Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
File: X2tkyBuOyHNUU-lAP72UlpiWmUA.mft (raw, json)
Hash identifier: ycI8neuJgRFtTn1jzP/39r460WQuHtegvizILeRuDEE=
Subject key identifier: 80:3B:3D:28:BE:DC:6F:E8:7D:4E:F7:B1:4E:B2:7A:24:CE:57:55:81
Authority key identifier: 5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40
Certificate issuer: /CN=5f6b64c81b8ec8735453e9403fbd949698969940
Certificate serial: 01A16647439A84B7934FB656C354B2D85385
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
Manifest number: 0154
Signing time: Fri 23 Oct 2026 01:01:48 +0000
Manifest this update: Fri 23 Oct 2026 01:01:48 +0000
Manifest next update: Sat 24 Oct 2026 01:01:48 +0000
Files and hashes: 1: MwwTtfqSDI8q5-iLJ6gRVj5w5_A.roa (hash: 1nyg//DPGxUyvWbSkzZcVUWN8V8QWNENdy2yUz4eoxQ=)
2: X2tkyBuOyHNUU-lAP72UlpiWmUA.crl (hash: MFRxlMdaMN6lPktTH/I7l62x60HcPbzNy3HG++mNmIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 01:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:66:47:43:9a:84:b7:93:4f:b6:56:c3:54:b2:d8:53:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b64c81b8ec8735453e9403fbd949698969940
Validity
Not Before: Oct 23 01:01:48 2026 GMT
Not After : Oct 24 01:01:48 2026 GMT
Subject: CN=803b3d28bedc6fe87d4ef7b14eb27a24ce575581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e9:f7:bb:b3:7e:8c:9c:97:1e:26:c4:b6:d6:
2a:78:de:5f:d4:23:db:eb:56:e4:54:e6:6e:ec:e9:
fb:55:c0:42:30:6b:27:3d:f8:a3:d4:4d:ad:70:0c:
7f:22:69:bc:26:37:b3:85:6c:c6:d9:2c:bc:84:a9:
d1:b2:32:e8:e1:e5:fe:2e:1e:e1:72:9d:2e:b9:1d:
e7:32:f5:93:af:0f:a6:eb:63:1f:3a:89:45:b0:da:
bf:3e:be:62:bb:18:89:86:69:94:77:ec:4e:ca:1b:
21:2a:d0:7a:a9:a5:4a:11:9f:3d:37:07:1a:1d:bf:
7a:b3:77:3e:1e:77:34:5f:7c:ed:67:15:1d:99:2a:
82:9c:bd:d5:3f:7b:c9:0d:63:66:42:89:8c:78:bb:
33:ed:f6:36:8a:6c:d8:1e:73:c1:62:3b:05:be:7f:
31:fa:d6:85:42:bf:77:6f:73:af:4d:b1:7c:44:4d:
38:65:47:65:1f:1f:84:2e:95:77:fc:91:0f:af:04:
f2:a1:00:1e:70:69:c2:99:67:93:45:95:7c:12:d4:
00:d5:ab:e1:e7:7d:5f:32:3d:76:97:af:09:8a:20:
eb:03:8e:e7:8a:91:9d:ec:f3:c2:1f:8a:f3:3d:5f:
aa:06:89:94:0d:eb:bd:f3:98:fb:6a:1e:39:44:c5:
58:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:3B:3D:28:BE:DC:6F:E8:7D:4E:F7:B1:4E:B2:7A:24:CE:57:55:81
X509v3 Authority Key Identifier:
keyid:5F:6B:64:C8:1B:8E:C8:73:54:53:E9:40:3F:BD:94:96:98:96:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2tkyBuOyHNUU-lAP72UlpiWmUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/410cdf-3bd2-4b23-a523-92e0e28d5998/1/X2tkyBuOyHNUU-lAP72UlpiWmUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:a2:87:25:58:ba:ab:75:cc:4a:4c:21:89:44:02:3a:f7:ce:
90:e5:fc:97:e1:f7:fc:fb:1e:41:01:a5:9e:d8:23:75:93:2c:
19:10:f2:f9:c9:25:45:eb:db:4f:44:48:84:3f:6f:35:02:43:
1c:ec:9e:e0:37:af:d4:15:32:d7:83:9a:3f:06:8a:95:00:a2:
49:20:e9:16:8d:8d:58:a3:08:c6:be:67:b9:ad:a9:d9:6f:67:
ed:f5:96:f0:36:65:81:2d:ed:65:3a:72:37:30:9b:71:2b:b3:
72:07:9d:69:15:1d:74:67:0d:04:30:58:d8:bc:b5:09:c6:f0:
b9:f1:60:1e:67:66:d0:e9:46:2d:1a:61:0a:8e:ee:40:ad:9a:
52:38:08:b7:aa:d9:9b:5c:66:dd:6e:b0:f0:da:8e:de:3a:de:
39:40:b3:c5:81:4c:08:fe:d8:87:27:e5:e6:db:f7:14:fb:41:
10:cf:86:65:66:e3:bb:e1:73:5e:f7:e6:8a:7d:bc:7c:d9:fc:
21:5e:b0:44:ce:01:c9:d1:a6:76:2d:9b:30:41:99:71:37:bf:
db:94:76:2c:e2:d3:d5:92:cb:e8:cc:7e:e1:c1:9f:bb:90:34:
ec:dd:38:f4:5a:c9:d9:81:34:38:a3:58:27:e6:c2:bb:ea:df:
84:6d:53:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 07:36:03 2026 by rpki-client