Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
File: X2tkyBuOyHNUU-lAP72UlpiWmUA.mft (raw, json)
Hash identifier: puWVaQBHn7UZ5kIedVrzh1b+fI0d7SH210anDmxDa9w=
Subject key identifier: BF:43:B3:4A:A0:A1:83:E1:2F:76:9A:06:AB:2C:BF:CF:F8:C4:B0:E1
Authority key identifier: 5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40
Certificate issuer: /CN=5f6b64c81b8ec8735453e9403fbd949698969940
Certificate serial: 019F8568D7E17196B61FAC5480BAF267AC3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
Manifest number: 5B
Signing time: Tue 21 Jul 2026 16:01:08 +0000
Manifest this update: Tue 21 Jul 2026 16:01:08 +0000
Manifest next update: Wed 22 Jul 2026 16:01:08 +0000
Files and hashes: 1: MwwTtfqSDI8q5-iLJ6gRVj5w5_A.roa (hash: 1nyg//DPGxUyvWbSkzZcVUWN8V8QWNENdy2yUz4eoxQ=)
2: X2tkyBuOyHNUU-lAP72UlpiWmUA.crl (hash: fyzS+AhLIYr3yZAAuMIjEBVg3o92wuJrsNYkVFioRes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:68:d7:e1:71:96:b6:1f:ac:54:80:ba:f2:67:ac:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b64c81b8ec8735453e9403fbd949698969940
Validity
Not Before: Jul 21 16:01:08 2026 GMT
Not After : Jul 22 16:01:08 2026 GMT
Subject: CN=bf43b34aa0a183e12f769a06ab2cbfcff8c4b0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e5:10:03:9f:41:93:d1:97:d6:3a:04:e8:df:
b3:df:33:a6:c3:4d:50:be:b7:f3:dc:0d:a8:53:ea:
15:b1:87:4e:38:27:c5:33:34:b4:64:ea:0d:af:63:
25:2e:92:a8:7e:2a:66:38:dd:04:22:d2:cf:99:19:
58:f2:e2:7e:8d:03:bd:74:41:87:e9:cb:23:9e:82:
fc:52:91:25:fe:77:73:cb:8e:2c:4d:0c:ac:31:92:
4f:74:11:e4:24:5f:fd:b6:5a:43:bd:6e:03:0e:1f:
48:84:e9:29:3c:b0:72:79:7c:4d:3e:86:57:8e:c8:
09:bb:60:bf:20:57:c1:56:66:a8:dd:a8:01:0d:b0:
96:8a:88:01:ef:a6:23:ff:2b:bb:5b:42:96:6e:a5:
e9:f4:c3:57:08:c1:88:f9:06:2a:58:3b:6b:fb:10:
c2:35:79:3e:c8:ee:d4:cd:2e:88:58:a5:5d:88:b8:
41:4d:d8:5d:ee:67:0b:72:90:79:b3:fe:42:a1:9b:
2d:52:3f:f5:7c:ca:d1:1c:b2:b7:60:53:ac:8b:d9:
50:4b:b3:9e:74:01:ed:a2:99:68:d7:75:27:32:eb:
92:5c:11:e9:48:d4:17:78:e4:c6:ae:a2:f9:0c:31:
4f:22:81:1f:9c:11:d3:e9:7e:39:94:38:ca:63:3b:
9e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:43:B3:4A:A0:A1:83:E1:2F:76:9A:06:AB:2C:BF:CF:F8:C4:B0:E1
X509v3 Authority Key Identifier:
keyid:5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:86:4f:79:08:02:6d:00:86:0c:4a:09:83:5e:40:e4:b8:e9:
93:0d:18:c2:a3:ac:0b:64:91:be:c4:87:fc:3a:d1:d4:d4:b5:
2e:dc:09:85:40:de:c5:9c:2c:e8:d4:21:28:4f:70:e2:f9:9d:
0a:0e:5b:ff:b8:b2:67:20:10:9d:a3:fa:1d:46:86:99:fe:a9:
d8:11:85:b0:01:cc:67:43:fc:75:cb:9d:9b:68:79:32:1f:a4:
66:26:84:a4:33:bd:68:31:1c:22:47:07:95:19:1e:37:a5:17:
51:61:91:cb:5e:50:85:94:a0:d9:74:63:35:d1:d8:e5:6e:9b:
a5:82:ea:f8:40:f2:7c:b3:ff:54:bf:e2:bf:2f:3b:57:fa:8b:
20:52:f6:46:6e:bc:ab:59:f8:dc:6e:f2:3e:35:77:78:d2:39:
09:9f:d6:41:cf:f4:00:c6:47:f6:ea:72:2c:bd:e9:30:8e:91:
82:46:4b:b1:4c:7c:48:64:8b:3c:0d:02:eb:88:d5:fe:79:62:
46:58:2f:b0:5a:81:94:07:d5:da:7c:cd:6a:f1:60:ba:b6:c5:
52:83:56:4b:9e:17:df:45:c6:4b:7b:7e:b2:61:f7:65:6f:69:
b4:89:9d:28:10:7d:07:d7:ae:a0:f4:f9:95:29:9d:63:35:0e:
24:d8:ab:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:29 2026 by rpki-client