Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
File: X2tkyBuOyHNUU-lAP72UlpiWmUA.mft (raw, json)
Hash identifier: 8PLdwrxO/FoFzCCQ8bdkSIRKVt6DYs6RSSH7p7BjTyE=
Subject key identifier: 53:A4:F4:AD:06:02:BB:DA:11:D0:A1:B7:1A:50:10:02:F6:B5:AE:4F
Authority key identifier: 5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40
Certificate issuer: /CN=5f6b64c81b8ec8735453e9403fbd949698969940
Certificate serial: 01A06F1522E4D5AEFF8067CCF0BA939F43C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
Manifest number: D4
Signing time: Sat 05 Sep 2026 01:00:51 +0000
Manifest this update: Sat 05 Sep 2026 01:00:51 +0000
Manifest next update: Sun 06 Sep 2026 01:00:51 +0000
Files and hashes: 1: MwwTtfqSDI8q5-iLJ6gRVj5w5_A.roa (hash: 1nyg//DPGxUyvWbSkzZcVUWN8V8QWNENdy2yUz4eoxQ=)
2: X2tkyBuOyHNUU-lAP72UlpiWmUA.crl (hash: uP5CL/1CuVsQTq4irEHkWX62VwBn4AAhKFNzcZjReaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:15:22:e4:d5:ae:ff:80:67:cc:f0:ba:93:9f:43:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b64c81b8ec8735453e9403fbd949698969940
Validity
Not Before: Sep 5 01:00:51 2026 GMT
Not After : Sep 6 01:00:51 2026 GMT
Subject: CN=53a4f4ad0602bbda11d0a1b71a501002f6b5ae4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6f:48:32:b6:d4:08:1e:11:1f:f1:2f:2a:c2:
e2:fa:84:ed:ba:a8:d6:5e:74:82:f6:eb:00:7b:4d:
01:d0:26:f6:d8:66:fe:09:fd:3e:af:81:62:95:e6:
d4:a3:f6:04:23:74:48:6d:fa:fb:22:1d:7f:8c:84:
4a:92:42:02:f4:67:20:8b:a8:5a:e3:d6:c7:f1:0c:
8c:b3:07:bd:6a:7a:79:66:35:cf:76:a5:8a:64:26:
89:73:aa:bf:0c:96:52:38:6f:89:f8:ff:34:63:e6:
7a:81:96:a9:20:2b:1c:e5:b7:d9:17:6c:a5:88:41:
4e:32:1f:88:32:b0:59:b6:41:02:9a:63:99:d3:a5:
ae:a9:a8:2f:43:17:13:74:e2:86:39:17:6f:e0:80:
a2:7f:4d:35:90:35:4c:2b:38:d2:c2:9c:76:49:dc:
06:47:5a:61:06:b1:76:e5:bf:3c:54:e0:f7:05:82:
5c:d8:66:23:db:39:79:fa:d6:5e:8e:52:bf:9c:e1:
68:2b:11:48:8b:a0:70:ff:ee:b1:1e:ab:c6:b0:83:
bc:0e:91:bb:d9:b1:89:28:4a:fa:ab:37:07:eb:49:
55:6e:0a:26:c4:b4:2e:9c:03:9d:22:ba:d3:93:6d:
2a:f3:82:7a:a9:57:bc:38:31:f5:26:2c:1b:71:6f:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A4:F4:AD:06:02:BB:DA:11:D0:A1:B7:1A:50:10:02:F6:B5:AE:4F
X509v3 Authority Key Identifier:
keyid:5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:97:b7:81:9b:a4:cb:20:6c:8c:b4:bd:db:67:85:a2:80:1d:
41:ef:73:67:f2:5d:e1:48:63:9e:74:9d:01:50:0e:bc:10:8b:
8b:99:42:d4:c9:da:7a:8f:01:8a:f8:ba:77:d8:56:c4:bb:09:
52:1d:24:f8:c2:49:61:cb:45:aa:b8:f0:84:17:46:e2:b2:41:
be:28:2a:1e:a4:9b:9a:12:ad:19:2d:17:4a:2c:d3:39:fd:7b:
31:25:85:af:74:d7:bc:19:31:4d:1e:99:38:5f:98:e4:f1:4f:
ff:c8:84:5f:4a:77:fe:64:ab:d7:bb:32:fa:ee:e8:bb:dd:c1:
5d:5f:c4:8f:63:15:61:7f:b4:4f:ad:30:e8:b0:0e:ef:e0:71:
f2:65:f5:9c:91:d9:ba:64:28:6a:a4:40:47:7c:3d:32:8d:7f:
3a:57:a2:ea:a4:2e:99:59:24:ca:fe:bc:eb:86:cf:8d:bd:62:
9f:6a:a5:28:ae:40:11:d6:57:bd:40:74:5e:ae:98:37:2a:ee:
57:af:9a:42:ff:e7:5d:98:a7:ac:ca:76:93:eb:10:b3:6a:34:
43:35:88:0f:98:27:09:44:3b:e7:7c:38:21:a2:0d:c9:56:62:
d2:15:01:70:5e:04:37:04:f6:62:37:35:67:a2:5d:23:05:34:
77:30:a4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:41:42 2026 by rpki-client