Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
File: X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft (raw, json)
Hash identifier: KFqJyR6+97AEWvu6Fuy186G0ZUI/vAfNGR9z3/nyR7U=
Subject key identifier: 2C:D8:6A:8D:A9:F1:36:71:F6:E6:EF:63:90:53:E6:6D:47:B0:9A:44
Authority key identifier: 5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
Certificate issuer: /CN=5ff7352d47db9785f49118092de8704a67f6520d
Certificate serial: 01A08A5590336A0DD816E696D09869CAF5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
Manifest number: 1A4B
Signing time: Thu 10 Sep 2026 08:00:58 +0000
Manifest this update: Thu 10 Sep 2026 08:00:58 +0000
Manifest next update: Fri 11 Sep 2026 08:00:58 +0000
Files and hashes: 1: X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl (hash: KMlEMrovdB4C/yzQ4pNtLx23FiYgryW/iH7L9on/QPo=)
2: f14wvH4Znzg6WIk8GxVNwDQOTW8.roa (hash: dWPM7JhBRPyTZuaRPxFbnXkRidLxpwn4nCmrshJkS9k=)
3: oX2MuFZ8yaRVQjpSCUgD1HiKoUg.roa (hash: gdua3nJQKjVmAVvDW1nuoRrLS6iVbV5h3laEz26kzUQ=)
4: qql6gI777A1gergrcYaN_jGizsg.roa (hash: nvniz/deTAtTtE36BhXTJgk+6BLR6Hthi8M387vZVHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:55:90:33:6a:0d:d8:16:e6:96:d0:98:69:ca:f5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff7352d47db9785f49118092de8704a67f6520d
Validity
Not Before: Sep 10 08:00:58 2026 GMT
Not After : Sep 11 08:00:58 2026 GMT
Subject: CN=2cd86a8da9f13671f6e6ef639053e66d47b09a44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d8:bc:0a:5b:89:0c:fa:3d:96:eb:3f:57:e1:
0e:6c:9e:6a:b9:d6:33:24:a2:21:57:2b:2d:d0:6e:
4a:4d:05:92:38:1d:da:35:d1:9b:63:2c:a5:61:32:
42:0f:22:de:b5:fe:38:d9:1b:f7:97:fd:13:91:64:
22:ca:dc:c4:da:8c:64:1e:2b:59:bf:97:f7:03:80:
b9:fd:16:b5:95:9e:ae:0e:a3:9f:f9:9a:14:31:14:
99:9d:47:1b:d5:a3:ed:c4:db:44:91:95:4b:82:92:
83:cf:c4:3b:40:ca:66:2e:08:d8:c5:08:b2:65:d5:
27:a3:7c:3b:3c:45:3f:cb:51:60:99:2c:84:8a:96:
de:5c:92:9d:58:05:d3:b2:ff:7b:35:62:3c:cb:de:
b5:3b:40:51:25:45:3a:53:17:ff:a5:bb:25:20:6d:
48:29:54:c4:da:28:b7:d5:f1:d4:a7:d9:63:82:b6:
cf:8d:cf:7f:ae:e4:be:2a:7c:8a:66:21:03:6c:f2:
0b:b2:2b:15:d2:3c:c3:50:ac:b3:87:8f:36:68:a6:
06:f2:b9:d3:e9:b3:c5:73:46:08:6d:f4:c3:6c:13:
f7:0c:f5:93:98:54:23:7e:aa:75:36:4b:1a:86:9c:
ba:9c:93:71:09:06:0a:a8:93:10:d8:a3:60:25:3a:
6b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:D8:6A:8D:A9:F1:36:71:F6:E6:EF:63:90:53:E6:6D:47:B0:9A:44
X509v3 Authority Key Identifier:
keyid:5F:F7:35:2D:47:DB:97:85:F4:91:18:09:2D:E8:70:4A:67:F6:52:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_c1LUfbl4X0kRgJLehwSmf2Ug0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d5d2b3-7c42-4785-9596-517481d0f850/1/X_c1LUfbl4X0kRgJLehwSmf2Ug0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:bf:09:f5:db:e8:c2:c2:4c:ad:55:b7:47:7b:48:2a:fc:e5:
af:6e:26:a6:a3:1b:ec:cc:86:fe:95:83:50:6e:4e:8e:d8:0f:
9e:96:c4:a3:19:9e:45:a0:b8:a6:4b:5f:cd:64:99:dd:4c:8b:
32:4b:2a:a0:6d:37:dd:fa:54:21:57:8f:12:95:ed:72:e7:c0:
77:e7:2c:24:79:9d:a8:ec:3f:02:02:99:41:05:60:36:1d:52:
6b:20:fa:b4:5d:08:22:33:89:b7:69:86:b8:47:74:64:b1:59:
38:64:d6:24:d2:3a:b2:93:99:6f:42:ab:bd:80:1e:39:40:0b:
9a:f5:91:6c:6e:0b:70:39:4a:a5:35:97:ef:01:6e:45:d1:3e:
19:8c:9f:f3:65:7a:c6:40:ab:c7:dd:97:f2:ba:e7:18:54:89:
8f:23:ad:32:66:f0:63:63:7e:c9:45:cc:92:c7:95:e1:79:e9:
2c:51:6e:35:7f:db:18:23:0f:3f:c4:c2:1c:26:4b:1d:02:c2:
11:04:67:54:ae:a9:2b:b8:87:1d:20:9b:fa:db:25:9c:e4:8a:
76:fe:b6:18:16:d4:de:25:cc:63:34:81:85:72:4c:65:97:99:
54:6a:c2:4b:26:cd:af:93:6f:b0:a4:4b:d6:7c:d0:2c:08:43:
bb:41:73:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 18:40:45 2026 by rpki-client