Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
File: XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft (raw, json)
Hash identifier: kMTydHmSzBWXiNRNQVPCLeCzAHCflCNivwsyI+YBAGE=
Subject key identifier: 3D:D8:BF:14:33:B5:6D:D6:14:15:8F:F7:BC:2D:9D:FE:A9:F9:37:24
Authority key identifier: 5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
Certificate issuer: /CN=5d41d330dc8c7293e729451db2646383838e3f8c
Certificate serial: 019EBEECFB431596F037E88CA0ACFAC46422
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
Manifest number: 014C
Signing time: Sat 13 Jun 2026 03:01:02 +0000
Manifest this update: Sat 13 Jun 2026 03:01:02 +0000
Manifest next update: Sun 14 Jun 2026 03:01:02 +0000
Files and hashes: 1: XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl (hash: DKokuIzScThigZTQksgzR64DgBeoUAAvXk4uZ4Wspmo=)
2: hFrzrATwthoWhcz0MUU5me2hxsI.asa (hash: qasjw1PBGin1L+tvp/txSHK72tERURo1h0R6cieBtNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:fb:43:15:96:f0:37:e8:8c:a0:ac:fa:c4:64:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d41d330dc8c7293e729451db2646383838e3f8c
Validity
Not Before: Jun 13 03:01:02 2026 GMT
Not After : Jun 14 03:01:02 2026 GMT
Subject: CN=3dd8bf1433b56dd614158ff7bc2d9dfea9f93724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:8a:4d:09:68:0a:b5:10:82:99:cc:76:31:
96:3e:90:89:10:c4:a3:67:0c:a9:72:88:ca:28:4d:
9d:bf:1d:1d:af:6f:ab:55:72:c0:db:4d:91:55:48:
ea:20:8f:0c:db:b8:08:69:bb:4c:ed:5f:4f:17:88:
5b:ca:34:ae:e3:4b:62:d5:61:80:94:03:81:c7:f1:
37:aa:da:6c:24:be:3d:6c:46:9f:9e:2d:81:2d:72:
78:aa:2f:3c:57:95:8f:dc:1d:f0:10:35:65:24:24:
95:5a:a5:b8:6c:49:c5:e6:15:c5:d6:aa:36:8b:0b:
a4:97:12:e8:dc:16:5b:41:5f:24:30:61:27:6b:ac:
d4:22:8c:ef:e6:fc:62:1a:6a:65:ce:87:27:bd:2b:
98:48:88:0c:7b:74:61:b9:06:c1:7a:bf:91:ed:3b:
36:9c:8f:b2:bd:8b:ab:fd:a7:6a:d7:91:c4:17:ab:
ce:04:4e:83:07:6b:20:d2:a6:f6:91:5b:bd:a3:3c:
4b:ca:35:53:a6:34:29:1b:ab:7f:56:8b:1d:42:54:
2d:8a:ac:c0:52:b9:de:be:72:90:1d:bf:74:98:b2:
31:e4:de:61:a2:36:18:87:08:e8:22:32:49:b4:de:
fe:c3:0e:f9:b4:13:bc:9c:8c:ea:b9:e8:96:59:a1:
55:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:D8:BF:14:33:B5:6D:D6:14:15:8F:F7:BC:2D:9D:FE:A9:F9:37:24
X509v3 Authority Key Identifier:
keyid:5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f0:74:6a:87:8d:35:0d:64:2a:23:bc:8c:2f:39:cb:8a:c5:
14:1a:58:db:19:22:c1:91:37:77:ce:da:15:35:b1:aa:b8:07:
56:d0:41:01:f0:d3:c4:ff:4f:4d:ee:ca:52:05:ba:e7:ab:4b:
e1:e8:38:28:45:d2:30:ea:b8:98:ab:e5:53:2e:08:7a:11:01:
1f:be:55:31:eb:43:1e:0a:04:44:3b:8e:75:e2:a7:da:f1:79:
76:4b:28:d6:2b:11:d7:a4:c8:0c:87:e5:c4:63:6f:9d:bb:d5:
d7:2e:a9:6e:98:de:49:11:98:c0:e2:ff:9d:fd:99:7b:d3:43:
e0:f8:a4:ce:1a:5d:19:66:c6:2c:2f:31:52:ba:cc:41:cb:df:
f0:d6:d1:68:80:f4:6f:82:1b:c9:aa:64:e2:d3:0a:b9:ef:25:
ea:3d:9e:af:5b:0f:83:37:8f:86:9e:b0:e4:28:d9:b9:1b:86:
60:10:8f:a7:c9:29:5a:f1:f2:e8:3f:52:b5:e8:11:65:af:f3:
e3:3e:5b:a9:80:0b:59:e3:91:ce:f9:08:85:9c:d6:4f:46:c4:
13:20:87:22:1e:d9:f5:bd:1f:f1:da:7e:9c:f6:7e:bb:bd:88:
9c:b6:52:db:e3:ab:4f:7c:57:a7:d9:c0:bd:9f:79:8f:37:30:
06:f9:e3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:30:14 2026 by rpki-client