D:C3:2F:36:A4
X509v3 Authority Key Identifier:
keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9d:ae:02:84:7b:38:23:f3:65:d5:81:5e:40:da:95:c4:6f:
56:59:de:82:e7:9a:7c:e4:40:a7:81:05:e0:dc:c9:9e:cd:73:
27:f4:7b:15:82:aa:cb:13:b6:d7:db:e4:f7:86:8f:07:8b:c5:
93:b5:de:88:f0:67:41:8a:45:7e:b8:a1:61:1a:0e:b4:68:10:
e4:05:06:84:f4:7f:c6:45:31:5b:33:56:cc:ac:f5:5b:65:f8:
8d:c8:85:46:69:e4:71:3b:cd:51:dc:9c:8c:37:a0:dc:b8:60:
c9:75:88:35:d7:d4:c2:75:c8:8f:db:2c:af:c5:34:ff:48:d5:
ba:e7:6e:cd:77:0e:2d:0c:67:ce:ff:0e:89:1e:65:0c:e0:43:
88:40:0b:8f:32:39:e0:1a:b6:73:ff:69:53:18:70:da:d5:b6:
f6:a2:a3:0c:e6:fc:2d:db:e5:44:5a:2d:e0:d2:60:1c:81:fd:
64:ce:24:8a:68:30:51:58:2b:c9:1b:3a:90:d6:73:60:ce:60:
04:c4:2e:72:8a:6c:29:08:55:96:d9:08:99:d7:b8:b2:8d:06:
66:fa:5e:94:f2:6d:e3:f9:98:24:21:e0:1c:fc:a2:77:35:a6:
19:49:36:91:39:b3:68:73:29:b0:61:83:63:9c:f7:43:b5:48:
b9:0e:80:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:18:29 2026 by rpki-client