Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: cPAKBKR5Ukx0MzjhS4oCrkZh9kKDSIX+3zynl8P8tfA=
Subject key identifier: CA:A2:19:55:2D:AD:6D:23:D8:50:BD:50:49:05:25:C3:D8:6D:CE:4B
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 01A1DF82FFE81998E43F1F8EE324D3F175CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 08A5
Signing time: Sun 15 Nov 2026 14:01:06 +0000
Manifest this update: Sun 15 Nov 2026 14:01:06 +0000
Manifest next update: Mon 16 Nov 2026 14:01:06 +0000
Files and hashes: 1: 2ptS9RtqKyQICl-FF5XAQQMG1p8.roa (hash: CnIWNGibVsyJEPJ7wWfI/zOEpiDLnhOyvk0A6/tQZh0=)
2: 56Kmc-Cz64ulFDN7LZkLpLy2Uyk.roa (hash: M1LxSBYIiPUs1C9HbHfgJfFfNoWmm4ypO8QoHN7KG7k=)
3: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: Bupljt4+BdJhHMGI0wbPlGP4G9n8MFn4G5mMAx9bBU8=)
4: Z1V5lwUUrZll1KmPOgWR8Eag8b4.roa (hash: xUsruNjtSsoiCiUtber3+Ze8kadAYwEP/UxnWmjwonA=)
5: Za3vl_jOJ0pGYslBqqMRsVt7h_s.roa (hash: YOFAZhaKlii8wEnPzm8mR4aNFVEe5XwwG7RLJLy04yA=)
6: gbzBHonlRf7ivnA5P_wp2hX0XU4.roa (hash: Bg4gSoBZ6ks0LuCfTWEWHJ+rDpA/oTvHgiBzwgffaf0=)
7: klZpNcpkOEquqUsO-jju5O69v1E.roa (hash: jxFHJzSImYx8wBjjvdBncxitlUill6En9a34gPRYQtA=)
8: pJVkm-pMydo-IY9itrp813GsCnU.asa (hash: oywz3pcghG1/1yzVI2dyEssDv+Yej2yNIZBYOIpziOs=)
9: xTTBRwL6PuXvE_aaxObEDM8VfCM.asa (hash: Ulx+RQxQuuILxVTtyBq73/Vl62lRwK/D7ylHtUz3nfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:82:ff:e8:19:98:e4:3f:1f:8e:e3:24:d3:f1:75:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Nov 15 14:01:06 2026 GMT
Not After : Nov 16 14:01:06 2026 GMT
Subject: CN=caa219552dad6d23d850bd50490525c3d86dce4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:1b:31:ad:96:c6:22:6c:51:25:2f:4d:86:7b:
a9:23:cd:c8:ae:76:c0:b5:d0:b6:8e:78:9b:f6:ac:
6c:9c:2e:1a:b9:cd:e4:54:a5:43:d1:9a:74:72:15:
45:74:fa:e7:84:91:67:4c:60:59:6f:d4:45:5b:ad:
51:d9:46:c6:bc:dd:ad:27:b2:44:db:29:c8:5e:61:
be:69:61:c8:8d:e5:2c:81:90:c2:a5:dd:62:b7:be:
73:10:8d:f0:71:bd:a9:60:1e:c5:84:de:6f:76:60:
f5:83:92:7a:b5:23:21:86:f0:e3:69:d3:51:32:0c:
4e:3b:ad:b4:74:47:b4:2d:55:0d:38:9b:a6:b7:06:
12:da:bf:22:02:43:81:64:e8:b0:71:5b:f9:74:95:
72:c2:20:1a:e5:95:f6:84:ca:16:41:d6:27:17:20:
93:9a:4a:27:b0:4c:09:e3:d5:7b:4b:2b:f4:52:04:
39:b3:2d:eb:08:3a:66:14:de:82:f2:ba:96:b2:dd:
a3:07:af:c8:d5:10:2d:8a:af:e3:ab:d3:15:74:6a:
a3:ae:b6:4d:d6:10:b3:6c:9c:9a:c3:e8:4e:5c:b6:
3a:68:28:0c:56:1d:24:15:f1:c5:dc:32:bc:56:20:
15:04:64:ff:94:da:b8:aa:de:3a:fd:a6:53:0b:0d:
09:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A2:19:55:2D:AD:6D:23:D8:50:BD:50:49:05:25:C3:D8:6D:CE:4B
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8d:25:6f:e7:a3:9e:a8:b8:f6:97:47:d3:f6:c4:e5:e4:14:
d8:62:0e:2a:07:2c:21:7a:f7:bd:07:de:5e:c9:d0:cc:0d:26:
d7:03:d2:e3:e7:9d:78:66:3e:d9:90:02:1a:86:24:0e:0f:43:
3a:29:b7:f0:6f:ea:4e:ea:40:aa:6a:a7:81:54:99:4c:87:69:
b4:46:45:f6:6c:90:ee:9f:8b:1c:39:1d:5a:af:70:62:0c:82:
7c:51:3a:24:fd:bd:59:fc:1e:f6:dd:2c:4b:6b:13:ac:07:dc:
5c:68:c1:96:64:b1:03:47:37:a3:c9:e7:36:a3:17:f1:37:2a:
4f:70:ad:fd:cc:c2:d6:11:55:6c:26:6a:e2:71:5c:44:d8:f7:
4e:4f:82:cc:7f:7a:23:44:ad:f4:2d:5a:54:51:f5:55:7a:0b:
70:3b:cb:0b:4d:61:d1:15:50:8a:60:35:d5:bf:0d:8e:20:6a:
57:0a:b0:31:93:aa:e5:95:21:32:f1:a7:cf:89:60:1a:83:6b:
ef:7a:ba:64:c5:95:4f:07:1f:7b:79:37:70:91:9e:51:d7:e0:
d4:20:50:18:7c:60:33:40:59:d2:99:66:32:f0:9a:67:2b:47:
8b:d5:91:57:f1:ba:9f:51:7d:0a:db:b3:af:22:d7:47:6b:fb:
b9:6a:92:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:59:15 2026 by rpki-client