Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json)
Hash identifier: PLNB/ntsjC4nKucnZMRrj5UHjAlcLVYNIMVPcu2fcEw=
Subject key identifier: 7E:E6:A2:35:47:48:A4:B9:48:C9:BF:F8:1F:AE:0B:21:F9:6F:10:4D
Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Certificate serial: 019EC0A3F24FE269BB7169E84B9E5D47E16C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 11:00:30 +0000
Manifest this update: Sat 13 Jun 2026 11:00:30 +0000
Manifest next update: Sun 14 Jun 2026 11:00:30 +0000
Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: C8hVj0XsFJpHWDZsoDfLnvn7fUvUkDDZlLZIBaS8nD0=)
2: xpQHQe9JK1CUe7FrE6UQJmb2ot8.asa (hash: 4NpowpxrTh5AKJl4K8wnIP5UZeAISCMu/TY3f9v3FM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:f2:4f:e2:69:bb:71:69:e8:4b:9e:5d:47:e1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Validity
Not Before: Jun 13 11:00:30 2026 GMT
Not After : Jun 14 11:00:30 2026 GMT
Subject: CN=7ee6a2354748a4b948c9bff81fae0b21f96f104d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:14:23:47:4b:84:c7:ba:4d:0b:2f:73:92:d8:
f8:73:1f:25:c5:46:57:d6:ed:32:81:da:3a:e5:e2:
05:75:c0:72:67:41:33:b9:62:4b:9d:ec:c1:e3:b8:
f1:24:8b:78:1e:53:0a:30:55:ab:5f:d2:3a:88:32:
8b:44:14:b6:a2:b2:16:c8:fe:09:16:f9:4f:97:62:
a9:7f:21:f9:c5:23:f3:ab:c5:7f:12:7e:7b:f8:09:
d5:6b:ab:1d:9e:c4:4b:a4:d4:bc:80:0c:2f:46:b8:
a7:61:65:9c:4d:de:ca:07:d3:1b:cb:f9:73:8b:c9:
99:6a:86:af:85:38:92:6a:a6:d9:bb:1b:29:01:d5:
ff:e3:a2:3d:f2:7e:c5:ec:cc:2e:66:24:b7:52:19:
e5:81:4a:74:a7:0d:53:b4:8d:f5:64:4c:24:80:63:
30:81:c6:45:23:01:c6:5d:74:08:1b:e4:a5:17:39:
a0:e1:2b:ac:35:2d:c2:93:5f:70:45:25:56:82:a2:
b4:d3:85:82:85:e5:45:0a:ad:79:58:cf:c9:7f:35:
e6:f8:06:d4:6f:59:79:ff:4c:93:ec:cd:ef:52:c7:
c7:cd:9e:8f:da:60:c3:7c:f7:24:ff:09:1f:4f:e1:
51:85:76:a2:54:c0:27:cd:ba:6f:3c:84:a7:96:a2:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E6:A2:35:47:48:A4:B9:48:C9:BF:F8:1F:AE:0B:21:F9:6F:10:4D
X509v3 Authority Key Identifier:
keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:25:a1:41:69:cf:ce:0a:65:86:ab:df:d0:b6:68:47:df:9e:
b7:23:de:e4:c2:d9:b0:5f:55:4d:65:9d:c1:f9:60:8a:8c:3d:
31:de:94:98:39:1a:83:ca:4c:0f:24:71:ef:be:47:b0:d4:9e:
54:3f:0b:75:58:90:aa:ee:2e:11:da:d8:1b:07:f5:fe:8f:f6:
ae:16:0e:a3:4b:c6:60:70:36:3e:2b:ae:2d:e6:60:21:c2:2d:
1f:ac:0f:e1:18:a0:0b:ee:2b:f0:fc:32:a6:9a:fa:4b:53:12:
78:ef:ff:95:27:98:56:22:2f:75:61:7d:83:f5:36:67:90:29:
2d:e4:cf:b6:92:15:b2:0d:17:bf:99:c6:f0:29:96:3e:30:e7:
d3:9b:25:18:70:f2:5c:55:5f:f5:87:4f:15:b9:d7:c5:d2:e0:
7e:d9:ae:8d:f1:26:47:56:04:ad:61:36:27:3b:1c:27:d7:d5:
8a:ec:c4:fc:70:28:e4:29:e4:55:0b:ed:80:d7:fa:7b:28:54:
c0:b0:db:c7:d3:4e:2a:f5:3b:c9:ba:80:06:35:60:ae:c8:29:
86:53:19:7f:0b:2d:55:e4:b1:85:41:05:25:d9:58:4d:f9:0f:
05:b4:b2:79:c3:4c:99:f9:21:82:3f:04:f3:eb:23:a5:9f:d6:
d3:56:77:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:21:59 2026 by rpki-client