Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.mft
File: X3vX5dUz3lJtSY3NimMEZzkgjSE.mft (raw, json)
Hash identifier: H5Y5cwTb2Nsd1dM/QVk4CeKWI1Rv+7QFYCzAYolRim0=
Subject key identifier: 7C:8A:53:4D:EB:7B:B9:A8:E0:AE:83:B5:AE:00:14:71:49:60:3A:25
Authority key identifier: 5F:7B:D7:E5:D5:33:DE:52:6D:49:8D:CD:8A:63:04:67:39:20:8D:21
Certificate issuer: /CN=5f7bd7e5d533de526d498dcd8a63046739208d21
Certificate serial: 01A0F23099FC247DCE3FC107B7CC6599F37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3vX5dUz3lJtSY3NimMEZzkgjSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.mft
Manifest number: 71
Signing time: Wed 30 Sep 2026 12:01:06 +0000
Manifest this update: Wed 30 Sep 2026 12:01:06 +0000
Manifest next update: Thu 01 Oct 2026 12:01:06 +0000
Files and hashes: 1: HUhw9cLx8_fWSY-eLVPdIS95ScI.asa (hash: tay+QqVKxzFNXYmywf6FycLZJgzN0dQqtFAyPOYkOPM=)
2: X3vX5dUz3lJtSY3NimMEZzkgjSE.crl (hash: bceOUbcMUk7D6FawZcF+8YviFYpCAAVk5rBawET5GbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3vX5dUz3lJtSY3NimMEZzkgjSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:30:99:fc:24:7d:ce:3f:c1:07:b7:cc:65:99:f3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7bd7e5d533de526d498dcd8a63046739208d21
Validity
Not Before: Sep 30 12:01:06 2026 GMT
Not After : Oct 1 12:01:06 2026 GMT
Subject: CN=7c8a534deb7bb9a8e0ae83b5ae00147149603a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ef:6e:51:0d:93:a1:41:f1:fb:79:ea:a4:00:
94:a7:06:ac:e1:e8:5a:a5:e8:68:d9:a5:e0:01:76:
60:9e:ea:f0:6f:de:44:9d:d8:46:35:8e:44:a8:6c:
d4:c5:62:8f:d6:39:54:9e:5d:29:22:e1:62:1e:8f:
23:60:07:72:cd:3f:e5:b7:a1:dd:fe:80:e4:6b:22:
7b:fd:40:fe:7a:ee:92:b9:7d:e7:a7:4b:ca:61:cd:
34:b0:7f:15:9d:82:ab:9f:6f:b8:eb:08:b9:b7:b3:
9a:f5:57:c6:fe:1c:1c:8a:6a:3f:0f:d7:1d:a0:f6:
90:c1:c7:91:32:7b:a1:30:30:fb:c8:91:ab:78:4f:
9d:59:7f:b7:a5:79:11:89:1c:82:55:0f:1a:42:56:
ce:ae:e9:72:b4:79:6c:c2:a0:58:6a:fd:23:d7:fc:
2a:29:10:ab:e8:e5:fd:12:e8:18:d7:95:5a:65:6f:
42:c5:43:89:6a:92:74:1e:c6:9a:fd:ce:41:62:47:
42:4b:73:a3:87:31:67:bb:c6:45:d2:23:6c:06:f7:
60:ea:83:6e:5c:e3:bc:28:44:c0:f0:3a:cb:c4:8a:
16:e1:b4:1f:26:50:48:db:31:95:09:9e:5a:72:36:
e6:72:5c:42:35:92:5b:f9:c4:69:22:44:b4:15:fe:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8A:53:4D:EB:7B:B9:A8:E0:AE:83:B5:AE:00:14:71:49:60:3A:25
X509v3 Authority Key Identifier:
keyid:5F:7B:D7:E5:D5:33:DE:52:6D:49:8D:CD:8A:63:04:67:39:20:8D:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3vX5dUz3lJtSY3NimMEZzkgjSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/900f3a-8310-4eb4-9f94-100bf9a79551/1/X3vX5dUz3lJtSY3NimMEZzkgjSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:d7:e5:08:56:88:fd:9c:43:f4:3e:8c:a6:6f:98:d5:fe:01:
82:cc:b1:d1:f1:6b:ed:b8:34:bf:b9:f5:25:9d:6f:13:56:35:
a8:d9:6c:2b:9d:21:95:e4:ad:b3:01:b3:a6:33:29:5c:ee:a8:
37:63:f0:7a:8b:07:1d:f5:bf:4a:00:59:d2:18:1a:9f:3b:38:
8a:fd:46:5c:3c:ed:5d:c4:ac:4c:98:1e:fb:74:ab:1c:60:01:
af:79:a9:7b:93:e5:ea:46:57:e4:0f:47:ef:fc:bb:4f:d6:6a:
e1:68:c8:de:33:33:cf:d2:c7:7d:43:31:af:53:30:b4:8e:c5:
59:db:26:ce:3e:f5:d0:89:66:3e:b6:d8:fc:06:d0:ed:0b:d1:
a4:69:b9:9d:31:a5:1f:64:f7:31:83:4c:99:19:fe:4e:75:2c:
df:b1:c3:d5:b9:90:bc:76:2a:c5:b8:c1:fc:8c:fe:68:d5:9a:
97:c1:e3:3c:9c:2e:c9:4f:02:8c:c1:e6:00:f3:ec:73:68:bb:
63:f7:a2:e5:4f:78:f2:e5:7a:a2:f5:65:82:5f:bb:23:5f:a0:
9b:8e:48:20:6f:0a:d4:bd:fe:b9:14:a5:c7:f2:88:0a:59:da:
2d:de:0d:51:17:8c:a6:55:bb:0c:48:51:e0:0d:5a:21:c0:eb:
69:e5:a1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 22:38:13 2026 by rpki-client