Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: Cwoz6TLdDCy2KNtRGKo3nB3j0zpThQtRlT8yjOGG8II=
Subject key identifier: AF:27:5D:A8:16:41:53:9B:4D:A8:2C:AA:60:44:7B:DB:DE:4A:F9:98
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 019EC0DB7D2349AA4185E504AE731064CAFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 0977
Signing time: Sat 13 Jun 2026 12:01:10 +0000
Manifest this update: Sat 13 Jun 2026 12:01:10 +0000
Manifest next update: Sun 14 Jun 2026 12:01:10 +0000
Files and hashes: 1: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: WYhbWYKRevedoYryh7ClJY7oTNhueq176ZxZCGNmXhE=)
2: i5WP_AihTIXhPy_BVXYv71HxOto.roa (hash: VJGbYlBp9HGyGJZxGUnm0bEpFbqRPbJagnJqTdbqGUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:7d:23:49:aa:41:85:e5:04:ae:73:10:64:ca:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: Jun 13 12:01:10 2026 GMT
Not After : Jun 14 12:01:10 2026 GMT
Subject: CN=af275da81641539b4da82caa60447bdbde4af998
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:02:9b:79:3b:a9:71:78:bd:a1:0e:e7:58:
04:00:1a:2f:1c:1e:c1:ef:03:dd:f4:05:79:3b:21:
30:5e:34:04:6c:3d:07:3b:5e:8c:d0:8d:2b:4d:3d:
40:bd:f2:a3:6a:52:3c:b7:74:62:bb:45:b8:a8:87:
a9:e0:6d:42:a7:8f:bf:6e:e1:5f:62:30:24:69:02:
83:fa:56:21:02:d0:9d:6f:8a:51:d1:a8:89:3d:42:
94:b3:54:42:a7:b0:ef:e5:a6:16:ec:2f:a5:96:ab:
5a:44:ae:2d:79:e0:3a:e3:69:90:4e:9c:0f:9a:8e:
20:fc:01:ed:58:4e:07:55:0f:51:37:85:30:48:0f:
4a:6a:bf:96:49:04:91:64:0a:3d:5a:0c:6c:5d:de:
bc:a1:f6:c4:49:ef:86:aa:f3:89:6b:06:8b:4a:da:
67:eb:29:d4:00:62:48:23:2b:91:19:79:dc:45:4e:
a9:be:72:ab:a8:ac:33:c4:fa:2c:e5:81:1c:4a:60:
ca:d6:91:d7:2f:a9:3d:14:49:2f:df:44:72:a9:08:
5c:9a:33:a4:90:b9:2d:0a:e4:12:bd:5a:fa:d8:2c:
ed:2e:82:3c:30:45:3c:6c:7a:da:f5:79:f5:29:df:
98:b3:f6:09:f0:e7:eb:68:89:52:0b:71:f6:2d:ba:
ee:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:27:5D:A8:16:41:53:9B:4D:A8:2C:AA:60:44:7B:DB:DE:4A:F9:98
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:49:47:67:3f:19:89:58:ce:e2:8e:ac:fc:03:61:3f:dc:33:
a7:87:3d:d9:30:f0:d3:03:c2:b5:d5:24:a8:a1:1a:c2:45:2e:
4c:4e:40:53:62:ac:4d:55:32:38:e2:dd:b4:a3:0e:8d:1a:82:
8b:3d:83:0e:21:04:f4:81:cd:0f:ae:37:f7:ba:6b:68:24:e6:
0d:34:73:36:ff:33:db:ef:f8:49:5b:d9:d2:3f:a5:09:09:24:
43:9f:d9:24:9d:08:af:b7:97:f1:eb:5c:a9:37:f7:0c:cc:46:
90:4f:4a:c9:22:0a:06:b8:dc:47:08:da:d3:90:89:73:1c:ba:
f0:85:46:df:64:21:6c:fa:52:a7:96:cf:70:91:cb:72:62:a8:
8f:2a:af:56:d9:8a:12:14:f3:b3:2c:cd:31:55:6c:58:9f:af:
45:d6:63:4c:e7:54:8a:0d:14:8d:42:57:65:bf:39:f2:50:de:
87:c2:2b:8a:cf:80:13:ae:39:25:cb:9f:37:bd:2e:e4:3b:e2:
49:6e:59:7a:cd:15:a5:cf:65:df:e9:33:82:b2:95:ad:0f:0b:
6f:1f:09:08:56:50:58:ee:ba:6e:f1:6b:57:8f:cc:88:4d:41:
32:36:6b:4e:ea:1c:28:8b:12:ac:c3:5d:c9:2b:ff:4a:0e:72:
64:6c:34:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:07:34 2026 by rpki-client