Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: YzP0IqHEyh0NI5b0VsootWgFA5gt+qUw/N5byDknbrQ=
Subject key identifier: 79:29:54:F4:3B:D2:7F:07:4C:32:BD:AA:73:4C:FA:6D:D7:9C:B5:25
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 019EC036956385DBAC709AA9A1F7496235A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 140E
Signing time: Sat 13 Jun 2026 09:01:03 +0000
Manifest this update: Sat 13 Jun 2026 09:01:03 +0000
Manifest next update: Sun 14 Jun 2026 09:01:03 +0000
Files and hashes: 1: 02JNfVWYOVA2OBy17TDgR9y7do8.roa (hash: x5I0ROnfJh237cohKlOyZemzpgBQnX/4IqZy8ejhw3c=)
2: 5VBhehblaiOfuUShpivHuAhNqvU.roa (hash: SLWl0V7yJEtG44gZ1JVp2uNJOky4M2j+U4CHDGRdNIM=)
3: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: 5mlzRkVFokkteeqjqhAVk0dKR1vGYyXoFDXACEd9cQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:95:63:85:db:ac:70:9a:a9:a1:f7:49:62:35:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Jun 13 09:01:03 2026 GMT
Not After : Jun 14 09:01:03 2026 GMT
Subject: CN=792954f43bd27f074c32bdaa734cfa6dd79cb525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d9:c7:e5:ff:36:b5:a0:6e:f0:be:52:85:d7:
cd:df:15:54:10:5a:11:32:c9:a1:93:cb:9f:9d:a5:
36:f2:70:19:66:02:82:b2:c4:ff:db:f7:50:d3:f6:
5c:ff:8a:67:36:7a:4b:5e:d6:56:56:0a:b5:36:e2:
36:d7:9c:3e:50:9b:a2:f7:27:b1:2e:a8:77:86:d7:
e0:f2:f1:69:4b:29:20:f4:65:8d:a3:1a:63:57:a9:
ab:80:10:76:9e:c8:34:aa:95:43:a8:fe:16:0e:83:
47:f1:6e:fa:5b:e6:3d:6a:a2:54:52:a4:26:ac:80:
12:db:43:9e:2e:73:86:23:b5:36:b0:29:5a:9f:41:
73:ba:46:7d:7a:d7:54:78:88:37:8e:9d:3c:51:73:
96:39:ae:03:38:e6:7b:a0:be:08:9f:5b:1a:b4:0d:
9f:b1:97:ee:0a:8d:69:a5:e0:e0:ad:c4:83:53:25:
32:4b:0f:d1:80:17:24:dc:52:fe:04:5c:ba:6f:b6:
97:80:24:28:98:12:7d:3c:94:e8:9e:08:8b:e0:24:
db:f7:f8:30:4e:f6:df:35:be:68:ff:4b:25:91:13:
56:be:eb:f4:06:74:0a:51:a3:62:ac:d9:29:0f:67:
1f:0d:05:b9:73:79:fb:e7:31:1e:8e:02:15:ad:2c:
ce:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:29:54:F4:3B:D2:7F:07:4C:32:BD:AA:73:4C:FA:6D:D7:9C:B5:25
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:87:20:b8:b7:74:23:6d:fb:47:94:aa:86:56:3f:e7:86:2c:
1f:81:1e:4f:3a:4f:d6:8e:70:5c:03:0a:9c:91:32:9a:7f:e8:
f8:5f:e5:f2:e6:e0:d8:1f:bf:74:a1:90:7d:ff:a4:d4:2a:cd:
3e:50:ed:b0:0d:00:06:c0:ac:43:56:fa:a8:0c:08:6c:c5:89:
3c:32:c4:ef:1b:4d:02:61:ef:b4:3e:d6:cc:47:3e:78:f8:f9:
0b:29:dc:0b:73:57:21:80:96:b2:5b:6d:95:eb:75:50:0d:80:
ef:b6:2e:39:b4:c1:32:16:d9:ab:b9:e2:f2:0e:a1:32:73:cd:
8b:b6:5f:30:74:58:f4:a4:d2:1f:ea:bf:55:32:37:b9:20:c2:
ac:82:20:3c:de:7a:4f:76:54:08:d6:30:b8:25:e7:21:bd:33:
fa:99:fe:56:d6:58:60:08:f6:e1:99:b1:55:fc:b8:8c:ef:de:
2c:08:28:9e:84:04:64:b3:10:c0:de:82:4f:48:52:37:0b:b1:
97:59:48:11:a1:b6:80:0f:89:70:53:cb:53:7f:3c:5b:e8:dd:
ed:b6:b9:bc:a1:e0:6b:6a:70:f1:b3:b6:b7:54:c1:f5:03:60:
82:5e:39:64:73:02:ce:53:b2:b2:04:62:3f:18:4c:54:2d:97:
05:e3:11:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:26:57 2026 by rpki-client