Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
File: X8SomHZcMDixWg01lyQ5Qdo8CWw.mft (raw, json)
Hash identifier: UyyZFwqJTOIBYP8CiHTR90D6Gd0yXW852qVjbBUjZPw=
Subject key identifier: FB:35:6C:B7:B7:6D:5B:40:3A:34:BD:CA:4C:53:3E:31:07:EC:71:65
Authority key identifier: 5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
Certificate issuer: /CN=5fc4a898765c3038b15a0d3597243941da3c096c
Certificate serial: 01A056679119E38C4C88D2258D15B9B1EAD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
Manifest number: 01C3
Signing time: Mon 31 Aug 2026 06:00:22 +0000
Manifest this update: Mon 31 Aug 2026 06:00:22 +0000
Manifest next update: Tue 01 Sep 2026 06:00:22 +0000
Files and hashes: 1: X8SomHZcMDixWg01lyQ5Qdo8CWw.crl (hash: CcrnwiWHvHSStTOd0my9sPS2OFp5NngTFZt262VzBQI=)
2: Y3QKQzEPDmZm8PJypZh9nJ9wgpY.roa (hash: uGJeMzvWRvF44ZA525KqGwzFGcmEAKAT9aDouXzGutU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 06:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:67:91:19:e3:8c:4c:88:d2:25:8d:15:b9:b1:ea:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc4a898765c3038b15a0d3597243941da3c096c
Validity
Not Before: Aug 31 06:00:22 2026 GMT
Not After : Sep 1 06:00:22 2026 GMT
Subject: CN=fb356cb7b76d5b403a34bdca4c533e3107ec7165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:c5:6b:d1:99:ae:42:62:29:70:bf:1c:37:eb:
7c:6a:08:17:71:38:13:5a:84:1f:6b:23:4f:6d:23:
d0:8b:10:dc:8a:37:02:72:9e:a4:17:bf:da:51:0a:
66:4d:b1:da:c9:15:d9:19:86:07:c5:35:f4:28:8a:
63:f2:81:bc:87:0e:e5:74:2c:15:7c:63:2b:9e:df:
e4:1a:9b:8f:16:ed:6a:06:e3:ba:de:e7:35:cd:59:
99:aa:f3:2b:41:7a:83:b2:f0:af:59:03:4c:57:15:
a6:56:ee:86:d3:78:b6:47:44:b2:64:e0:66:14:43:
30:38:67:a8:7f:e5:e9:f7:ce:85:6e:57:b6:f2:8e:
6c:70:39:81:49:ca:ed:c2:6d:1c:51:b8:c8:c6:b4:
96:09:c0:5e:1a:74:bc:c2:31:ef:17:14:7d:aa:c9:
61:63:58:9c:6b:ae:6f:88:bf:22:cd:7f:84:8f:63:
de:0b:8e:05:c5:e8:f0:81:33:2e:ad:51:45:5e:c3:
06:e4:41:f5:c8:e1:8f:41:8a:4a:b5:63:6a:cb:d2:
20:cd:6a:37:ec:d0:1c:0b:76:d8:14:67:27:e4:10:
98:ff:99:3e:04:6f:9f:9b:58:5d:c7:19:c0:dc:f9:
98:99:39:03:89:a2:7b:c5:5f:2e:9b:f6:ea:b9:dc:
4a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:35:6C:B7:B7:6D:5B:40:3A:34:BD:CA:4C:53:3E:31:07:EC:71:65
X509v3 Authority Key Identifier:
keyid:5F:C4:A8:98:76:5C:30:38:B1:5A:0D:35:97:24:39:41:DA:3C:09:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8SomHZcMDixWg01lyQ5Qdo8CWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/1c2977-42ed-4501-b424-9d9b0245d108/1/X8SomHZcMDixWg01lyQ5Qdo8CWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:10:f1:79:d5:bf:0d:6b:df:3b:f2:f2:6d:d7:a3:b9:ef:bc:
61:8d:40:08:b4:24:5e:bb:3e:6a:0d:eb:b4:b1:d1:ea:3f:74:
cc:cb:61:2e:f7:aa:30:cb:7b:fb:1f:66:bd:26:67:d8:65:b1:
b8:e1:4c:bf:c1:f8:4c:e7:ca:fe:4e:bb:86:37:08:f2:a6:55:
5f:bb:6b:74:35:72:03:cf:ff:e4:ba:02:26:a9:07:98:47:ac:
5f:76:fd:fd:0c:c1:bf:d0:d6:63:ca:38:94:ba:a8:17:e0:dc:
4c:53:17:ae:e4:8c:bc:c2:13:3d:5c:ad:cc:74:d4:24:c1:58:
b6:5a:04:ec:5c:c9:96:79:2a:ba:e7:28:88:cf:89:b8:88:08:
50:fd:07:1b:30:ca:6e:27:0a:52:79:ac:63:b9:2f:58:44:fb:
bb:aa:a8:34:c0:dd:b0:c2:a4:14:8f:58:8e:56:78:cb:87:41:
87:44:16:ae:e7:66:f1:fe:e3:c8:1d:a1:36:c2:87:a2:fe:2a:
b0:b7:e1:f8:dc:1a:c5:92:97:f9:74:be:1c:73:c8:a2:bf:5b:
4e:a5:39:7c:93:4f:41:73:5d:dc:e7:16:22:9c:d9:95:42:52:
69:7d:ad:45:47:83:00:57:79:25:a0:f2:e6:dc:5e:8f:c6:35:
b5:a8:89:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 31 11:11:36 2026 by rpki-client