Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.mft
File: X3xLrCTiMhOZILbFzqcF74MP11U.mft (raw, json)
Hash identifier: MQqnT2ly4y12Lzk26qBH9ri+ZpunaSRJXD4LN/1woWo=
Subject key identifier: 27:81:FE:80:EB:AA:36:75:80:AD:5B:76:22:34:D4:DD:ED:47:0D:D0
Authority key identifier: 5F:7C:4B:AC:24:E2:32:13:99:20:B6:C5:CE:A7:05:EF:83:0F:D7:55
Certificate issuer: /CN=5f7c4bac24e232139920b6c5cea705ef830fd755
Certificate serial: 01A1863F7D39D980CF3BB33C2DDEF44877C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3xLrCTiMhOZILbFzqcF74MP11U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.mft
Manifest number: B1
Signing time: Thu 29 Oct 2026 06:01:10 +0000
Manifest this update: Thu 29 Oct 2026 06:01:10 +0000
Manifest next update: Fri 30 Oct 2026 06:01:10 +0000
Files and hashes: 1: 7zDEmWPI1ENhomTy26ZsTYp2BBk.roa (hash: HMKeSJgU65eJmE17l+0Kgm4LpuhW6XeTtaT/MhlrW+s=)
2: X3xLrCTiMhOZILbFzqcF74MP11U.crl (hash: 1blgF+oFtyTAIjxENbulUGwHWyepXSl7kkC67WJTOwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3xLrCTiMhOZILbFzqcF74MP11U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:3f:7d:39:d9:80:cf:3b:b3:3c:2d:de:f4:48:77:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7c4bac24e232139920b6c5cea705ef830fd755
Validity
Not Before: Oct 29 06:01:10 2026 GMT
Not After : Oct 30 06:01:10 2026 GMT
Subject: CN=2781fe80ebaa367580ad5b762234d4dded470dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:24:2b:cd:0d:9d:95:38:b7:85:fa:98:df:9c:
86:ef:03:3b:89:4f:2b:30:d7:6b:da:ab:45:89:7d:
6a:50:e5:cb:53:e3:33:af:1c:e5:bb:0d:58:8c:5c:
49:06:1c:b3:f4:9b:46:45:4d:ba:e6:69:3d:7c:81:
da:f2:04:7b:28:56:25:54:c4:56:06:87:05:e9:6b:
51:f4:52:28:ef:47:c2:d2:39:cb:16:cb:d0:21:db:
39:7e:63:ad:f0:4d:f9:b3:f0:8c:4c:50:1e:32:1b:
e2:0e:98:c8:95:de:b1:ce:cc:36:67:74:23:28:6a:
2b:2f:12:f2:fe:23:c2:ad:d5:71:cf:83:f1:41:fa:
c2:ab:a1:95:53:81:d5:e8:48:bd:07:d1:f0:7b:4b:
66:88:17:4d:ae:05:e6:52:e8:9a:ec:ca:3b:d6:9a:
37:b0:c3:a6:c4:b2:2d:f3:02:82:9f:a1:db:76:0e:
fc:f0:43:39:86:6d:83:70:13:c2:78:45:cc:ff:08:
99:ea:0b:b1:08:5a:c9:e7:07:74:b0:d6:ed:73:b9:
2d:3e:8f:d5:30:65:a4:d0:9b:5d:85:0f:18:27:a1:
b8:b8:3a:3d:0f:6f:f0:cd:c7:7a:04:3c:c6:81:d2:
c1:38:1f:ec:a7:af:58:1f:11:dc:08:4f:72:e3:bd:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:81:FE:80:EB:AA:36:75:80:AD:5B:76:22:34:D4:DD:ED:47:0D:D0
X509v3 Authority Key Identifier:
keyid:5F:7C:4B:AC:24:E2:32:13:99:20:B6:C5:CE:A7:05:EF:83:0F:D7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3xLrCTiMhOZILbFzqcF74MP11U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:b0:6c:5e:39:ad:6a:18:5b:77:24:50:c1:a1:bb:ad:10:f0:
94:9c:76:4e:6c:af:79:9d:ff:10:65:8e:d6:a2:17:62:24:84:
d3:2d:43:df:07:5b:25:53:a9:f8:7c:d9:d9:56:11:d0:a7:29:
76:a0:83:7a:a4:da:e4:90:9d:16:02:c7:f2:c9:31:93:d3:83:
f7:c2:a5:65:cc:a1:ba:44:de:3e:89:5b:ca:2b:7c:85:86:5b:
7c:13:62:5f:d6:0c:5c:35:9b:58:d0:bc:04:f3:0a:2c:2d:2f:
e0:e1:c2:4f:da:36:77:f3:7b:76:55:50:d6:17:94:dc:c5:1d:
6f:76:ec:c7:bb:f0:84:cc:e1:49:3b:07:20:72:5f:80:6b:ee:
f2:29:4c:9e:34:95:47:8b:7a:71:3b:f7:3e:d0:87:21:88:e2:
c0:83:0f:ae:bb:6a:af:77:5c:88:3f:bf:5a:56:cf:f8:dc:5c:
1e:c7:d9:14:f1:4e:a3:30:74:e9:04:6d:b2:77:ac:79:86:d6:
68:84:6a:8a:6f:ca:14:f8:e0:2d:e0:c2:30:be:0e:75:eb:73:
09:03:f5:b4:3b:68:27:e5:5e:8b:25:a6:0c:b9:17:d3:39:81:
33:b0:61:85:f7:d8:1b:e4:62:c9:81:be:c6:1e:84:6e:35:49:
26:96:67:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:59:35 2026 by rpki-client