Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
File: X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json)
Hash identifier: KEOeDdu5P2XJNI0wcN0re66pFc7W8Vn/5GALAIIlQlo=
Subject key identifier: 49:20:42:12:FE:96:CF:2F:D3:5C:89:87:24:0A:5A:E4:CB:C2:80:E3
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial: 019ED3F408A626333BAF2A209E918B9B896B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
Manifest number: 1964
Signing time: Wed 17 Jun 2026 05:00:45 +0000
Manifest this update: Wed 17 Jun 2026 05:00:45 +0000
Manifest next update: Thu 18 Jun 2026 05:00:45 +0000
Files and hashes: 1: 7t-QMh_AB92nrya7tNjufAiIaNU.roa (hash: LTbV2PdrQop6XvBMoLsBRV4fZwR2wk3jFKlBOeHWh48=)
2: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: IwCUT3JkgXYk+YeHM0Mstaki8N83B6KPAh6rnKnYtXE=)
3: tyhGCGUUUxBeIkOEmn5CIWeCMz0.roa (hash: Mn4RuAcnVGGM8GO1ajZF2VYJS7eHnyi2wQ/w4qHvAaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 17 Jun 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:f4:08:a6:26:33:3b:af:2a:20:9e:91:8b:9b:89:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Validity
Not Before: Jun 17 05:00:45 2026 GMT
Not After : Jun 18 05:00:45 2026 GMT
Subject: CN=49204212fe96cf2fd35c8987240a5ae4cbc280e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ea:bc:56:0b:4f:a2:c5:5b:04:6d:d8:2e:33:
eb:4a:00:95:cb:db:7a:24:10:7b:91:30:55:38:52:
10:3a:2f:09:7e:3b:25:21:4a:71:a1:7f:c2:ea:f6:
21:a9:c9:51:ff:6b:df:74:e1:41:7a:44:39:c3:cb:
d7:39:b8:11:1f:0b:06:f4:d9:5e:d1:c1:99:6f:1e:
f2:0b:7f:1e:66:6a:7a:ef:72:aa:fb:ba:1d:49:1d:
75:ca:77:1b:b3:e7:7b:ce:3c:71:21:6f:55:16:a7:
6d:05:bc:d8:01:07:99:57:0d:2e:23:09:a9:dc:14:
1a:66:8d:aa:9f:18:a4:2b:cb:cf:f6:c2:7f:ef:5a:
ba:24:68:3e:64:70:4d:a0:86:bc:62:4a:87:4d:8f:
85:36:8d:da:11:6c:9f:56:c9:9c:15:b6:71:72:cc:
a9:5a:1a:fa:1c:e4:18:2f:31:3d:6a:c6:10:05:66:
a4:96:d6:63:80:07:61:25:d2:92:e5:cb:28:97:ec:
69:5c:d2:3d:84:1c:68:ab:81:5a:e3:d9:25:fa:7a:
bc:8b:41:18:e3:2e:0e:a4:ef:79:5b:46:f6:5d:0b:
a7:35:ce:b6:6a:21:26:f9:f2:1a:3d:ce:bb:a0:1d:
0e:90:13:d5:de:04:74:0a:c9:93:73:52:67:84:c6:
76:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:20:42:12:FE:96:CF:2F:D3:5C:89:87:24:0A:5A:E4:CB:C2:80:E3
X509v3 Authority Key Identifier:
keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:26:04:9c:56:ce:df:e5:1b:30:46:23:92:00:5a:20:e7:4b:
77:d7:84:67:8e:a1:13:c2:ae:8c:b6:76:f7:a9:bf:1b:50:65:
04:2b:94:44:7a:ba:c6:f6:f9:75:d9:27:44:cf:f4:80:58:7c:
ab:39:35:e1:b1:78:bb:b1:1c:cf:6e:fb:97:eb:57:4f:cb:24:
ba:b7:fc:5b:83:3d:55:17:0a:4b:cf:4e:e2:94:e4:30:1f:20:
6a:c4:4c:f3:22:64:01:83:b1:14:b4:f1:c0:4b:f7:c6:a6:69:
f7:7c:2a:6d:32:55:43:78:44:a2:64:1a:75:d0:42:47:fc:f9:
ce:31:d3:df:65:20:f0:55:d4:2a:1b:df:c2:b9:ab:09:5b:a6:
0c:00:85:65:27:db:bc:13:f3:d7:c8:1e:f0:af:e9:87:84:45:
31:74:9a:16:32:ec:56:22:e9:b6:5e:11:81:7a:42:ea:7c:64:
a1:87:5b:27:fb:a8:e9:47:c0:18:5a:91:36:72:05:e2:ca:f8:
e4:57:9e:3a:85:f3:7c:a4:d2:6d:51:e2:f7:6e:83:63:93:0a:
05:04:0d:e5:8b:95:95:68:58:22:6a:8a:7c:78:78:aa:1a:d9:
57:28:37:ed:a6:63:89:b3:2f:3b:65:10:9c:99:60:8f:8c:f0:
48:e0:c8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:10:40 2026 by rpki-client