Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json)
Hash identifier: XkbbrfMvld/nQhuHcNXhW6OjVdpKDENWqD3ggtzCN9U=
Subject key identifier: D4:4C:88:66:A9:23:6C:49:ED:BA:5E:68:F8:09:DD:C0:7E:B4:75:BC
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial: 019EC036BD7FC6D208A0188A2BE199663D76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
Manifest number: 1859
Signing time: Sat 13 Jun 2026 09:01:13 +0000
Manifest this update: Sat 13 Jun 2026 09:01:13 +0000
Manifest next update: Sun 14 Jun 2026 09:01:13 +0000
Files and hashes: 1: hvm-1sw6yKhG-M4wHJ1S06-4bQ8.roa (hash: tKs3IGxy6JfH17/EICz+WfGgz3jmWl7OeQzPl058cdo=)
2: rHb_iz-JiMdt3RDI2-qf4obfFyQ.asa (hash: PB1OmdbHMMh/Gs2lwxTkfdhg+R2oRe0ZvKNcBWEoM4Q=)
3: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: O35ovOX/d5CFPa1SpEXs6UTmFFxW4ZHzGZyn+FdhB/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:bd:7f:c6:d2:08:a0:18:8a:2b:e1:99:66:3d:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
Validity
Not Before: Jun 13 09:01:13 2026 GMT
Not After : Jun 14 09:01:13 2026 GMT
Subject: CN=d44c8866a9236c49edba5e68f809ddc07eb475bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ae:e0:24:76:41:26:26:c1:df:9f:b4:a8:54:
84:52:05:b4:41:6d:9f:d3:81:09:7d:16:ea:60:6c:
f6:83:07:fd:6b:2b:0e:69:67:7e:7c:f2:54:8d:e2:
f0:c1:47:39:52:81:bc:04:38:82:69:54:df:14:49:
b3:90:ca:9d:18:4a:af:59:e0:fd:4d:9f:9b:9d:9f:
96:24:99:dc:ac:c4:85:b2:4c:a5:28:f8:7e:01:ec:
c1:2b:68:22:dd:f5:39:16:f6:a8:d1:ec:2c:3d:a1:
ce:a2:d0:04:46:5e:02:ea:56:5b:e3:66:11:d6:c6:
cf:40:48:02:d0:64:62:86:30:46:c5:09:6c:06:a0:
37:85:69:28:9b:87:ea:f4:56:e9:83:f5:43:e1:11:
a0:31:b3:e4:d8:d1:e1:1c:2b:ec:5d:e9:b4:4d:58:
d1:66:60:5e:83:11:02:4a:61:82:31:48:b6:77:a3:
bd:25:bc:ad:a0:55:c9:05:3f:84:c2:c2:5b:ee:f8:
ca:fb:67:7d:c5:30:77:4f:04:d7:f0:80:c4:3e:1e:
b1:27:2f:e3:65:7f:c7:ec:07:2c:b0:50:0e:79:a3:
63:a8:3c:18:8c:0b:e2:95:40:b4:bc:2e:b5:18:d2:
5a:ca:92:4c:9f:16:82:6c:9a:57:93:19:be:f4:68:
66:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:4C:88:66:A9:23:6C:49:ED:BA:5E:68:F8:09:DD:C0:7E:B4:75:BC
X509v3 Authority Key Identifier:
keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:28:32:27:98:14:2b:28:7c:7b:75:ff:36:09:9e:f9:b7:c5:
43:31:a0:d0:5c:89:13:14:cf:01:ce:f3:2b:ad:c7:0d:b3:bd:
61:a9:9c:0f:0d:9f:bf:35:81:41:d3:66:c0:12:39:26:9f:87:
01:77:65:75:94:92:14:fe:ab:01:76:dc:11:4f:50:3b:25:8a:
6c:67:64:7c:dd:1b:c2:3d:55:d2:65:c9:fc:a8:0d:5b:0a:9c:
e4:7d:5b:05:9e:29:02:38:c3:f1:0e:5c:30:75:60:bd:02:09:
7e:73:19:56:6a:c4:eb:c8:97:8d:3d:bb:e7:6d:63:36:ee:ef:
38:b7:0c:2a:24:45:e0:3f:40:87:69:0c:41:0c:ab:99:a2:e9:
c3:f3:dd:dc:56:fd:9d:44:66:e5:61:70:d3:fe:df:fb:68:c3:
31:59:eb:21:f9:b7:c3:30:15:75:f8:7e:c0:b4:4f:dd:dc:a2:
9a:d9:b6:99:8d:44:4d:ba:4b:2d:00:53:35:ef:42:9a:8b:0f:
d9:3c:ee:05:13:27:1b:18:12:c9:81:03:a6:35:48:04:cd:e8:
07:84:36:86:30:8d:dd:50:91:59:6b:7f:ad:09:5b:a8:80:c9:
7e:47:ba:15:a6:e8:03:66:e8:92:3d:9d:d9:8a:a5:17:c0:02:
63:39:05:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:27:21 2026 by rpki-client