Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: ynTKShLamQR5oG56JQI6wVu+jvHz9OtiOoVPlsuBH6g=
Subject key identifier: E0:2C:23:2F:D2:C5:24:43:B5:C2:3C:61:95:79:08:EB:22:25:34:CE
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 01A1491838261A6F2FD74C71380D520CC713
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 1AAA
Signing time: Sat 17 Oct 2026 09:01:26 +0000
Manifest this update: Sat 17 Oct 2026 09:01:26 +0000
Manifest next update: Sun 18 Oct 2026 09:01:26 +0000
Files and hashes: 1: XZNXCKIqVDgpPc7kS3zYiOP2yVE.roa (hash: rxN9jO9dfAmhC4tVQzEusEgOoOYY+A90wdSvN0MmV5g=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: r1/4lsqNIZD/Tt/x58wiD9Js76C3XNaOHRHPqiYGlAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 05:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:49:18:38:26:1a:6f:2f:d7:4c:71:38:0d:52:0c:c7:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Oct 17 09:01:26 2026 GMT
Not After : Oct 18 09:01:26 2026 GMT
Subject: CN=e02c232fd2c52443b5c23c61957908eb222534ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1c:56:47:ef:12:44:d6:98:b4:2e:0f:ab:50:
9e:3f:81:57:18:43:c3:1c:31:41:0c:86:e4:c8:39:
07:d1:be:d4:06:71:3b:83:87:62:34:0a:25:57:d5:
e1:4b:1d:26:33:90:3a:b9:7a:fa:12:60:79:af:b7:
56:c4:aa:49:5a:c6:fe:cd:63:59:26:31:61:3f:f5:
51:86:be:56:4d:7d:74:af:81:59:0b:a8:02:1e:57:
ca:68:1d:e9:15:63:b2:a5:c4:08:23:78:1f:07:ec:
f5:27:d1:17:5e:d0:35:0e:de:3a:ec:59:85:2f:04:
b1:12:d4:50:fd:e3:e4:89:ad:93:4a:24:90:ba:9d:
cf:bc:97:96:bd:0d:28:c5:66:31:b4:7e:d5:b0:ca:
6b:4c:6f:79:0d:a0:fe:10:f1:bc:e9:7e:e2:b5:2e:
98:d1:5b:21:b2:0f:b3:bf:be:74:82:b6:8e:8c:bd:
cb:47:52:18:58:80:a2:cb:ea:6d:9b:d6:8a:b3:ce:
68:75:5e:72:c4:4c:93:e9:f7:2f:5e:10:20:29:1c:
2a:07:3c:60:75:1f:46:a2:6f:b2:50:85:0c:e9:93:
f4:c1:2a:23:ab:dc:71:3b:be:3e:3f:73:a5:23:5d:
24:f3:f0:20:24:d5:4b:fb:f2:e1:e8:10:3a:48:5e:
e9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2C:23:2F:D2:C5:24:43:B5:C2:3C:61:95:79:08:EB:22:25:34:CE
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:10:c6:a6:3b:3d:96:76:eb:5e:33:83:78:4c:4e:b1:29:78:
ac:74:73:fb:2c:3f:3f:46:f3:a3:0a:78:ef:75:1d:0b:c7:ea:
51:83:bb:76:11:ba:93:d7:3d:7b:a3:59:50:d6:94:ed:32:13:
44:7c:18:c2:da:17:fe:2c:8f:55:77:2e:46:26:26:38:85:b9:
a0:09:58:f7:a0:ec:4f:2e:9f:39:5d:b9:4d:b4:0a:1e:72:18:
9d:70:24:f9:35:7f:27:de:82:94:20:e1:df:1b:c3:4e:bb:1d:
5d:76:c6:e7:61:24:13:ac:28:b7:3c:7b:1e:e1:55:ce:88:76:
36:92:3c:d0:ac:a6:25:f1:6d:31:42:0f:6d:41:29:f5:87:1a:
c2:f7:07:03:e3:11:ce:a1:05:c7:73:c1:86:a1:d2:bc:95:20:
f6:f6:9e:b5:dd:15:28:da:e5:0b:9f:af:34:a9:b2:9e:09:27:
fb:9c:5e:6c:50:7f:4a:cd:e4:64:dd:eb:8e:44:18:67:ae:42:
9e:0c:3b:09:58:3e:5c:2b:e9:ca:00:21:ae:7a:15:ec:16:60:
95:ea:5f:32:92:21:6e:02:c3:74:bd:fe:7b:08:24:86:5a:a3:
40:54:32:65:6a:05:f0:b8:4c:a8:f1:d9:ae:22:80:a2:c3:91:
e4:f8:78:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 15:46:29 2026 by rpki-client