Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: 0MWdW9zZYj60Emfe+WsD0xTNpybrszILMBLq+uTb0tk=
Subject key identifier: 06:9C:32:47:B4:CB:36:46:20:A7:35:FC:43:98:1F:8B:23:7B:CC:6B
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 019EC17F8BC32F46D1FE6533E2990121F81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 15:00:22 +0000
Manifest this update: Sat 13 Jun 2026 15:00:22 +0000
Manifest next update: Sun 14 Jun 2026 15:00:22 +0000
Files and hashes: 1: 0ZEt5hO5jk8I5B1ric3lV5QOPjY.roa (hash: 2SzUB4ARPZ7+BuiAiToaYolTUFVyZHL4/odctgbUciE=)
2: PX4jRvV2Is0w59EuWq6-Cko1_qM.roa (hash: o5zSrmvOazS6EGtXXnfbpDTf59xV6PS54zdbjnXbBvw=)
3: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: 35pU+7L+p46l2wSGrLiBRLRUS6tF++lYwjK3uHdABoo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:7f:8b:c3:2f:46:d1:fe:65:33:e2:99:01:21:f8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Jun 13 15:00:22 2026 GMT
Not After : Jun 14 15:00:22 2026 GMT
Subject: CN=069c3247b4cb364620a735fc43981f8b237bcc6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:33:c9:c9:ec:40:e0:72:7e:cb:56:56:d9:d8:
b0:20:3e:85:a6:59:9c:77:67:b9:58:a5:1c:d2:3d:
3e:18:28:f8:af:53:a8:d1:b3:92:1f:58:da:6f:35:
38:9b:37:ee:f0:c8:f0:8a:77:80:75:d1:0b:18:05:
c2:72:f4:bd:59:61:eb:88:0c:a7:7f:36:dd:7f:4e:
fe:bc:fe:31:f5:13:54:ee:02:f7:67:06:ee:26:f6:
7f:2a:5e:47:2b:9c:6e:64:bb:2c:79:d0:bd:e8:63:
53:2f:fa:19:92:94:17:2f:77:4a:dc:c9:5c:00:5b:
1a:ed:a4:85:f3:5b:fc:3c:24:fa:96:92:29:86:80:
ba:7c:69:bb:30:cc:ac:86:fd:35:77:b7:ab:33:c9:
29:36:b9:cf:3d:f2:16:df:ba:9d:4c:2e:fe:bc:01:
c3:e6:1c:18:05:4d:49:41:a3:55:fa:d7:b5:d6:6e:
e4:be:1c:23:41:de:d7:72:11:cb:c2:6d:cb:65:f0:
16:3f:9a:e9:91:c9:c0:33:14:fe:3c:91:48:ef:d6:
94:a2:9d:4e:20:2e:c8:91:6b:35:b1:d5:9a:8b:54:
67:91:b3:dc:e0:c7:f0:68:9a:ee:38:ff:6b:12:31:
49:80:3a:37:d6:cf:eb:0a:77:f5:b6:a3:6a:49:22:
71:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:9C:32:47:B4:CB:36:46:20:A7:35:FC:43:98:1F:8B:23:7B:CC:6B
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:1a:ff:5b:65:a5:46:fa:04:31:6f:c7:46:cf:51:0e:3f:83:
12:e6:7f:7a:29:e8:bf:0d:fe:44:18:99:5c:b2:3f:50:15:99:
6b:69:19:98:8d:d8:94:78:4a:6e:1f:2a:41:46:ba:2c:56:28:
f0:f2:6c:b1:5f:cc:71:88:89:6a:b0:3c:98:fa:6d:f4:fd:d7:
ba:d0:00:fb:7f:4b:b6:33:c4:b2:65:4b:bd:70:df:71:14:6d:
0f:f3:b2:20:87:18:d7:ce:7e:4e:31:5d:42:78:02:f2:4f:1b:
11:2f:02:e5:53:fc:1a:20:d9:18:08:e7:bf:1f:da:37:83:34:
cb:59:a3:97:cc:e6:72:4a:75:67:d4:03:88:c2:db:42:97:96:
1c:ed:1d:e8:6b:c9:33:2b:0f:79:66:54:c9:ee:52:2b:8f:b9:
1a:93:e8:cf:92:a0:8f:94:6d:c4:4f:c8:09:b4:9b:75:c5:ad:
52:f0:2e:fb:23:9c:c3:95:fd:4e:75:59:77:9e:6b:21:16:3b:
ad:04:16:d3:44:52:14:64:8a:68:8e:0b:56:49:53:5d:7a:55:
6a:b6:7e:81:aa:b9:b9:ca:83:8c:98:b5:34:5f:e2:e1:97:ed:
49:00:be:6e:5f:e3:9b:e0:4c:e2:99:13:dc:52:e6:98:c3:4a:
ab:72:6e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:35:19 2026 by rpki-client