Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.mft
File: X3xLrCTiMhOZILbFzqcF74MP11U.mft (raw, json)
Hash identifier: 3/LD94wWtEcFIEXK14TsqdZWJ0U5hgL93Wz8j759MYU=
Subject key identifier: 6C:2E:34:9E:3E:C4:41:8D:78:21:7A:94:DB:BD:9E:7B:7D:59:58:74
Authority key identifier: 5F:7C:4B:AC:24:E2:32:13:99:20:B6:C5:CE:A7:05:EF:83:0F:D7:55
Certificate issuer: /CN=5f7c4bac24e232139920b6c5cea705ef830fd755
Certificate serial: 01A08B3155EEBF63C2B96B6ABFBBD7CDA29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X3xLrCTiMhOZILbFzqcF74MP11U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.mft
Manifest number: 2F
Signing time: Thu 10 Sep 2026 12:01:01 +0000
Manifest this update: Thu 10 Sep 2026 12:01:01 +0000
Manifest next update: Fri 11 Sep 2026 12:01:01 +0000
Files and hashes: 1: 7zDEmWPI1ENhomTy26ZsTYp2BBk.roa (hash: HMKeSJgU65eJmE17l+0Kgm4LpuhW6XeTtaT/MhlrW+s=)
2: X3xLrCTiMhOZILbFzqcF74MP11U.crl (hash: VEKb8xdDHff9KaUku3p/umK7ZxPkh4Z1dVIKOHbvwNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.mft
rsync://rpki.ripe.net/repository/DEFAULT/X3xLrCTiMhOZILbFzqcF74MP11U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 12:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:31:55:ee:bf:63:c2:b9:6b:6a:bf:bb:d7:cd:a2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f7c4bac24e232139920b6c5cea705ef830fd755
Validity
Not Before: Sep 10 12:01:01 2026 GMT
Not After : Sep 11 12:01:01 2026 GMT
Subject: CN=6c2e349e3ec4418d78217a94dbbd9e7b7d595874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c2:1a:a7:ae:0c:0a:7e:3a:e6:05:21:82:f8:
e1:62:5e:95:39:5b:e2:82:66:a7:52:21:76:22:61:
9f:be:58:6e:a6:c3:fd:21:9b:dd:25:35:2a:ee:a6:
81:9e:96:f3:1a:d3:80:79:39:9a:a8:0f:45:a9:df:
54:ec:de:5f:39:7d:2b:ed:82:8a:62:30:4d:1f:43:
97:7f:9b:d0:df:c2:75:27:13:7f:8c:eb:f4:d3:34:
c4:98:7a:e2:62:4b:48:1b:52:43:2d:81:8b:e3:fd:
f7:de:d2:3f:88:2b:71:91:5c:7f:c5:fb:ea:ca:2c:
60:c4:8a:38:b4:ab:67:b0:0e:77:b8:17:f4:36:be:
91:b0:74:92:39:58:fa:f8:48:17:38:8f:19:19:fb:
30:b3:3c:96:30:21:e7:be:c3:50:fd:56:cb:a4:41:
6f:7e:e4:f1:70:b4:07:f1:65:7d:22:ee:c7:0c:d4:
09:bb:92:be:80:33:2b:41:91:6d:cb:60:b0:da:df:
86:e1:71:41:22:ed:0f:c1:ff:96:3c:81:7b:89:f7:
3e:67:73:a1:42:77:bf:97:1c:9d:37:b6:e0:87:5a:
04:c7:d2:74:aa:cd:9f:65:68:66:07:31:49:ef:f9:
4a:c0:0a:16:a0:44:34:69:98:d6:40:13:62:ff:4d:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:2E:34:9E:3E:C4:41:8D:78:21:7A:94:DB:BD:9E:7B:7D:59:58:74
X509v3 Authority Key Identifier:
keyid:5F:7C:4B:AC:24:E2:32:13:99:20:B6:C5:CE:A7:05:EF:83:0F:D7:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X3xLrCTiMhOZILbFzqcF74MP11U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cd93f-fc8c-4c55-920f-e53be2d5e42c/1/X3xLrCTiMhOZILbFzqcF74MP11U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:3e:27:14:86:81:9f:03:87:1f:22:47:08:b0:ef:29:ff:a7:
4e:48:80:01:2d:fc:d0:e1:d3:5e:ba:c6:ab:79:4b:e3:b1:2f:
35:45:63:3d:87:73:3a:e3:99:37:14:82:13:f3:4f:ab:64:c9:
1b:a6:51:87:18:82:6c:45:98:cc:3f:1c:c2:f1:d6:de:d4:ac:
08:5d:da:fa:21:8e:61:6b:e8:20:e5:7e:d3:0b:3a:10:96:44:
f7:3b:4b:0c:85:68:ab:af:9c:83:fa:c0:00:41:90:e3:ed:b6:
63:e4:05:1e:d6:ea:3c:f7:4c:db:d9:24:2e:03:b8:72:91:c0:
4e:45:e1:9a:e4:da:9d:f2:da:5a:87:78:34:75:f1:20:08:0d:
f0:a9:fe:66:d8:35:02:9e:cc:57:c6:02:35:33:63:5b:55:df:
d9:fa:47:28:60:59:41:fa:bd:f4:60:38:97:20:ea:f1:e6:26:
96:07:b4:cb:94:b2:63:f9:f4:b9:6c:ec:fe:a6:89:62:31:53:
74:6f:9c:33:5f:fc:15:b0:ef:03:31:dc:48:a2:86:b6:30:f6:
06:68:2d:50:c6:49:8b:35:d3:47:f8:c3:1d:88:ab:e8:66:22:
47:71:82:fd:ca:71:0b:0a:c3:e4:e4:31:ed:17:93:27:a0:27:
72:23:02:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:13:42 2026 by rpki-client