Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
File: X8SomHZcMDixWg01lyQ5Qdo8CWw.mft (raw, json)
Hash identifier: /BJ0NuVBCu6rSahS01lw6SQuk2Z6FxdTLcrjQx4e3Dc=
Subject key identifier: B7:31:6C:75:31:B8:69:FD:AD:5C:FD:91:FD:E8:9E:BC:D3:13:BA:74
Authority key identifier: 5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
Certificate issuer: /CN=5fc4a898765c3038b15a0d3597243941da3c096c
Certificate serial: 01A19AD9D411F9A95EC9F1136BDF27E7E69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
Manifest number: 026B
Signing time: Mon 02 Nov 2026 06:02:09 +0000
Manifest this update: Mon 02 Nov 2026 06:02:09 +0000
Manifest next update: Tue 03 Nov 2026 06:02:09 +0000
Files and hashes: 1: X8SomHZcMDixWg01lyQ5Qdo8CWw.crl (hash: ePOjQzZGPb88TmVQLj0NsKzgcIRDV078VXC0j4IS+9c=)
2: Y3QKQzEPDmZm8PJypZh9nJ9wgpY.roa (hash: uGJeMzvWRvF44ZA525KqGwzFGcmEAKAT9aDouXzGutU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Nov 2026 06:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9a:d9:d4:11:f9:a9:5e:c9:f1:13:6b:df:27:e7:e6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc4a898765c3038b15a0d3597243941da3c096c
Validity
Not Before: Nov 2 06:02:09 2026 GMT
Not After : Nov 3 06:02:09 2026 GMT
Subject: CN=b7316c7531b869fdad5cfd91fde89ebcd313ba74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:dc:bc:26:f3:fb:fb:78:62:08:32:d7:9a:
0b:19:b9:11:ab:bc:29:da:2a:f5:ed:37:5f:e0:72:
63:a4:87:f3:20:b2:a9:1a:89:dc:0f:a5:42:d5:a7:
d5:81:09:6a:e3:df:90:89:0a:1e:d6:43:f8:fc:f4:
30:06:fc:97:1b:15:c5:a8:b6:82:93:98:fa:26:61:
48:cb:79:48:3d:06:1b:53:37:49:0c:e7:1e:e7:55:
65:e7:d3:8c:1c:40:3f:2c:c1:e0:98:fe:74:fc:96:
ed:1d:ca:ea:1a:4c:b0:1c:15:28:1e:ac:b8:78:5c:
00:c7:77:12:1a:ec:e6:6c:96:c6:90:be:c6:44:ee:
65:29:b7:93:7d:74:ed:5d:a8:e9:91:b6:c3:08:e2:
b8:1a:df:b9:71:e5:12:ce:e5:1a:f8:c3:0c:05:37:
46:bb:3c:b8:36:76:fb:eb:f5:3d:a7:60:81:0b:9e:
e8:94:0f:83:be:33:05:b8:4f:cd:9d:9b:11:1f:8b:
f2:d0:a9:02:3d:9e:04:21:7c:da:d2:11:2d:2e:94:
63:10:8e:63:c7:76:f3:23:f6:a8:f7:84:29:0c:df:
7d:12:f5:ef:ee:48:58:cb:f0:54:89:c2:c9:1f:8f:
23:11:bd:0b:7c:1c:10:04:54:6d:12:65:db:a8:d8:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:31:6C:75:31:B8:69:FD:AD:5C:FD:91:FD:E8:9E:BC:D3:13:BA:74
X509v3 Authority Key Identifier:
keyid:5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:85:0d:7b:39:c0:98:80:a6:34:71:d5:5f:3b:26:5a:cb:b4:
c2:05:67:cb:9d:f2:af:4e:66:e5:66:7b:97:89:ca:85:6e:44:
4c:5b:55:57:ea:f6:9a:7f:a7:22:98:28:79:f7:8e:1d:c6:0d:
05:33:c7:a2:84:56:c5:fb:29:3e:d9:a1:26:f9:83:fb:be:a2:
e6:7d:26:31:0c:35:db:42:c8:08:38:d0:bd:a8:a6:cc:55:e9:
48:84:78:7b:c6:1b:d5:35:b5:bb:5b:39:af:10:52:39:e0:51:
2f:90:6f:da:9c:a6:3c:39:ba:76:82:36:71:91:f8:42:d0:fd:
7c:df:bb:70:bf:4a:8f:50:d9:d7:84:77:80:96:db:db:df:63:
5c:fa:32:a9:3c:1e:e4:bb:00:77:7c:7f:67:64:29:e2:7b:ba:
e6:29:22:c6:f2:3b:9d:84:65:34:24:61:b2:f7:5b:15:88:d2:
4e:9f:03:66:72:bc:11:ed:82:9f:e2:36:e7:34:71:43:5c:b4:
af:03:0d:15:89:49:64:b5:09:14:fb:c4:1a:bc:5c:b8:f7:d6:
49:ed:86:b6:fa:27:0c:7c:05:2d:e5:66:2c:1e:59:f7:8a:80:
c4:5f:24:50:f7:c9:9a:0d:c3:9a:e4:59:3e:91:66:1b:db:f4:
1c:d6:7a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 12:45:01 2026 by rpki-client