Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: nPpuCOSmV+6WEJ1W4Zb/GBc4rSU+9YfkvV6SvR99Vyo=
Subject key identifier: 69:41:28:B6:65:B8:30:4F:06:94:1F:2B:8E:2E:2C:54:DE:EE:C4:FA
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 019EBEECD70BE4C380EAD880628F94C8EF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 03:00:53 +0000
Manifest this update: Sat 13 Jun 2026 03:00:53 +0000
Manifest next update: Sun 14 Jun 2026 03:00:53 +0000
Files and hashes: 1: Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa (hash: Ykk34DqNXHApsE9nxxAgQ38pONoyVUESYWMP39kBFzk=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: 9wR7S0oL9NX5JSfO1Ft2WlWmCSlQtHgPmgsaNC9PMNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:d7:0b:e4:c3:80:ea:d8:80:62:8f:94:c8:ef:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: Jun 13 03:00:53 2026 GMT
Not After : Jun 14 03:00:53 2026 GMT
Subject: CN=694128b665b8304f06941f2b8e2e2c54deeec4fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:89:10:d7:99:c6:ea:36:4a:af:7e:4f:9a:
97:7e:f7:81:ae:3d:34:55:45:ae:29:5a:dd:c5:65:
66:87:7f:a3:37:ff:96:fe:3a:c2:87:90:6e:35:d9:
46:5b:40:e1:70:10:fb:de:f3:ed:4d:ed:d6:56:b0:
0f:57:a8:ef:4d:da:ce:09:0a:f4:f9:c1:dc:65:3e:
03:d3:2f:b3:cf:88:1f:48:97:1f:87:c3:86:60:21:
55:80:65:ac:23:18:d1:29:95:34:45:46:5b:68:79:
d1:ed:17:c0:0a:01:8a:43:bc:05:d7:61:1b:e7:a7:
08:6a:d9:97:2b:21:23:62:d3:16:4e:4d:d8:a5:34:
a9:32:be:22:0b:f5:e1:da:3c:48:7c:7e:ec:b8:81:
78:41:9b:f3:99:5c:56:b0:e8:59:b7:59:e7:cb:91:
4e:2b:46:ae:00:a2:51:10:4d:10:da:94:83:df:67:
35:d2:9a:ee:0d:2a:2f:ba:34:c7:4f:0c:1e:6f:77:
43:25:3e:d3:22:70:b5:85:2e:03:41:05:c3:c0:29:
e0:26:c4:f5:c2:04:ed:27:a9:95:94:8b:59:db:ed:
31:91:a0:52:92:af:64:b9:1b:c8:08:08:09:b6:89:
11:4b:53:d9:67:93:29:6d:03:5f:ab:62:a2:a4:87:
42:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:41:28:B6:65:B8:30:4F:06:94:1F:2B:8E:2E:2C:54:DE:EE:C4:FA
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a5:67:e9:82:dd:3b:20:d2:c8:96:fb:0b:4f:58:4b:90:37:
82:be:88:39:23:61:c0:cf:e7:46:6e:bc:fb:a6:cc:e3:a4:a1:
c4:bd:0b:af:1b:be:8d:22:85:5e:08:86:59:aa:0a:33:e7:bb:
b7:30:6b:c7:f5:cc:a7:64:f2:0d:8d:b0:b8:d3:4b:9d:da:57:
fd:29:33:ae:70:3c:26:a6:2a:94:4e:78:27:ba:4b:84:53:82:
df:90:d6:8d:bd:05:a9:dc:24:51:cf:12:10:cc:f1:e5:b3:0b:
65:9b:57:26:a1:0e:ac:9c:46:23:e0:02:5f:ae:4f:79:3b:11:
92:30:18:d6:5b:bd:b0:c4:e7:74:9e:58:e8:94:dd:86:2c:3f:
a6:86:c2:a5:38:42:cd:9b:ac:f8:3f:4a:d2:29:ed:60:40:18:
b7:42:92:4b:62:6e:3d:94:f4:72:56:57:fa:46:9d:6d:37:42:
de:9c:0e:1f:b0:9d:3d:6f:36:52:fc:f6:c6:07:54:df:fd:b4:
92:2f:d4:50:09:91:de:2f:65:dd:01:b9:32:74:91:04:7a:7e:
5a:f4:f2:1a:7f:95:ad:45:64:7d:e5:2e:94:dd:53:61:b0:be:
17:7f:48:ab:69:20:cb:a7:d7:92:19:35:09:5c:96:10:88:2a:
81:e0:d5:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+7NcL5MOA6tiAYo+UyO9fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNGI3NzdkNmEwMTc1ZmViYmEwNWI0OGI0N2NkZjBhNmI4
OWQ3ZmIwHhcNMjYwNjEzMDMwMDUzWhcNMjYwNjE0MDMwMDUzWjAzMTEwLwYDVQQD
Eyg2OTQxMjhiNjY1YjgzMDRmMDY5NDFmMmI4ZTJlMmM1NGRlZWVjNGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxGJENeZxuo2Sq9+T5qXfveBrj00
VUWuKVrdxWVmh3+jN/+W/jrCh5BuNdlGW0DhcBD73vPtTe3WVrAPV6jvTdrOCQr0
+cHcZT4D0y+zz4gfSJcfh8OGYCFVgGWsIxjRKZU0RUZbaHnR7RfACgGKQ7wF12Eb
56cIatmXKyEjYtMWTk3YpTSpMr4iC/Xh2jxIfH7suIF4QZvzmVxWsOhZt1nny5FO
K0auAKJREE0Q2pSD32c10pruDSovujTHTwweb3dDJT7TInC1hS4DQQXDwCngJsT1
wgTtJ6mVlItZ2+0xkaBSkq9kuRvICAgJtokRS1PZZ5MpbQNfq2KipIdC6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlBKLZluDBPBpQfK44uLFTe7sT6MB8GA1UdIwQY
MBaAFFxLd31qAXX+u6BbSLR83wpridf7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zNDkwZjgtN2U5Yi00ZThlLWI4ZWQt
OWQzZTU5ZGE1YWQxLzEvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zNDkwZjgtN2U5Yi00ZThlLWI4ZWQtOWQzZTU5ZGE1YWQx
LzEvWEV0M2ZXb0JkZjY3b0Z0SXRIemZDbXVKMV9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjaVn6YLd
OyDSyJb7C09YS5A3gr6IOSNhwM/nRm68+6bM46ShxL0Lrxu+jSKFXgiGWaoKM+e7
tzBrx/XMp2TyDY2wuNNLndpX/SkzrnA8JqYqlE54J7pLhFOC35DWjb0FqdwkUc8S
EMzx5bMLZZtXJqEOrJxGI+ACX65PeTsRkjAY1lu9sMTndJ5Y6JTdhiw/pobCpThC
zZus+D9K0intYEAYt0KSS2JuPZT0clZX+kadbTdC3pwOH7CdPW82Uvz2xgdU3/20
ki/UUAmR3i9l3QG5MnSRBHp+WvTyGn+VrUVkfeUulN1TYbC+F39Iq2kgy6fXkhk1
CVyWEIgqgeDVIA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 09:17:08 2026 by rpki-client