Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
File: X6TYBGSXj26_upX3RaMwVyb3LZM.mft (raw, json)
Hash identifier: BmAo+C9EwoQJj4Un/AxjVKnlIr7YuXgg7fafFxzJfGU=
Subject key identifier: F7:88:25:2E:1D:0F:BF:51:50:B5:8C:DB:98:30:57:9F:6C:64:6B:9C
Authority key identifier: 5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
Certificate issuer: /CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Certificate serial: 019D3909F41CD851177183C4244A02BA470C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
Manifest number: 12A4
Signing time: Sun 29 Mar 2026 10:00:46 +0000
Manifest this update: Sun 29 Mar 2026 10:00:46 +0000
Manifest next update: Mon 30 Mar 2026 10:00:46 +0000
Files and hashes: 1: OgANtrj8j6WImSC_x9463NVhsNw.roa (hash: 0EdUSPwLZaULLi34jwJduN5d3rfdYn4zQ6i+IIL5P2I=)
2: X6TYBGSXj26_upX3RaMwVyb3LZM.crl (hash: NyodMQVeuPbSVFTIw2+GqYCCUx0v9QbDjA8+JsaxCtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f4:1c:d8:51:17:71:83:c4:24:4a:02:ba:47:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa4d80464978f6ebfba95f745a3305726f72d93
Validity
Not Before: Mar 29 10:00:46 2026 GMT
Not After : Mar 30 10:00:46 2026 GMT
Subject: CN=f788252e1d0fbf5150b58cdb9830579f6c646b9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3a:6f:9e:49:94:a9:c3:8f:6f:99:9e:55:69:
99:ee:bc:d8:29:f0:64:67:d4:06:b3:60:ea:e6:5d:
12:d2:73:69:ef:a1:d3:69:2c:01:72:4e:b7:51:0f:
62:d2:03:b9:56:d9:77:83:5f:4f:e9:01:94:04:e8:
8e:62:20:24:dc:82:13:a0:0a:28:5c:cc:8e:e8:15:
73:7f:91:6c:24:78:94:a8:e7:03:78:bb:9e:ae:1d:
df:18:52:d2:4a:f9:17:f4:a3:08:8a:99:08:1d:22:
3d:82:73:b9:f0:67:be:f0:dd:4c:50:83:51:f7:72:
1d:95:d0:9d:fe:cd:02:ea:c0:47:05:fe:d9:03:ee:
2e:db:eb:10:53:3b:5a:c3:76:c9:15:ab:15:22:db:
bf:ba:e5:6c:75:76:b6:47:96:bd:34:97:93:55:00:
04:fc:e3:5e:be:7a:35:5c:83:91:48:33:3f:a2:a0:
f9:d2:71:b1:3d:1b:3c:b2:34:c9:22:5b:92:35:ed:
e0:90:e6:e6:0a:eb:e6:63:e0:6c:c4:9b:fb:b6:c0:
86:c2:28:70:3b:11:34:fa:fb:ae:41:d8:e2:0d:bd:
7d:0f:8d:2a:c5:7c:a0:a6:84:e3:ee:41:8c:94:3e:
3f:a3:ca:ae:95:d7:70:e1:99:bc:1e:8d:95:ed:c4:
fe:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:88:25:2E:1D:0F:BF:51:50:B5:8C:DB:98:30:57:9F:6C:64:6B:9C
X509v3 Authority Key Identifier:
keyid:5F:A4:D8:04:64:97:8F:6E:BF:BA:95:F7:45:A3:30:57:26:F7:2D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6TYBGSXj26_upX3RaMwVyb3LZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e050b4-9ba0-4e85-9d76-4fa6242b8a3a/1/X6TYBGSXj26_upX3RaMwVyb3LZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:68:8b:c8:1f:84:41:41:3c:be:e3:c9:ae:8a:9f:e4:ff:11:
4a:c1:55:fc:72:01:46:12:f3:fa:ec:f0:48:f7:75:3c:d5:05:
db:9a:f2:6f:e8:e3:2b:87:3e:c0:c2:a3:74:bf:a1:a2:b6:24:
ab:91:33:b7:71:14:24:f1:12:1e:a4:eb:68:20:ca:74:5d:15:
ef:3f:7a:4c:23:51:3b:a3:0a:94:00:0f:33:43:2a:e1:00:73:
4c:45:d6:5e:ba:2f:4a:d2:d7:bb:d5:fd:a6:5b:c6:9e:e3:68:
68:7d:cd:ba:7f:2f:f0:65:52:10:f9:76:ba:ac:71:17:27:be:
5f:5a:7e:22:54:10:df:c9:58:da:6d:45:68:2e:58:15:42:4f:
1f:fc:9c:50:f1:c6:a5:29:56:f6:13:ed:00:09:de:5c:27:57:
64:19:c3:23:52:49:73:62:80:71:b4:22:c2:f6:19:d1:a5:0b:
66:29:66:b2:bd:90:0f:6d:a9:e0:7c:03:55:24:f0:81:17:e2:
3c:57:0f:c6:20:a8:36:8e:70:bd:a4:5a:62:e1:fb:70:4e:96:
7c:13:a7:5d:24:2f:92:f6:5d:aa:1b:a4:3c:27:b6:b2:2f:67:
99:ea:a5:34:97:7c:84:e5:3c:36:35:ed:c2:3c:88:d6:b6:19:
77:e6:b0:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:58:02 2026 by rpki-client