Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
File: X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft (raw, json)
Hash identifier: 1tQojJtLyX3al5SA9UEX/iyjFCED285WRqU5fVrMLsA=
Subject key identifier: 27:EF:7F:EC:DE:02:24:0D:C0:66:70:E6:30:50:A1:72:CB:58:70:F2
Authority key identifier: 5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
Certificate issuer: /CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Certificate serial: 019DAFEA5A41406021459CCC801116737F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
Manifest number: 0239
Signing time: Tue 21 Apr 2026 12:01:04 +0000
Manifest this update: Tue 21 Apr 2026 12:01:04 +0000
Manifest next update: Wed 22 Apr 2026 12:01:04 +0000
Files and hashes: 1: 2aR01OFymFEwZxvW0ul_qajB_MU.roa (hash: uOcW0MztVBXCRsokN174A3EZiiQc7C1Cn12xFKZuxJI=)
2: X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl (hash: /mxLWQiSVXlk9G61abnkBZKvqY3UpCMD3zZ0D0RqVvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:ea:5a:41:40:60:21:45:9c:cc:80:11:16:73:7f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f6b90019d4d2b52ab4caf671c37e9c4d03ada73
Validity
Not Before: Apr 21 12:01:04 2026 GMT
Not After : Apr 22 12:01:04 2026 GMT
Subject: CN=27ef7fecde02240dc06670e63050a172cb5870f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:44:fb:18:36:dc:67:76:2b:01:ec:8a:bb:ea:
cf:9d:57:65:4d:47:8c:cb:bf:71:23:1d:4a:26:d3:
c5:c4:a8:ce:17:f3:37:1b:37:eb:64:74:59:a2:fb:
d1:ed:93:5e:9e:a8:cd:e4:f8:f7:3d:9e:23:bb:82:
13:03:0e:20:61:de:39:b7:87:33:b9:a9:45:5d:f8:
5c:37:ce:50:2d:8e:37:ad:70:32:14:07:63:fb:48:
4b:d3:5c:ec:b5:ac:42:e0:9a:27:3e:d8:44:f2:eb:
66:da:29:60:d3:11:96:01:38:c8:4e:65:f1:c5:f8:
a0:0d:fb:c8:b4:24:4c:93:82:c8:1f:c7:ed:b1:11:
f2:99:bc:5b:2c:85:e0:6e:c4:9e:d1:b5:d6:56:63:
96:c8:c3:1d:cc:e0:29:23:a5:12:4a:cc:ad:bf:32:
44:17:28:4d:6a:63:08:79:20:23:87:a3:9b:22:6e:
b8:8b:fd:8d:45:dc:67:19:d8:15:d6:ed:4d:94:68:
92:b3:2c:81:6a:a6:86:00:fa:57:1a:e2:03:73:eb:
24:e0:e3:75:b0:5f:b9:d2:6d:0c:22:55:e5:c4:9c:
f4:e4:36:34:97:80:ae:00:a8:0d:5a:05:bc:06:1c:
40:a1:d5:a4:2f:0d:4a:9d:34:8a:b8:41:d0:33:f4:
1f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:EF:7F:EC:DE:02:24:0D:C0:66:70:E6:30:50:A1:72:CB:58:70:F2
X509v3 Authority Key Identifier:
keyid:5F:6B:90:01:9D:4D:2B:52:AB:4C:AF:67:1C:37:E9:C4:D0:3A:DA:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X2uQAZ1NK1KrTK9nHDfpxNA62nM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/809616-a008-4a11-bc0a-7cf031fa75ce/1/X2uQAZ1NK1KrTK9nHDfpxNA62nM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b8:ef:6a:5a:a7:92:15:7d:3b:31:b6:8b:4b:04:92:7f:fb:
a8:75:f5:14:fa:8b:64:ee:8f:ab:49:c1:d8:d4:82:37:59:b0:
ba:ca:fe:5d:5d:1b:05:35:46:b8:6f:d0:cb:a4:08:a1:18:fe:
82:4d:4c:ce:38:0e:ef:d9:83:f4:bf:f7:8b:48:cd:74:33:31:
71:aa:62:ec:d7:a6:24:de:22:af:0e:bc:3b:90:bd:69:e3:af:
b5:a5:92:09:63:34:33:64:e4:81:ee:93:3d:00:69:a5:e2:6c:
71:1e:1b:26:17:06:50:bd:e1:94:ad:40:d6:98:54:35:42:14:
7e:e3:71:ee:32:87:a2:89:22:9f:96:c4:20:1f:c5:29:83:90:
2d:f7:6f:31:0c:92:e8:6e:4e:f3:54:f3:cb:20:66:09:d4:21:
f4:78:86:9e:56:9b:11:32:2c:69:9e:46:a4:50:e4:47:22:9d:
12:a8:1c:1b:4c:e7:87:48:ce:ec:82:c6:22:93:d1:8a:40:3a:
32:7f:74:05:86:45:58:d8:04:b2:50:b6:4e:1e:fb:bb:6b:12:
9b:28:67:83:9d:f5:6e:0a:06:f6:02:ed:54:91:80:a6:29:98:
0c:76:50:03:29:15:6b:5c:60:62:d0:45:91:df:ae:86:75:6e:
af:c8:f2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 23:26:35 2026 by rpki-client