Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
File: X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft (raw, json)
Hash identifier: 4oZBNbp1aBlde46r3qqZM/zw7bagDTG7QIiBoHg+Dm8=
Subject key identifier: 82:DC:2D:75:66:FE:04:32:0B:AA:F7:D4:D3:27:17:2A:D9:14:67:44
Authority key identifier: 5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
Certificate issuer: /CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Certificate serial: 019E9D73A69E267A341E21FF5817BD740A92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
Manifest number: 02B4
Signing time: Sat 06 Jun 2026 15:01:02 +0000
Manifest this update: Sat 06 Jun 2026 15:01:02 +0000
Manifest next update: Sun 07 Jun 2026 15:01:02 +0000
Files and hashes: 1: 2aR01OFymFEwZxvW0ul_qajB_MU.roa (hash: uOcW0MztVBXCRsokN174A3EZiiQc7C1Cn12xFKZuxJI=)
2: X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl (hash: XOOp2CA10s6k2NSyWY2ps3f9+rMDuw7JjlC03S4ht5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 12:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:73:a6:9e:26:7a:34:1e:21:ff:58:17:bd:74:0a:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Validity
Not Before: Jun 6 15:01:02 2026 GMT
Not After : Jun 7 15:01:02 2026 GMT
Subject: CN=82dc2d7566fe04320baaf7d4d327172ad9146744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:27:ba:ad:04:de:15:ad:80:3e:6b:68:49:48:
6a:37:c0:87:60:14:0b:ad:e9:ab:f8:22:b4:0a:79:
0d:0f:83:75:b0:7b:00:37:9d:86:df:39:03:1c:b1:
b0:d9:1d:6b:d1:62:74:05:e5:c8:e6:8e:e8:51:cd:
83:06:61:31:95:d4:58:29:69:63:18:b0:fe:64:e1:
44:c9:90:2f:27:d8:a2:bf:2d:0f:b4:26:24:4f:7e:
bc:f0:5d:9f:fc:4e:27:d5:84:2e:66:3f:34:35:22:
db:c9:c2:fd:b8:ef:22:30:1f:c5:f3:c2:32:ee:db:
e1:7d:80:b6:c2:60:23:1a:2b:db:63:45:c4:e6:05:
e1:a4:71:be:4e:3d:b6:c1:35:13:89:81:08:bf:2d:
82:e4:08:1d:22:f6:1b:8f:48:46:cf:79:22:0c:62:
a5:c8:af:6b:42:42:ad:87:b9:e1:af:c3:bb:b6:63:
14:33:a0:d6:06:d9:0d:72:4f:2d:18:53:3f:6e:a8:
ff:44:dd:2a:0e:1a:49:74:3e:2d:54:76:f4:ac:c7:
0e:50:c8:23:db:02:76:77:73:e1:be:a7:97:5d:68:
a0:c1:6a:bf:13:02:84:85:5b:43:49:51:25:1e:6b:
b8:8e:c6:98:ef:ac:94:f2:82:5a:2d:18:81:a0:e9:
77:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:DC:2D:75:66:FE:04:32:0B:AA:F7:D4:D3:27:17:2A:D9:14:67:44
X509v3 Authority Key Identifier:
keyid:5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:63:99:3b:40:c0:75:4a:e6:81:3a:4e:b4:99:b7:9f:ca:91:
32:db:ed:f0:af:a2:fe:76:0a:4b:ee:07:37:1d:4d:7e:0b:17:
d8:7b:92:69:63:89:ba:2d:04:02:64:35:66:3b:f3:c8:e1:57:
32:03:fc:15:ba:dc:fb:7b:0e:f6:43:9b:30:7e:43:27:14:ea:
ce:d4:ca:c7:75:8c:45:4f:e7:63:e2:91:86:28:bc:60:03:5c:
bd:27:c1:8d:4b:ea:bf:19:e8:33:34:b6:f5:4a:03:34:1f:b8:
90:d0:4e:c1:a9:51:72:9e:a1:c9:70:f9:11:cf:e1:ac:df:c9:
f2:33:c5:6d:bc:57:a9:23:e1:e3:02:5e:05:ee:0a:6f:ee:6b:
c4:94:30:9d:59:04:9d:7e:47:24:8a:04:0d:a1:08:10:63:7d:
f6:2a:ee:f0:38:32:02:3f:76:5d:97:37:91:5b:d5:1f:ee:fe:
87:8f:c0:33:df:c2:00:8c:b9:2e:64:a5:ca:53:d5:d5:d8:b0:
69:79:2d:70:4f:45:dc:be:9b:f6:ac:d6:f8:71:9b:71:c3:c2:
df:40:8a:27:d3:9c:a4:5c:f6:b4:3c:24:d5:26:8e:b8:a2:d1:
65:eb:28:a5:c2:39:34:c0:83:3b:35:2d:fa:56:68:b4:b6:1c:
04:a0:4f:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:24:08 2026 by rpki-client