Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
File: X63Q6UW8YRAcabzmSj1yi6G7hmE.mft (raw, json)
Hash identifier: i6RT7nwm777Myv7PGsWw/7oJu1MY6BIZ+RPPsj+L324=
Subject key identifier: B6:83:35:F6:5A:83:93:17:46:47:08:57:B1:C5:11:7F:BE:01:D7:86
Authority key identifier: 5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
Certificate issuer: /CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Certificate serial: 019DD050D69EC715D78D155CBE587D071607
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
Manifest number: 117A
Signing time: Mon 27 Apr 2026 19:00:51 +0000
Manifest this update: Mon 27 Apr 2026 19:00:51 +0000
Manifest next update: Tue 28 Apr 2026 19:00:51 +0000
Files and hashes: 1: 8saY52FM3OItyl4VOSm_edBIkos.roa (hash: BD5qCuL+dtuTG+pcsvXNBMfwvdqjtVm3dC9TZz4R5tA=)
2: AgsPlaew9BxC8H6svqcKUEs4Qhk.roa (hash: 4UR8Vh6eTw1Tv7xe4kRQAuAMN978t94veu9L+yIEOOw=)
3: X63Q6UW8YRAcabzmSj1yi6G7hmE.crl (hash: PomK2tay8xpUVV80qivyACsA09x3QWtDULnPHTI3NsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:50:d6:9e:c7:15:d7:8d:15:5c:be:58:7d:07:16:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fadd0e945bc61101c69bce64a3d728ba1bb8661
Validity
Not Before: Apr 27 19:00:51 2026 GMT
Not After : Apr 28 19:00:51 2026 GMT
Subject: CN=b68335f65a83931746470857b1c5117fbe01d786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:da:48:c6:b5:d0:7d:d7:97:d4:4f:1c:b4:14:
85:34:e7:00:1d:42:fe:11:05:9b:12:4c:55:87:bf:
b2:d4:ed:11:2c:81:c6:42:d8:d5:5b:45:a2:5d:55:
af:a3:4b:4f:2f:87:01:19:4e:e8:13:54:be:c6:12:
12:97:df:90:29:ef:00:fa:c6:b2:50:0f:e0:de:87:
a6:22:72:0a:47:7d:ed:37:49:ff:94:56:89:01:c2:
ad:c0:b1:b1:b8:46:42:43:58:3c:ba:94:fe:f5:66:
d7:08:c0:51:32:c0:a1:22:ba:48:57:92:70:37:4d:
57:2d:fd:ea:c7:e2:23:e4:0c:4a:30:d4:fb:b7:26:
8e:67:ef:ba:2b:07:fc:03:eb:6f:a2:18:0e:a4:23:
80:a0:ea:76:f6:fd:bf:f9:95:19:31:42:1c:2f:e8:
ac:2e:c3:c0:b2:6e:59:d2:7b:80:6f:f6:d0:45:d5:
25:12:29:cb:9d:37:df:7f:04:cb:17:bd:0d:8a:ce:
16:87:06:74:1b:8d:c7:19:ae:40:c8:da:df:5f:a4:
f2:dc:46:80:a9:ab:9a:f1:6e:fc:dc:01:56:d2:84:
6f:7d:9a:e0:c2:61:fc:b4:f1:82:ec:5c:45:cc:d1:
59:38:16:9c:33:b6:84:05:eb:b1:d6:3b:61:40:98:
88:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:83:35:F6:5A:83:93:17:46:47:08:57:B1:C5:11:7F:BE:01:D7:86
X509v3 Authority Key Identifier:
keyid:5F:AD:D0:E9:45:BC:61:10:1C:69:BC:E6:4A:3D:72:8B:A1:BB:86:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X63Q6UW8YRAcabzmSj1yi6G7hmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/b0073d-388f-4ab9-b90e-71c7e8ac59c0/1/X63Q6UW8YRAcabzmSj1yi6G7hmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:52:a7:14:e0:43:e4:f1:b6:6a:82:96:69:9b:8c:9d:1e:3e:
91:05:dc:5e:08:61:5d:70:6b:b0:f1:bb:77:9d:80:2c:5e:d3:
85:bf:f8:58:ff:53:7f:9c:2d:69:a6:bc:45:c8:8d:11:15:ef:
5a:66:98:84:58:62:0e:58:72:ad:5d:c0:8d:b7:3c:41:08:49:
34:cc:fc:57:36:65:3e:af:e2:e8:5f:54:00:b2:9a:fa:1f:a9:
3d:ea:75:63:f7:13:17:9e:bf:c8:90:58:30:64:af:e1:77:00:
2b:12:d3:af:2c:9a:ca:7c:30:61:29:c1:90:51:fe:24:90:79:
bc:38:43:f5:bf:27:ff:62:c9:63:40:c9:dd:e9:60:ea:cb:d5:
03:8a:d3:d7:29:73:8c:12:b7:0d:84:7c:4c:ba:b6:03:14:3e:
a5:bd:8b:dd:4f:b2:35:5a:13:09:4b:56:61:a7:21:04:e6:1b:
0e:ea:4b:47:15:af:11:40:43:41:4f:9d:28:4e:a6:96:62:d3:
7a:43:b6:a2:35:64:e0:cb:0a:1b:de:70:e2:fd:4f:b2:fc:3f:
cc:90:b2:d4:be:2c:63:df:ec:80:4e:4c:53:ce:8a:73:92:92:
46:9d:25:86:16:21:77:b4:41:8e:ae:4c:f5:65:88:56:8f:48:
bf:70:63:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 03:24:20 2026 by rpki-client