Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
File: X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft (raw, json)
Hash identifier: Rwzk1pAwJZW0mtZhu3cz3BeTVdSUzPrizSWXwuDgs/A=
Subject key identifier: 37:DF:84:CD:42:E2:4D:B7:23:90:05:E5:36:C5:05:CE:BB:46:30:52
Authority key identifier: 5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
Certificate issuer: /CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Certificate serial: 01A17F2AB81494B139C3C69DE64C27824C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
Manifest number: 0432
Signing time: Tue 27 Oct 2026 21:01:08 +0000
Manifest this update: Tue 27 Oct 2026 21:01:08 +0000
Manifest next update: Wed 28 Oct 2026 21:01:08 +0000
Files and hashes: 1: 2aR01OFymFEwZxvW0ul_qajB_MU.roa (hash: uOcW0MztVBXCRsokN174A3EZiiQc7C1Cn12xFKZuxJI=)
2: X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl (hash: nMMbUfOS8Iugjd92VWwoxT2iBxi47zhjbYvmTDAWGFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:b8:14:94:b1:39:c3:c6:9d:e6:4c:27:82:4c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Validity
Not Before: Oct 27 21:01:08 2026 GMT
Not After : Oct 28 21:01:08 2026 GMT
Subject: CN=37df84cd42e24db7239005e536c505cebb463052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c3:71:22:5a:8d:fd:b4:f4:65:8d:4e:34:cd:
04:96:d8:dd:8d:e6:7c:43:9b:8c:79:7e:f6:83:55:
7a:11:f4:28:65:7a:85:b6:18:be:ba:79:88:d4:a9:
e8:70:7b:04:ff:29:9a:76:8b:9b:b0:28:b9:f9:a3:
96:18:92:e4:93:bb:69:69:b0:d2:09:00:66:5e:1a:
4e:d3:dc:d5:db:96:d1:5d:81:10:65:b3:ae:e7:cc:
3e:a8:bd:e6:4e:50:9d:bd:52:28:ab:14:80:a1:f8:
96:9a:27:d4:e6:8f:53:e7:87:bb:85:b0:03:13:91:
c1:da:e4:0b:9e:e8:94:14:c7:27:0b:61:dc:0d:9e:
7a:2f:a6:72:c8:fa:cc:ff:ce:65:e1:11:a2:1d:e6:
f6:26:c3:32:c9:73:2b:64:8f:9f:2f:ce:55:1e:95:
55:29:4e:ff:26:92:94:e3:c8:ef:75:d9:6d:33:f1:
7f:a3:43:f0:20:d0:05:b8:26:e5:90:1d:44:8c:ae:
46:07:48:47:3e:20:6a:cf:ec:4d:07:e1:1c:f1:86:
13:7e:80:06:52:e2:9d:76:1c:a1:29:9c:c3:1d:57:
e7:99:f2:4b:8b:a5:c7:0d:35:b5:2c:ab:c3:5e:eb:
63:6d:d0:84:b4:a6:60:c4:a9:ca:d1:74:7e:9f:1f:
63:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:DF:84:CD:42:E2:4D:B7:23:90:05:E5:36:C5:05:CE:BB:46:30:52
X509v3 Authority Key Identifier:
keyid:5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:d3:62:46:14:bc:2b:0e:1d:bc:b8:f7:1a:6c:0d:8a:40:0a:
5b:d8:12:ab:3a:bb:4d:5c:e2:f2:74:78:1e:b3:71:0d:8e:61:
7f:94:94:36:db:7a:ba:99:98:1d:05:4e:7b:45:68:c1:36:06:
01:2a:3f:1e:75:b5:df:e4:9d:b8:8a:ed:40:7c:db:89:73:5c:
c8:24:f5:bd:4d:bd:81:d9:27:1d:ed:ae:5d:eb:de:21:82:a9:
50:d4:9e:b6:48:ff:75:d5:26:73:3f:f5:29:a3:c9:e2:6d:15:
96:94:db:aa:43:30:cf:b5:48:3e:57:72:c1:c6:9a:c9:55:c0:
c8:53:af:f7:55:1f:2a:07:a5:22:43:03:98:a8:7a:fe:51:aa:
66:9d:97:ca:e1:18:6d:8a:16:21:8a:bf:36:5e:40:f3:ac:3a:
8a:48:d7:43:90:f0:d1:e6:cc:0f:1e:ea:cb:c7:ca:f5:6a:a8:
12:48:4e:b6:ee:a5:25:20:8b:82:70:82:67:54:8d:5c:06:41:
48:5f:1b:d8:2c:31:e4:93:83:e0:95:5f:ba:0a:d1:46:57:aa:
2e:f5:02:22:a6:df:24:09:54:01:f3:71:a9:d5:e2:ba:d4:56:
d3:c0:7e:93:b8:61:8b:15:df:5a:2e:77:e9:d1:8c:ec:35:14:
cf:8d:a1:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 04:55:00 2026 by rpki-client