Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
File: X8SomHZcMDixWg01lyQ5Qdo8CWw.mft (raw, json)
Hash identifier: /9GpqX5h7W+NUpCjw08R2VufaeehrUzDl1uKmAKSddU=
Subject key identifier: 5E:1F:0F:DF:0C:98:50:05:0F:07:72:09:51:64:EC:D7:F5:0E:CC:8C
Authority key identifier: 5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
Certificate issuer: /CN=5fc4a898765c3038b15a0d3597243941da3c096c
Certificate serial: 019D38D2E8B500A8260860F0870125111B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
Manifest number: 26
Signing time: Sun 29 Mar 2026 09:00:39 +0000
Manifest this update: Sun 29 Mar 2026 09:00:39 +0000
Manifest next update: Mon 30 Mar 2026 09:00:39 +0000
Files and hashes: 1: X8SomHZcMDixWg01lyQ5Qdo8CWw.crl (hash: yD6phvmewXd8Ix7paW5B5KdQrrk4tHbHkNtlucxcNDo=)
2: Y3QKQzEPDmZm8PJypZh9nJ9wgpY.roa (hash: uGJeMzvWRvF44ZA525KqGwzFGcmEAKAT9aDouXzGutU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:e8:b5:00:a8:26:08:60:f0:87:01:25:11:1b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc4a898765c3038b15a0d3597243941da3c096c
Validity
Not Before: Mar 29 09:00:39 2026 GMT
Not After : Mar 30 09:00:39 2026 GMT
Subject: CN=5e1f0fdf0c9850050f0772095164ecd7f50ecc8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:99:17:e9:7b:cd:6d:51:27:bd:95:3f:e1:
7d:0f:6f:af:72:7a:6d:c9:85:7a:37:17:c5:b6:b6:
08:6e:3e:49:6f:b0:26:c2:3d:d8:57:71:11:2a:bf:
1e:5d:c5:33:53:dd:f6:ec:4d:76:84:cb:57:96:d3:
50:54:8b:c0:1c:d7:d7:b0:e6:2a:22:d8:15:c1:d1:
cb:d7:9d:b7:4b:5d:75:f4:6d:c9:f2:99:7e:76:ac:
3b:aa:b0:19:65:d3:12:a0:4f:06:73:19:07:e3:45:
a2:59:7b:2b:b0:9b:90:59:48:8f:69:2b:f7:88:c8:
8f:df:c7:a2:a4:eb:94:f2:61:3e:85:f1:86:4c:b2:
d7:59:6c:83:6b:6c:2d:0f:bf:09:90:61:c8:2e:ea:
e6:78:cb:d4:2c:79:26:7a:92:5f:9c:c7:e3:fa:f4:
81:da:c3:14:92:9d:4a:40:20:6f:96:1c:e2:54:70:
bd:78:62:5c:63:b3:d9:c2:fe:0e:ce:69:12:f1:40:
59:7f:93:e0:e2:ae:8c:5b:73:cc:0b:e7:c3:f8:f8:
2e:14:bc:66:83:fb:13:24:75:89:57:03:e9:f4:92:
03:10:73:95:1a:91:e9:5e:bc:b5:c4:c3:21:c0:56:
e2:0f:41:c6:0c:b2:6c:7b:35:8b:b9:19:a6:5d:05:
66:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:1F:0F:DF:0C:98:50:05:0F:07:72:09:51:64:EC:D7:F5:0E:CC:8C
X509v3 Authority Key Identifier:
keyid:5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:80:9d:c2:a2:02:c1:39:a3:99:44:45:91:34:df:cc:0b:b3:
43:f4:a5:1e:eb:38:56:4b:0c:4b:24:be:9d:3c:76:61:7e:af:
f9:ca:16:5f:15:bb:2e:10:7d:bb:81:8e:e5:de:db:af:4a:21:
fa:09:7d:28:89:87:43:fc:49:20:f9:9c:07:c9:49:6c:86:77:
20:af:0b:13:c6:d6:af:4b:eb:e6:20:f8:13:ad:34:e1:5f:bc:
f4:3f:ec:16:2b:80:99:b2:d1:4a:5f:5b:ec:c6:cb:77:bf:79:
d3:78:10:ab:15:44:ff:4d:36:58:71:6d:75:4c:c5:10:c7:5c:
2e:a8:81:da:cf:92:57:b3:2e:1b:d3:79:22:dc:18:1c:25:06:
1d:c5:7f:49:37:dc:48:e7:4b:6a:65:a8:0b:74:55:fc:12:95:
07:bb:ee:59:37:42:1b:ce:07:7d:c8:d7:e0:2b:1b:dd:dc:38:
2f:93:99:73:86:cd:17:b9:68:ff:69:a5:fe:41:71:b9:59:d7:
74:da:89:c1:63:50:c9:67:76:9a:cb:16:03:ee:69:70:7f:cf:
99:0c:9c:15:7a:10:cd:ac:01:db:ab:60:e8:b4:fc:9d:ec:c1:
f3:b1:39:bc:93:69:9d:40:6f:86:b9:bc:8e:c1:b5:e1:5d:8f:
f8:1e:13:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:15:19 2026 by rpki-client