Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
File: X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft (raw, json)
Hash identifier: 1N0PUjkE3l4juK9EeAv4BadMPGhEVqzjrRuoZXFcTe4=
Subject key identifier: B1:C9:AB:69:DD:6F:38:35:42:5F:AA:6E:F5:11:1B:07:A7:98:07:EF
Authority key identifier: 5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
Certificate issuer: /CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Certificate serial: 019FA03B18027A44C9DB751E63986DAA7002
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
Manifest number: 033A
Signing time: Sun 26 Jul 2026 21:00:55 +0000
Manifest this update: Sun 26 Jul 2026 21:00:55 +0000
Manifest next update: Mon 27 Jul 2026 21:00:55 +0000
Files and hashes: 1: 2aR01OFymFEwZxvW0ul_qajB_MU.roa (hash: uOcW0MztVBXCRsokN174A3EZiiQc7C1Cn12xFKZuxJI=)
2: X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl (hash: aWv5oGT0iu1hLVHhUiM3J2/Nwq2u9n0d3lOOkMlEMyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3b:18:02:7a:44:c9:db:75:1e:63:98:6d:aa:70:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Validity
Not Before: Jul 26 21:00:55 2026 GMT
Not After : Jul 27 21:00:55 2026 GMT
Subject: CN=b1c9ab69dd6f3835425faa6ef5111b07a79807ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:61:b3:eb:76:47:24:42:2f:35:ae:7a:df:33:
1e:8f:67:d3:8d:13:9a:ac:bd:23:84:96:d9:8b:ae:
32:68:13:c9:92:da:96:1d:8c:a2:a9:82:f1:c8:c6:
5f:e3:ab:32:43:35:fa:a8:83:0b:cd:ed:1d:07:5a:
d0:d2:15:65:22:8f:e0:42:c7:6b:fd:4c:00:0e:7a:
13:b2:9c:1d:fa:3a:88:20:f2:a4:93:2d:f7:e6:58:
c0:59:ec:b6:b7:6e:fa:f2:c1:22:2f:9e:fa:bd:c8:
7a:af:0c:95:38:c9:7f:6f:0f:ce:7c:7c:40:ba:e7:
00:0d:39:71:74:61:ee:1d:0c:2c:62:6e:39:06:f2:
ea:40:f4:30:5d:c5:3e:16:24:6a:b4:fb:ad:94:88:
a0:e5:72:d2:42:8b:c6:cd:9a:9b:ea:d0:d4:ad:c6:
f4:a6:df:9e:51:c0:6a:2b:6c:df:d3:cc:f9:24:1e:
64:b5:9e:32:f1:89:87:d3:6b:0e:b8:04:f3:58:8b:
36:70:23:43:b4:ea:60:ca:91:73:8d:be:d3:d8:3c:
2e:6a:ba:9c:8e:e3:93:32:17:28:a7:42:de:42:b2:
09:80:cc:9b:9b:ec:56:ac:7e:d6:37:4c:9e:e4:77:
2f:f5:d3:0e:33:37:f2:9a:02:6d:ad:0f:60:7e:b4:
72:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C9:AB:69:DD:6F:38:35:42:5F:AA:6E:F5:11:1B:07:A7:98:07:EF
X509v3 Authority Key Identifier:
keyid:5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:7b:f0:c2:36:b7:13:1a:18:a1:ad:e7:2c:99:80:4b:c6:9f:
8e:f7:2e:84:31:fe:4b:59:81:03:e2:9c:dc:5b:9d:91:89:6e:
04:7e:cc:25:b2:b5:74:a8:ab:20:f9:37:bc:59:cc:06:13:10:
f1:3d:19:74:25:02:7a:57:0d:13:27:ce:a3:8f:5d:7c:51:65:
7e:90:a0:9b:98:83:87:a2:8a:a3:e6:7d:49:2f:47:cd:d8:88:
98:02:43:4a:ec:9d:a4:fd:ff:94:f2:ef:f2:b9:d0:fb:6a:84:
0b:ec:97:ba:e6:05:9b:fd:3d:11:b2:b3:bd:96:0d:c0:f4:76:
9f:8f:d2:9e:35:bb:19:42:96:31:82:e8:97:d3:8d:20:1f:d3:
7c:99:4e:b7:d1:5c:b5:ff:cf:d5:24:38:c4:46:74:a4:02:61:
77:cb:29:4b:4a:f8:ab:b7:6e:c2:f3:1b:27:34:5f:b6:80:07:
72:35:e4:69:b0:e4:86:ac:bc:85:0f:a8:b3:a6:80:ea:6e:2b:
09:83:a4:c1:7e:6e:76:d6:79:dc:a5:be:80:fc:c3:d6:ec:8e:
30:47:5c:8d:2c:96:ba:58:90:c5:de:a3:a6:92:5d:33:61:4d:
51:83:77:32:02:d7:fc:40:7f:57:76:1d:18:23:ff:1f:c7:9c:
3c:56:d7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:29:03 2026 by rpki-client