Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
File: X8JHQzBLf9mgZdIs2JzalQReJpw.mft (raw, json)
Hash identifier: O2+VXGENk737xTPbSvrdUSMhR8hdxFbVm75dt8K9C1U=
Subject key identifier: E1:73:CA:FE:B2:0A:19:26:76:19:75:BB:94:67:B9:D8:CC:A2:BD:78
Authority key identifier: 5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
Certificate issuer: /CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Certificate serial: 01A03B5F8C206D4FA9617122A64EA69E4BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
Manifest number: 1A1F
Signing time: Wed 26 Aug 2026 00:01:52 +0000
Manifest this update: Wed 26 Aug 2026 00:01:52 +0000
Manifest next update: Thu 27 Aug 2026 00:01:52 +0000
Files and hashes: 1: X8JHQzBLf9mgZdIs2JzalQReJpw.crl (hash: u5bfn7ZWOojT3HvepYA18eZ522rLAUvOgBSwwq9kaBI=)
2: awXRcerSAP4jrgOUBQ68Ss0j_JE.asa (hash: 7H/s8bfQHFW6k1q0+FHWfKFzwz0TBvvLD09+Qjh3Rf8=)
3: mde2iraZFBwTbp97_tvjs2IMwjU.roa (hash: Q0iRTXsb5myu//hBM4zbKFOJNKJsTWjqhNvukcS55wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 00:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3b:5f:8c:20:6d:4f:a9:61:71:22:a6:4e:a6:9e:4b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc24743304b7fd9a065d22cd89cda95045e269c
Validity
Not Before: Aug 26 00:01:52 2026 GMT
Not After : Aug 27 00:01:52 2026 GMT
Subject: CN=e173cafeb20a1926761975bb9467b9d8cca2bd78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d7:d1:e2:4e:b8:f6:2d:15:09:88:43:9e:90:
a3:ba:f7:4c:84:bd:15:58:dd:dc:f9:27:6c:9c:c9:
4a:d4:68:80:32:1a:9f:d5:d0:f5:22:b7:a5:5d:5e:
bb:cb:fd:1a:d9:6c:41:d5:40:2c:e2:26:cb:67:6e:
9e:b8:57:bc:15:ac:52:28:aa:1b:d7:eb:33:09:25:
02:ff:d0:c5:68:de:b0:41:17:bf:28:74:bc:27:47:
c7:9a:16:89:94:48:cd:67:bb:9d:d8:35:79:69:7a:
95:ec:86:85:41:a0:a4:6c:ea:d8:d7:cc:35:26:7a:
84:6d:77:6c:37:2a:e4:cc:c5:1d:d8:44:b2:fd:f6:
08:93:0e:80:19:09:73:75:18:e4:b4:ee:d8:de:2c:
a9:43:7c:1c:af:32:fa:7a:65:be:51:a8:39:3b:06:
f9:0e:69:88:72:09:4e:57:ae:90:7a:ca:d7:08:c8:
49:a6:c5:e8:fb:fc:ff:8b:62:5d:a7:8c:3b:5a:1b:
d9:d2:36:01:2c:f6:1c:26:3b:7d:d4:b9:19:b6:35:
cb:68:bd:2b:2e:e2:0b:d8:07:69:a3:73:6e:0e:40:
5b:74:29:42:79:ae:a9:17:e8:53:97:03:ce:a5:32:
6c:9e:13:6f:33:0e:a7:db:11:b5:d5:39:0d:db:62:
9c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:73:CA:FE:B2:0A:19:26:76:19:75:BB:94:67:B9:D8:CC:A2:BD:78
X509v3 Authority Key Identifier:
keyid:5F:C2:47:43:30:4B:7F:D9:A0:65:D2:2C:D8:9C:DA:95:04:5E:26:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8JHQzBLf9mgZdIs2JzalQReJpw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e5a2c7-0453-48ba-b10c-0ba9679de2e6/1/X8JHQzBLf9mgZdIs2JzalQReJpw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:cd:4b:65:5e:a9:2a:69:15:5d:f3:57:26:8a:4f:08:1f:f3:
ce:c8:de:33:c0:77:a4:b2:2b:6e:bd:e2:ab:75:13:59:f6:5a:
d2:3c:15:cd:1e:6b:90:92:7a:40:de:7b:c6:55:0e:58:c7:d2:
dc:82:19:2c:69:6f:bd:6a:46:e8:66:3d:b8:8f:f4:ba:61:86:
be:96:0e:ef:5d:15:db:03:f5:df:59:02:13:d8:6d:e0:58:df:
4a:18:8a:3c:e9:ae:37:5f:c1:2e:01:1b:45:7f:5d:b6:4b:f3:
b1:42:0a:93:22:6f:07:4c:62:a3:10:6e:91:69:35:30:ce:c5:
88:21:69:c6:40:84:b4:a1:17:e1:2c:bd:da:61:a2:06:a4:6c:
9e:a6:cb:f8:bd:76:33:62:27:9f:19:3d:85:fb:d5:c0:3f:92:
92:2e:70:73:17:53:9a:e3:8a:c9:9d:85:82:d2:75:d9:c8:b9:
1c:98:1d:96:63:5a:99:2e:38:36:9c:90:89:d6:5e:8f:22:a9:
6a:41:10:ab:20:80:89:d7:e0:16:b9:1d:ce:07:74:e8:ea:13:
f2:58:7a:30:1f:c7:a7:0c:1d:87:77:6a:7b:e9:1d:95:7d:6c:
47:c8:82:37:a4:18:f0:0d:ad:de:1b:80:b3:f2:8d:4b:5e:e0:
22:55:f8:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:37:45 2026 by rpki-client