Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
File: X8kFGN9wsT1wa_4jeqWnaSaldtE.mft (raw, json)
Hash identifier: S27k5ioYZHeriUMjPKxPdNcEDc962frWT+ege+yyj3c=
Subject key identifier: 31:66:72:CA:2C:31:6F:E7:45:AC:5C:E2:C9:E9:63:FD:0D:14:DC:BD
Authority key identifier: 5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
Certificate issuer: /CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Certificate serial: 019D39409CB2608B987C99177036A74748C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
Manifest number: 0634
Signing time: Sun 29 Mar 2026 11:00:28 +0000
Manifest this update: Sun 29 Mar 2026 11:00:28 +0000
Manifest next update: Mon 30 Mar 2026 11:00:28 +0000
Files and hashes: 1: 56Kmc-Cz64ulFDN7LZkLpLy2Uyk.roa (hash: M1LxSBYIiPUs1C9HbHfgJfFfNoWmm4ypO8QoHN7KG7k=)
2: Es0Z1jWd-kkhYkOP1GtHh-lHphA.asa (hash: yA+b+JTKhvzBntnbRz8H3TVoNPvRK8TlZDevDFWYPVU=)
3: Gz_1bJto4c1yEF2Q0CAMMKyQM04.roa (hash: XtyCodmY8171cj6WcCGbm/ih1IwcnbUwaLWquFazgPc=)
4: X8kFGN9wsT1wa_4jeqWnaSaldtE.crl (hash: tH55Vf+MMafN+ENPr7MGrqXM4F8RiYvzili6RNe7Z9s=)
5: Za3vl_jOJ0pGYslBqqMRsVt7h_s.roa (hash: YOFAZhaKlii8wEnPzm8mR4aNFVEe5XwwG7RLJLy04yA=)
6: apiIN38NWuwmq5zLGT_PGl7nwuE.roa (hash: fQnjVUyspxxLgvXaE1acXfTJyNh9B88oVMv1/VzeGlc=)
7: klZpNcpkOEquqUsO-jju5O69v1E.roa (hash: jxFHJzSImYx8wBjjvdBncxitlUill6En9a34gPRYQtA=)
8: y7rxPQXdQykP2HWundiTAhRuuNE.roa (hash: kwq12jPHanXZhrxqm5HaXAm17ns+Kl4rOD8Lx3F1wV8=)
9: yc0EM4Q7YegfvWHtUfZGE2JYYt8.asa (hash: YVzGGL9uGiyH33DfGylRpABv7Bt0LM4Hn9Ld7YwL2Nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:9c:b2:60:8b:98:7c:99:17:70:36:a7:47:48:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fc90518df70b13d706bfe237aa5a76926a576d1
Validity
Not Before: Mar 29 11:00:28 2026 GMT
Not After : Mar 30 11:00:28 2026 GMT
Subject: CN=316672ca2c316fe745ac5ce2c9e963fd0d14dcbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ce:d4:bf:37:45:b0:a7:cc:c3:81:ef:1f:f9:
35:de:be:c6:16:20:7c:6a:4c:5f:07:78:87:24:03:
88:f8:42:7d:29:23:95:6b:80:e6:cb:53:4a:23:59:
e0:ec:6a:fe:13:50:69:62:b9:9a:63:d6:4f:d0:21:
02:40:2d:9c:53:92:57:1e:73:72:27:1d:50:06:e4:
9c:6f:b0:56:ee:15:9b:30:8b:b9:f6:65:12:50:a1:
a6:e0:31:98:b4:78:45:28:60:51:b2:43:0e:8a:2d:
0b:d3:1c:ea:5f:98:2a:5b:89:98:4d:3b:c5:14:f9:
c3:cc:bd:23:35:2b:37:36:1f:09:e1:1f:1d:c4:17:
9c:5b:cb:78:83:67:77:6e:af:cb:e1:7f:59:ea:1f:
16:b2:f8:f3:26:a6:d5:58:09:ed:a9:6b:54:fb:09:
a1:be:2a:16:65:07:8f:27:49:c7:c1:5f:bf:90:fe:
a6:ab:37:fe:72:b2:e1:9c:98:c5:1a:47:01:d6:b8:
b8:db:2e:30:27:15:34:d1:f5:3b:e3:94:5e:6d:c0:
aa:a4:75:62:f0:b6:ca:de:08:c4:b3:b4:ed:e4:fe:
db:17:48:d5:64:78:b6:7f:a6:42:18:40:88:d7:4d:
c7:a6:fb:6e:ae:82:5a:71:e2:63:f1:e0:10:3d:1c:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:66:72:CA:2C:31:6F:E7:45:AC:5C:E2:C9:E9:63:FD:0D:14:DC:BD
X509v3 Authority Key Identifier:
keyid:5F:C9:05:18:DF:70:B1:3D:70:6B:FE:23:7A:A5:A7:69:26:A5:76:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X8kFGN9wsT1wa_4jeqWnaSaldtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/65cc20-0dfb-4180-9ac1-c8302e82ea22/1/X8kFGN9wsT1wa_4jeqWnaSaldtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:59:c0:e3:1d:bc:75:0b:20:8b:b6:c4:e4:da:3c:0e:bc:b2:
4c:c7:5c:0d:0c:9b:35:47:d8:bc:1f:62:78:ba:5f:d6:dd:d0:
0d:15:92:40:e0:92:09:49:0a:b9:cf:8b:10:9d:24:61:d8:98:
46:10:e7:da:9b:63:1f:b6:f2:ec:9c:3f:aa:57:6f:22:47:f5:
e3:0b:df:9e:5b:99:ab:ff:18:23:f3:eb:71:e7:6e:29:35:69:
7c:a8:8b:87:90:58:b2:87:4b:6a:18:d4:cc:d4:f9:47:f1:ea:
7c:09:a9:e7:bb:e7:e2:2e:ce:d9:d4:0a:84:88:c9:83:01:f0:
04:84:e2:ad:f0:c7:65:ee:da:9b:81:e9:fa:eb:fb:17:71:ea:
f7:5f:41:f9:a7:de:23:e5:bc:83:8e:1a:38:9b:e2:78:b1:fc:
c8:4b:09:8d:9f:c5:87:85:72:41:33:75:57:b3:35:5f:0e:a3:
92:db:ef:bc:92:24:d2:20:a7:84:14:ec:09:1d:ee:b1:e5:40:
92:d1:11:66:b2:43:02:67:42:46:e5:0b:e0:59:9c:01:fb:b0:
b1:f1:68:8f:39:92:76:06:0a:3c:89:f3:bb:d5:38:cb:09:c0:
e9:be:4f:02:99:64:3d:86:3d:f8:09:c2:86:bd:ed:28:b9:d9:
d4:2e:d7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:35 2026 by rpki-client