Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: 74FWYyhFpvBjf0s8SURP82vbpG+cEw68M4tOZVoMBcA=
Subject key identifier: F4:7A:51:78:64:0E:EF:7E:AC:56:CB:0B:B9:BA:7B:15:00:A7:33:74
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 01A0E51A5466D630462B5C89F75F3D103735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 0821
Signing time: Sun 27 Sep 2026 23:01:42 +0000
Manifest this update: Sun 27 Sep 2026 23:01:42 +0000
Manifest next update: Mon 28 Sep 2026 23:01:42 +0000
Files and hashes: 1: 2ptS9RtqKyQICl-FF5XAQQMG1p8.roa (hash: CnIWNGibVsyJEPJ7wWfI/zOEpiDLnhOyvk0A6/tQZh0=)
2: 56Kmc-Cz64ulFDN7LZkLpLy2Uyk.roa (hash: M1LxSBYIiPUs1C9HbHfgJfFfNoWmm4ypO8QoHN7KG7k=)
3: Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa (hash: yA+b+JTKhvzBntnbRz8H3TVoNPvRK8TlZDevDFWYPVU=)
4: MHUiyig4q2dE9dcejzFeSdppyes.asa (hash: vsGXprjQpMNWSZX1y2syqnGE09eYObc2WoOHBWaktro=)
5: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: LOjgyr0X0PRy//gP+tGGeTRozeHwcpTumdxEm70TpKc=)
6: Z1V5lwUUrZll1KmPOgWR8Eag8b4.roa (hash: xUsruNjtSsoiCiUtber3+Ze8kadAYwEP/UxnWmjwonA=)
7: Za3vl_jOJ0pGYslBqqMRsVt7h_s.roa (hash: YOFAZhaKlii8wEnPzm8mR4aNFVEe5XwwG7RLJLy04yA=)
8: gbzBHonlRf7ivnA5P_wp2hX0XU4.roa (hash: Bg4gSoBZ6ks0LuCfTWEWHJ+rDpA/oTvHgiBzwgffaf0=)
9: klZpNcpkOEquqUsO-jju5O69v1E.roa (hash: jxFHJzSImYx8wBjjvdBncxitlUill6En9a34gPRYQtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e5:1a:54:66:d6:30:46:2b:5c:89:f7:5f:3d:10:37:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Sep 27 23:01:42 2026 GMT
Not After : Sep 28 23:01:42 2026 GMT
Subject: CN=f47a5178640eef7eac56cb0bb9ba7b1500a73374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:29:9d:91:9e:6f:8f:c3:02:51:11:8e:ef:
c7:d9:82:28:15:8b:d7:6c:2f:13:a9:f6:5a:d1:1a:
26:ff:60:a4:9f:15:7f:23:51:b7:86:81:61:17:4b:
6a:b9:67:9d:4c:05:f2:cf:4c:74:86:8c:14:df:8c:
8f:1b:ea:79:0a:00:ee:0e:0b:0e:64:00:b9:b8:c8:
b4:8f:13:60:cb:2e:73:e1:47:44:f2:f8:e6:33:fb:
97:29:81:7f:25:ef:4a:b7:d7:8e:d2:1c:d7:9e:1a:
3c:a5:42:4d:14:bc:74:45:d7:46:3c:e6:4a:ce:95:
9a:9b:50:ec:69:7b:ef:ee:d6:66:1a:4d:fc:69:f9:
39:47:b3:69:c2:de:91:38:4b:81:69:85:d0:b9:36:
02:0f:fe:8b:ba:6c:1e:1d:ac:73:6b:9d:1d:89:47:
30:2d:05:8a:40:bb:70:fc:32:36:f0:fe:79:51:60:
cf:d0:a0:a0:f1:b3:57:07:62:30:c8:81:36:e2:fc:
cb:68:54:92:be:ee:fd:82:9f:ea:8b:66:9d:2b:98:
ad:74:e0:1d:74:90:21:fa:f2:eb:5b:85:60:a3:7c:
bb:fb:bf:4d:49:14:fd:ac:a4:d9:38:9b:c9:ce:df:
24:bb:4e:e6:e9:9f:e1:59:8e:28:cb:ed:35:d7:e2:
8c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:7A:51:78:64:0E:EF:7E:AC:56:CB:0B:B9:BA:7B:15:00:A7:33:74
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:7b:bc:57:28:75:62:99:91:da:c8:32:90:46:a8:e8:d3:ef:
46:9b:d5:37:c2:83:49:e6:0f:b4:a9:d5:77:62:f3:cd:7d:f4:
6e:32:e6:cb:0d:5b:39:7d:56:c8:e6:a9:8c:5f:f3:fe:1b:03:
9d:51:c5:49:1e:fd:f3:7c:3a:28:26:3b:06:d6:d7:9c:93:18:
59:27:de:19:51:00:b6:f3:d1:08:b5:5a:a6:0c:a3:19:24:d4:
37:8f:82:7f:28:0c:af:c6:83:a6:2b:b5:41:f4:a9:cb:b5:52:
ea:e4:99:a1:a8:78:35:0c:e2:e6:3b:74:3e:9d:e4:ad:27:f8:
b1:69:9d:9f:a0:81:65:9c:2f:2f:da:01:21:5c:a9:ee:b0:bd:
0f:10:cc:74:d6:83:aa:d0:3d:ba:f7:91:ad:60:78:ac:e6:f0:
ea:89:b2:4e:9f:7f:60:3b:e0:d7:4d:10:84:4c:6a:1b:1a:21:
d5:37:e5:dc:b9:62:dd:a1:3d:b4:af:04:03:42:78:1b:93:70:
90:ff:8d:d6:68:b7:0b:0e:40:4e:3c:52:8c:a0:80:cf:91:e2:
a0:d7:1a:29:06:d8:a6:0b:10:e4:45:8d:a8:41:88:44:e3:38:
5c:62:05:fe:a7:db:2a:28:40:d9:4d:f3:c7:85:58:9b:5e:48:
72:de:dd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:48:51 2026 by rpki-client