Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: B5uH4n6gBYcXinNRoEC5/Rl574ueKbyQBlNf9Yhzzic=
Subject key identifier: EF:23:C0:33:F7:0D:FE:F3:02:AA:36:6C:91:46:1E:D0:9D:50:16:0B
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 019EC36E4798FA3002D1BDA3407051448DEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 195F
Signing time: Sun 14 Jun 2026 00:00:44 +0000
Manifest this update: Sun 14 Jun 2026 00:00:44 +0000
Manifest next update: Mon 15 Jun 2026 00:00:44 +0000
Files and hashes: 1: E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa (hash: Uscjfda3vNy/cunwHUUok4ph0ZEvFOV3pV/NuXcyZJ4=)
2: jQxMjcdrhmgG348-FC6ZQ2XBhWA.roa (hash: zzN6qYWykA9k6vddc6gAA5bY2rFVt0NTvTAU0BcNrqQ=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: +k26dTRgMK9xpvxlWcGg9KRMMn69dio61AOZa2fj8mI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:47:98:fa:30:02:d1:bd:a3:40:70:51:44:8d:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: Jun 14 00:00:44 2026 GMT
Not After : Jun 15 00:00:44 2026 GMT
Subject: CN=ef23c033f70dfef302aa366c91461ed09d50160b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:59:34:65:f7:51:29:90:97:ab:e2:62:2a:ef:
a9:a5:2d:7d:12:53:1c:78:f0:1a:73:c0:c3:b9:e9:
17:06:df:76:a3:6e:fc:3d:24:8e:17:fb:b4:f7:ed:
1a:33:05:f1:84:8c:d6:49:9c:ee:b1:68:11:f9:a7:
fd:7e:43:19:ce:7c:ef:ba:1c:df:94:85:0d:99:25:
29:df:27:26:9e:bf:58:48:e1:fd:48:10:6d:0f:a9:
59:47:52:60:40:b1:70:9a:71:43:ce:2b:d5:c8:4b:
cb:ab:0f:2a:ef:dc:cd:42:31:1b:ba:23:4a:a7:f3:
27:2b:cf:3c:1e:26:2f:fd:d4:33:06:40:1e:97:cc:
08:da:84:93:e2:c7:c2:97:1e:1e:5d:50:de:53:8b:
d2:4b:0d:75:58:cb:5e:3e:be:c8:a8:f9:1e:d6:08:
43:3e:4a:5c:1e:ea:ed:d5:0f:62:4b:89:5a:5c:45:
4e:30:4e:cd:ac:d2:a3:04:42:5e:ca:4e:1b:f6:d4:
69:4b:90:a3:80:7f:5c:18:4d:39:64:72:55:39:ad:
7c:96:62:5f:43:df:ec:4d:84:87:17:8e:04:f0:e4:
40:f0:9e:74:a0:7b:c5:64:ba:3b:42:13:9d:64:f1:
44:b4:25:78:c2:ad:a3:0b:85:77:31:fc:a1:f3:74:
40:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:23:C0:33:F7:0D:FE:F3:02:AA:36:6C:91:46:1E:D0:9D:50:16:0B
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:46:f5:9f:e9:9e:89:19:5c:b7:1e:52:7c:af:81:f5:52:ef:
77:a4:56:bf:7c:52:c4:d7:ea:a5:50:f5:5e:76:dd:f3:05:f6:
98:85:8d:2f:13:2f:20:4d:88:e3:50:a0:2e:f3:2f:b4:63:dc:
04:ec:a4:bb:3a:dd:6d:d6:aa:29:cc:0b:14:44:08:33:a4:ad:
7a:61:a7:c2:b4:3f:21:c3:83:78:7e:00:31:25:57:5f:56:9b:
f3:7f:16:49:14:ae:43:bc:08:d1:7a:86:22:c9:fd:3e:b5:74:
6f:23:4e:e2:9a:5a:a3:6b:7f:09:cb:c3:49:a4:17:52:f6:4c:
5b:f4:f1:64:82:b6:11:a0:d6:18:4d:a5:85:87:96:2f:6f:28:
4c:d4:e2:59:05:b6:46:06:50:0f:5d:75:4c:e3:e8:e5:6a:c5:
66:fd:35:f4:7a:08:a8:e1:ae:e8:4a:51:92:e1:01:b2:65:db:
b7:78:26:0a:eb:67:9f:c9:e6:8c:80:fe:28:a2:eb:69:f3:57:
87:d7:5b:ba:90:7b:db:f9:9a:2b:bb:97:3e:f2:28:85:92:28:
3c:a5:d2:d6:d5:9a:84:51:0d:47:c7:50:fb:ad:16:79:a7:15:
d2:02:34:a2:ca:60:ed:5e:82:2e:18:09:0a:06:94:e2:41:13:
62:17:8c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:03:27 2026 by rpki-client