Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
File: X8IN7HFLtUY7Fk4VpfihOYolUF0.mft (raw, json)
Hash identifier: JT5dnUPi4URc/1IvI/4gcKOrWPGRp1w67NtALWYli9c=
Subject key identifier: 9C:ED:1A:29:41:53:8F:89:FD:18:F4:C8:7E:9A:46:58:13:D8:E6:1D
Authority key identifier: 5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D
Certificate issuer: /CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
Certificate serial: 01A184F5F8B7E5C1712B6583FD62A21BEF6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
Manifest number: 07C2
Signing time: Thu 29 Oct 2026 00:01:14 +0000
Manifest this update: Thu 29 Oct 2026 00:01:14 +0000
Manifest next update: Fri 30 Oct 2026 00:01:14 +0000
Files and hashes: 1: X8IN7HFLtUY7Fk4VpfihOYolUF0.crl (hash: D4qpnK6MKSRWAJGMISHfG5SDrEV2OyOpYCkHvldLHFI=)
2: uvNf-ODFo6lTEuGrLrORQ7H_M9Y.roa (hash: 5BzdF2coA2UrrcFqyEC8X7uFcWtTvQZa39Bk7bbs6js=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:f5:f8:b7:e5:c1:71:2b:65:83:fd:62:a2:1b:ef:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc20dec714bb5463b164e15a5f8a1398a25505d
Validity
Not Before: Oct 29 00:01:14 2026 GMT
Not After : Oct 30 00:01:14 2026 GMT
Subject: CN=9ced1a2941538f89fd18f4c87e9a465813d8e61d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:69:c6:fb:3c:8f:d6:e1:46:57:56:ac:70:3b:
ae:7b:e9:ca:d5:66:90:2a:88:dd:64:69:03:ed:d1:
05:a5:80:5e:29:28:ad:05:a5:64:67:bc:2e:0f:28:
a1:31:3b:fe:a6:85:55:61:d5:86:b2:5b:96:a5:b9:
e6:73:3f:da:e4:f4:c4:17:65:80:42:1d:f5:38:e6:
0b:51:c1:c8:aa:44:20:dc:56:7f:c7:1b:aa:7a:09:
63:70:55:d1:c3:c3:a0:d4:e6:dc:e2:8a:9e:5e:8b:
b1:42:34:68:1d:6c:91:87:8d:41:2a:b7:6b:e4:74:
8c:c7:98:ca:1c:b7:8d:98:e4:81:85:3c:8d:6d:a5:
32:49:e4:f1:46:95:ef:db:fc:45:a4:85:8f:22:01:
20:02:f6:13:1f:64:a4:d3:86:ca:c2:19:1a:45:f5:
4d:fe:4d:6e:03:af:32:dd:6b:7f:1b:40:d3:b5:8d:
07:6f:ed:e8:f3:24:47:0a:b8:8a:00:23:1f:4d:5b:
47:e2:af:c5:e1:b8:8b:cf:11:1f:f5:fa:82:f5:9a:
ce:38:62:8d:e5:23:b1:25:05:bf:ec:21:52:8f:5e:
cb:b2:c0:a5:08:0f:58:90:49:2e:9c:fa:52:d4:8b:
c7:93:00:58:ae:e1:be:e8:ab:63:c1:18:43:cf:1d:
af:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:ED:1A:29:41:53:8F:89:FD:18:F4:C8:7E:9A:46:58:13:D8:E6:1D
X509v3 Authority Key Identifier:
keyid:5F:C2:0D:EC:71:4B:B5:46:3B:16:4E:15:A5:F8:A1:39:8A:25:50:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8IN7HFLtUY7Fk4VpfihOYolUF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/6797a5-5410-4c0d-b9b7-d99b9f48d0dc/1/X8IN7HFLtUY7Fk4VpfihOYolUF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:22:84:39:ee:cf:89:7e:b8:78:76:ef:9b:c1:ec:db:9b:f8:
8e:c4:13:1d:6d:75:61:53:be:4e:ca:a6:be:6b:24:26:83:cd:
27:83:e5:cc:9e:d0:61:2d:a3:ec:0c:c0:21:81:3f:6b:58:1c:
a9:aa:76:d3:bb:00:ad:b8:d1:46:47:0b:b1:3f:40:05:d4:d1:
0b:7d:b2:41:bb:2c:3e:90:23:1c:79:15:4c:fb:93:05:75:17:
2e:a5:eb:3e:c4:cf:1c:f0:f6:f6:e7:39:e9:14:93:db:b4:8f:
fd:cc:bc:53:d9:7c:0e:06:c2:f8:8a:9f:94:79:1b:18:3a:9c:
a3:88:52:39:b0:b5:ed:dc:ed:fc:b8:11:d7:24:a8:4d:2e:92:
02:8f:70:d7:60:06:57:4d:57:c7:21:61:d2:e8:3c:c8:09:aa:
62:55:d9:b5:8e:ea:97:db:97:80:ce:ae:10:dc:41:92:08:92:
36:4c:24:61:9d:48:0e:91:39:4f:2a:4b:e1:06:e1:11:f4:a8:
36:4d:b4:1b:72:c1:96:7b:50:34:d1:a6:af:d0:73:ca:4a:4a:
4b:1e:d5:03:7f:6d:cd:98:fe:8b:36:9c:a5:d9:28:9f:48:a4:
23:1f:17:e0:9c:8c:4d:fe:ba:b4:d8:d0:e0:22:74:20:7a:e5:
ea:65:e3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:48:17 2026 by rpki-client