Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
File: xX5Yw0bntBVVDBOurdLPkO3QeJU.mft (raw, json)
Hash identifier: NmYNdpT42KZqZE7m/55b9IXlvzS+eUG2e0JYEgRAaJM=
Subject key identifier: A1:D6:24:BF:DD:F0:F1:4F:10:35:78:36:48:D4:02:5B:F5:09:6D:D4
Authority key identifier: C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
Certificate issuer: /CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Certificate serial: 019EC413062D3B8F15CDC54421E320FD2C02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
Manifest number: 1960
Signing time: Sun 14 Jun 2026 03:00:41 +0000
Manifest this update: Sun 14 Jun 2026 03:00:41 +0000
Manifest next update: Mon 15 Jun 2026 03:00:41 +0000
Files and hashes: 1: 1kAOPGpT_yO1V9aiYjzOs8fosJ4.roa (hash: uKDlJs0NDCjfdYnB+MfIB/jlA65konDisvJIGcTDJUU=)
2: 9j1B5LLZDXYRtu0JrlF53YNgDew.roa (hash: enCaw1pzt1wj9vxuJHJ4PKIp1awPrJly1Aljj7nxS5c=)
3: xX5Yw0bntBVVDBOurdLPkO3QeJU.crl (hash: tGu2hbLpzqoeRBjnz492A8CJSW67w4vGlcHnFgnDMkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:13:06:2d:3b:8f:15:cd:c5:44:21:e3:20:fd:2c:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e58c346e7b415550c13aeadd2cf90edd07895
Validity
Not Before: Jun 14 03:00:41 2026 GMT
Not After : Jun 15 03:00:41 2026 GMT
Subject: CN=a1d624bfddf0f14f1035783648d4025bf5096dd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c6:c4:17:57:23:98:40:2d:69:07:3a:b8:71:
bc:d3:e8:53:ae:e3:9a:fa:37:72:a5:e4:a8:8d:0c:
58:df:81:7f:38:6e:d7:43:8f:f9:89:34:b8:92:7f:
4d:1c:46:f7:e5:0d:64:2f:25:be:e7:5a:a0:51:1f:
f5:8b:67:a8:e0:f3:d9:35:ef:bd:92:32:18:32:9a:
91:61:0f:80:cc:63:33:65:d9:de:a2:31:08:13:e5:
f7:cb:e5:d9:87:e5:e7:47:c6:81:91:ee:b6:78:f7:
78:9e:49:12:d6:92:70:57:f7:5c:4c:9d:7f:c6:9b:
fc:6b:2d:47:62:0c:ee:87:f7:3a:4f:46:34:88:11:
91:77:c8:55:49:ca:ab:85:7a:a0:2d:7c:b0:3d:d4:
6f:07:c5:68:78:3f:79:77:14:dd:60:4b:15:a7:70:
eb:31:f9:5a:03:68:ce:c8:7b:a1:28:08:a6:8f:2c:
c6:86:00:52:24:5c:b8:9e:d0:27:bf:b6:59:57:49:
12:e3:bd:7c:c4:58:f8:55:c0:34:ab:7e:5f:79:6c:
3f:85:05:0a:ab:87:5f:3a:cf:92:6d:da:7e:e1:c4:
c6:9d:4b:e5:b1:c3:9c:45:ea:33:de:ac:24:9c:0b:
eb:2b:47:ce:b8:65:27:82:f9:79:57:8d:f7:e4:06:
76:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:D6:24:BF:DD:F0:F1:4F:10:35:78:36:48:D4:02:5B:F5:09:6D:D4
X509v3 Authority Key Identifier:
keyid:C5:7E:58:C3:46:E7:B4:15:55:0C:13:AE:AD:D2:CF:90:ED:D0:78:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX5Yw0bntBVVDBOurdLPkO3QeJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/cee70d-8b52-4c11-a77c-074305735ac2/1/xX5Yw0bntBVVDBOurdLPkO3QeJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:11:c2:4d:f8:40:a7:85:e7:60:8f:0d:3d:59:8c:6a:b7:3a:
ec:8f:3f:00:5a:3a:64:93:94:22:a0:47:ba:5e:52:23:50:2a:
45:76:7b:2d:c1:51:2b:30:2c:c2:d0:b8:18:55:e5:d6:40:92:
88:2f:d7:de:70:b3:a5:e7:96:b8:d1:04:70:0a:03:9e:2b:08:
4d:e4:b2:46:24:cb:d9:6d:26:92:5d:db:9e:6d:ff:cc:81:d6:
d7:6a:88:9f:24:de:4f:28:07:4a:f3:fc:8d:c1:39:63:35:35:
1c:37:54:e3:88:72:5d:21:86:5d:d4:e0:9d:9b:46:42:6a:83:
49:5e:fa:ab:a6:ff:fb:99:ba:be:0f:b3:03:d4:b0:82:c4:5c:
91:e9:8a:d9:63:28:29:67:be:2c:cd:a8:7b:95:42:3c:84:00:
ab:be:2f:4f:24:24:55:de:91:c6:9c:33:e2:1f:ea:31:ea:5d:
89:67:b8:7c:a4:6e:11:30:9f:df:11:0f:85:cf:93:f3:a5:ee:
6c:e8:d0:67:ea:7f:ef:9c:36:6c:d4:81:51:6d:f2:d9:d9:f4:
90:17:f0:e2:fe:4f:27:2a:73:5e:fe:8e:4a:a0:d7:fb:90:89:
39:bb:d0:74:d1:6d:3d:76:6e:7a:87:45:c8:c9:ac:a2:e8:76:
12:fd:85:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:26:55 2026 by rpki-client