Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
File: X8SomHZcMDixWg01lyQ5Qdo8CWw.mft (raw, json)
Hash identifier: K0rcDmybGOog2KDVf1XRWj4spuJ79HfVWd7u5O7Hi3k=
Subject key identifier: D9:38:6D:98:0A:5A:52:AF:BC:31:6D:D7:BC:4D:1E:80:26:1E:3B:DF
Authority key identifier: 5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
Certificate issuer: /CN=5fc4a898765c3038b15a0d3597243941da3c096c
Certificate serial: 019E830EC112EC4ABBDD9CA7ECCB6B079C3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
Manifest number: D1
Signing time: Mon 01 Jun 2026 12:00:42 +0000
Manifest this update: Mon 01 Jun 2026 12:00:42 +0000
Manifest next update: Tue 02 Jun 2026 12:00:42 +0000
Files and hashes: 1: X8SomHZcMDixWg01lyQ5Qdo8CWw.crl (hash: VY7Zb6BjKcU730anvxu4bSzcxtp5iwf3VWJ/ivD4JkY=)
2: Y3QKQzEPDmZm8PJypZh9nJ9wgpY.roa (hash: uGJeMzvWRvF44ZA525KqGwzFGcmEAKAT9aDouXzGutU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 02 Jun 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:0e:c1:12:ec:4a:bb:dd:9c:a7:ec:cb:6b:07:9c:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc4a898765c3038b15a0d3597243941da3c096c
Validity
Not Before: Jun 1 12:00:42 2026 GMT
Not After : Jun 2 12:00:42 2026 GMT
Subject: CN=d9386d980a5a52afbc316dd7bc4d1e80261e3bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9c:9d:70:5d:d8:d5:f9:4e:e5:50:16:9a:88:
76:ea:51:eb:6e:6d:e0:4a:68:94:01:c0:33:76:54:
18:81:d1:f8:a6:87:50:53:a2:12:28:b5:ab:aa:bd:
a7:73:5a:85:33:b7:4b:b5:f6:11:f4:2d:69:43:09:
6e:54:5e:20:69:af:b3:06:f5:17:8b:a6:e1:74:d1:
9f:5c:be:a1:c1:fc:b8:a6:be:a8:4a:8d:e8:8f:26:
89:f7:9d:13:2f:3d:79:29:03:31:9f:15:f0:5a:4a:
86:7e:88:0c:55:dc:0b:d6:41:5d:32:aa:30:ae:59:
13:72:94:47:57:0a:79:e1:63:fd:0f:30:62:3e:c2:
d2:b3:3b:a5:79:25:07:31:85:64:d7:7d:12:b6:1f:
ab:b0:8d:e9:ee:7b:52:98:4d:7e:0b:6b:61:b2:35:
25:76:53:d6:a7:68:1e:94:d4:70:6d:f7:3c:49:28:
8b:c1:44:7c:f4:50:0d:e6:22:aa:d8:f6:7b:4b:6c:
41:f0:96:39:90:4d:3e:ff:fa:4f:18:dc:b1:b1:9a:
25:03:9e:8e:7a:55:5c:0a:12:31:d7:03:f0:52:e6:
6d:65:1f:e3:41:5e:93:8b:06:06:c8:ee:cc:77:e9:
eb:a6:03:63:71:b2:44:ad:78:e1:aa:0a:16:87:35:
d6:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:38:6D:98:0A:5A:52:AF:BC:31:6D:D7:BC:4D:1E:80:26:1E:3B:DF
X509v3 Authority Key Identifier:
keyid:5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:18:bd:bc:6a:59:c9:02:a9:8d:21:d0:13:55:7a:fc:16:c9:
ae:65:23:a1:68:8b:09:0c:38:70:6a:ce:73:26:97:da:f7:e0:
40:4a:c5:27:c9:22:8d:45:7e:2b:6c:a7:14:2b:21:48:7f:49:
85:03:f5:37:2a:c8:81:6b:6e:62:33:4a:59:91:cf:54:69:5f:
73:ed:6b:70:a0:14:b6:dc:04:bf:a4:9d:39:09:6b:ed:f4:94:
24:69:06:01:8c:ab:44:ed:c7:92:d0:7e:19:6d:e3:f0:8e:f8:
9d:c3:f1:00:29:79:79:32:7a:30:db:f7:c4:04:ae:a2:3e:79:
83:8b:e6:83:75:bd:2a:98:d3:27:0d:f8:8b:fc:30:28:9a:f6:
de:99:38:13:fc:1d:b2:cf:96:c4:73:fd:72:96:dd:12:78:d3:
4e:5e:e3:7c:cc:a8:cd:8d:05:3d:e9:8d:45:4e:54:72:1b:02:
55:80:a2:9f:2f:a8:43:de:df:02:48:6d:7c:db:d5:00:67:0b:
cf:3f:44:d5:56:5a:82:05:4b:a8:5a:b1:f9:58:e7:43:71:ed:
d0:b1:ec:eb:3b:cb:0a:3c:63:2c:15:0e:0f:9d:78:8e:bb:20:
1e:e0:a7:10:27:6a:25:07:5a:e5:61:c0:f4:46:73:57:ab:0c:
5a:11:aa:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 1 22:21:42 2026 by rpki-client