Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
File: xmCFijitXhG3sYk5KIO8g-trNh0.mft (raw, json)
Hash identifier: WXdAOEcijlpzOxoLKYpkzeazItbnJkPXteG4AkcYYS8=
Subject key identifier: 5D:67:2E:8A:7B:AE:9B:28:AD:86:C2:47:ED:27:D3:1D:58:E3:B4:69
Authority key identifier: C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
Certificate issuer: /CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Certificate serial: 019EBEB5D9D14BF38C1D52F7012B3E848453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 02:00:49 +0000
Manifest this update: Sat 13 Jun 2026 02:00:49 +0000
Manifest next update: Sun 14 Jun 2026 02:00:49 +0000
Files and hashes: 1: xmCFijitXhG3sYk5KIO8g-trNh0.crl (hash: 2ngp37yAwTCi5jffaxO7bZ4cqjxk98Ktwey99Zn4EqA=)
2: xpQHQe9JK1CUe7FrE6UQJmb2ot8.asa (hash: 4NpowpxrTh5AKJl4K8wnIP5UZeAISCMu/TY3f9v3FM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:d9:d1:4b:f3:8c:1d:52:f7:01:2b:3e:84:84:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c660858a38ad5e11b7b189392883bc83eb6b361d
Validity
Not Before: Jun 13 02:00:49 2026 GMT
Not After : Jun 14 02:00:49 2026 GMT
Subject: CN=5d672e8a7bae9b28ad86c247ed27d31d58e3b469
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:fb:3b:29:cf:df:80:f1:80:8d:6d:e5:7c:42:
6b:fb:a5:ad:2d:df:cb:49:28:16:97:23:d7:52:a5:
11:5f:d3:54:3e:a1:0b:70:73:3f:88:be:dc:46:c6:
f9:c4:b9:88:2d:ff:24:c7:b8:3e:47:95:06:af:1b:
48:dd:4f:fd:37:78:6c:13:39:bf:37:6c:c4:b1:64:
d9:af:8f:f7:b1:a4:04:81:e2:e9:ac:62:fb:77:87:
ae:1f:8a:33:e3:53:3d:c9:d3:3e:a2:d3:18:31:46:
71:a2:b0:de:b1:b1:84:7b:3a:ca:51:9b:13:e9:94:
20:06:ed:5d:c9:94:39:fb:01:0f:4f:dd:45:76:a9:
c1:7f:e8:dd:b8:45:e3:7b:ff:d0:e9:ce:83:4c:58:
79:b5:e7:5a:51:a9:c0:6c:9b:e1:9d:94:3a:03:08:
3b:f0:35:d7:e4:d6:b3:91:aa:53:03:db:3e:eb:e6:
4c:74:92:0d:c7:01:d7:42:9f:d4:12:fd:55:17:96:
b0:a2:a0:06:3a:3d:64:e2:5e:7e:53:eb:7f:28:4f:
50:60:81:fb:d9:4c:18:ea:17:32:7e:f5:bd:98:1b:
37:f4:ae:bf:10:e2:cc:9f:cf:4f:17:36:12:bc:49:
0e:7a:24:90:73:53:28:c4:56:22:73:e4:4a:40:70:
b0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:67:2E:8A:7B:AE:9B:28:AD:86:C2:47:ED:27:D3:1D:58:E3:B4:69
X509v3 Authority Key Identifier:
keyid:C6:60:85:8A:38:AD:5E:11:B7:B1:89:39:28:83:BC:83:EB:6B:36:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmCFijitXhG3sYk5KIO8g-trNh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/dbb5e4-c558-4efe-9c9a-fa5d7b48aae9/1/xmCFijitXhG3sYk5KIO8g-trNh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fb:29:91:97:ad:63:99:b8:0c:58:68:98:a6:58:d6:91:95:
1a:9e:08:3b:28:b9:23:b5:c1:bd:1a:28:c3:93:52:c0:a3:8a:
14:d9:db:09:1e:a4:bf:df:4b:3c:98:ff:1d:c3:95:63:3c:03:
db:d4:e6:f7:1d:fb:07:54:62:64:88:98:6b:a7:60:75:43:ce:
f9:64:6a:40:21:d7:d8:17:24:41:1b:8c:54:2f:1a:b9:8a:6f:
63:57:b1:dc:a5:e1:42:88:38:0d:ee:03:77:41:6d:1d:52:b8:
c8:65:30:f8:10:3f:5a:1f:94:08:e9:1b:ce:c8:e0:f9:a9:8c:
ed:79:0c:99:e2:c8:dd:4d:d7:1d:89:9e:f5:c3:42:14:49:de:
7e:b3:9c:cd:e2:08:34:88:b9:38:de:53:8e:1b:17:43:aa:07:
a4:ba:43:1b:85:43:44:07:15:53:30:53:2d:02:6a:44:0d:4a:
fe:23:9b:4b:41:65:75:ff:54:65:48:a8:e0:b6:66:1d:92:89:
f2:96:4f:a8:94:ce:9f:ba:12:8e:d7:eb:11:0e:fd:af:c8:e3:
94:4a:06:0f:5f:5f:8f:27:a1:52:4b:15:c6:31:ce:cd:a4:cc:
80:87:14:c7:5f:05:1b:15:e6:84:2e:4a:c3:f1:c9:7e:74:0d:
8e:0d:38:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:20:14 2026 by rpki-client