Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
File: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft (raw, json)
Hash identifier: 46UlfD4EIj+uiDt9JKwqCJ2c+gagPexqXEjYgnaxhm4=
Subject key identifier: AD:F0:C4:E1:F9:38:AE:5F:31:43:98:F8:91:F5:EA:0F:F7:58:A5:99
Authority key identifier: 5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
Certificate issuer: /CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Certificate serial: 019EC036C257ABF710828306CE96B6395D90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 09:01:14 +0000
Manifest this update: Sat 13 Jun 2026 09:01:14 +0000
Manifest next update: Sun 14 Jun 2026 09:01:14 +0000
Files and hashes: 1: 4PuIVLEIj4zZmZW-uUpD3PaA49w.roa (hash: ywwR6jVCoJoX2GD3atJ7KKAi8JK9J3yhYoAwj8Jfgz4=)
2: XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl (hash: Hbv7HWRih6GMseLA4Pm6CrEAtTBsuGZ3Ah5sNkeWQro=)
3: rVLmDTrtM8fRD2YrBcUhwt9PtiE.roa (hash: qzKX309DgizvFnW/1CNilCV4HRwfLRrE8VOSlsECFro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:c2:57:ab:f7:10:82:83:06:ce:96:b6:39:5d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e05cb67209bbd1983f4327716523eb1777fd4fa
Validity
Not Before: Jun 13 09:01:14 2026 GMT
Not After : Jun 14 09:01:14 2026 GMT
Subject: CN=adf0c4e1f938ae5f314398f891f5ea0ff758a599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:e2:61:f8:7b:5b:8f:7c:a3:07:4d:f2:f8:
68:7e:ec:78:c2:b6:52:fe:f9:20:d4:4d:05:fa:af:
85:96:db:98:c8:f7:3e:c4:6f:bb:6b:18:7a:6b:e0:
6d:55:41:75:54:34:5b:e7:75:53:eb:f9:d6:2b:c1:
71:f4:24:bc:18:ee:bc:bf:b8:c8:0b:82:9c:f7:81:
ad:23:2b:28:a5:96:1d:15:1f:73:ff:66:ea:af:04:
27:f8:0d:90:b6:ca:7e:3e:6a:44:78:8d:c9:a1:d1:
93:76:1c:e9:bc:68:94:fd:75:4a:7c:3f:93:87:38:
35:44:80:05:dc:fd:fe:e4:bb:16:8e:12:77:23:74:
7a:49:65:ff:f1:be:c5:02:f7:6f:49:25:59:8a:c0:
07:7e:bb:25:9a:bf:56:32:d7:ed:bd:d3:b5:8e:0a:
57:c3:9e:06:f9:86:cc:82:a3:c2:28:af:ec:eb:82:
61:b7:ac:03:e4:0e:8d:c3:1a:ac:9a:57:d6:07:fb:
f2:af:e6:9b:e9:d5:99:ce:d7:4c:7e:ef:f8:5d:da:
e1:23:80:17:92:8f:cc:dd:26:33:15:c2:a8:23:4d:
15:52:05:2b:9f:c3:01:46:ce:2f:bc:eb:0f:58:6c:
1c:c2:5f:81:87:64:8a:14:1e:62:42:59:6a:f5:a1:
4b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F0:C4:E1:F9:38:AE:5F:31:43:98:F8:91:F5:EA:0F:F7:58:A5:99
X509v3 Authority Key Identifier:
keyid:5E:05:CB:67:20:9B:BD:19:83:F4:32:77:16:52:3E:B1:77:7F:D4:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/9ca0df-d474-40cd-8688-1715919567c9/1/XgXLZyCbvRmD9DJ3FlI-sXd_1Po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:a4:19:92:91:57:2e:f9:c5:ef:e3:71:84:f0:10:57:85:70:
87:fa:4f:ba:4a:db:61:87:51:89:70:92:3a:54:27:77:ff:08:
54:be:9e:33:73:65:c1:51:49:8e:c1:c0:23:8d:70:82:8a:2e:
76:57:2e:69:c9:3c:8a:0f:35:95:fb:48:db:99:20:f8:71:15:
97:d7:d7:92:47:63:2b:7e:22:2d:a3:ab:08:84:a5:6d:9e:2d:
03:36:fe:83:81:b9:a3:0a:a9:fb:35:3e:b5:8b:44:d9:02:1b:
bd:e4:44:52:06:25:9e:94:63:b2:b1:14:be:7e:e6:17:a7:cb:
7d:dc:e2:ce:65:3f:f6:e4:60:f5:96:a6:ff:fe:42:f0:72:26:
4a:bd:e8:2f:98:6a:0a:25:59:ce:2a:d4:49:e5:e3:36:06:b7:
b4:3c:75:d4:92:f5:ba:1a:6d:a7:f3:14:32:50:48:8c:24:23:
90:70:eb:a7:b3:79:30:bd:b0:42:e7:71:13:e3:d7:49:2b:36:
0c:d2:fd:fa:09:44:0f:98:ed:9a:21:a0:d2:7d:30:73:85:8d:
72:3a:f6:4e:12:90:e5:db:c0:a3:3a:5d:84:7e:44:e1:a8:6f:
d4:a4:d4:ab:21:57:3f:55:7f:e2:1c:39:c1:59:da:d8:19:75:
53:8a:fc:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:09:12 2026 by rpki-client