Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
File: xcSzrlnZgfJQzIfatZeFSr7XowA.mft (raw, json)
Hash identifier: +IyYZJhDtGx/afrdrR0o0/Nb0FyW67AB2cXja3VBRts=
Subject key identifier: 5A:FB:E0:2F:A6:69:E6:A5:45:54:C4:40:34:CC:B3:8A:8D:DE:30:EF
Authority key identifier: C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
Certificate issuer: /CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Certificate serial: 019EC0A400DFBB640E2DD9F0F328DFCEC0F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
Manifest number: 0873
Signing time: Sat 13 Jun 2026 11:00:33 +0000
Manifest this update: Sat 13 Jun 2026 11:00:33 +0000
Manifest next update: Sun 14 Jun 2026 11:00:33 +0000
Files and hashes: 1: OBYyhiA-o_Lu_Sii3K0csw4HB8Q.roa (hash: losaCS7PxxPceDw56uDFnzA7tz476/wdte0ltw/SmOk=)
2: xcSzrlnZgfJQzIfatZeFSr7XowA.crl (hash: GhGaCxvtZ/UVcqREecAuTF4AYaFV5u1f+OgfIxBvQSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:00:df:bb:64:0e:2d:d9:f0:f3:28:df:ce:c0:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c4b3ae59d981f250cc87dab597854abed7a300
Validity
Not Before: Jun 13 11:00:33 2026 GMT
Not After : Jun 14 11:00:33 2026 GMT
Subject: CN=5afbe02fa669e6a54554c44034ccb38a8dde30ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6e:58:64:23:d4:9f:f9:db:e5:f5:68:85:e7:
ff:13:1a:91:66:42:80:7d:7b:7f:bb:98:ac:2e:16:
c3:97:93:10:ba:32:d6:bb:6d:2c:ad:49:37:11:5d:
82:c2:98:89:9e:a8:db:7a:fa:24:ff:56:b0:17:d8:
16:29:e0:c0:49:d5:ff:b9:4b:d3:fe:c8:0e:72:97:
47:4b:8d:5c:0b:28:55:d7:39:f1:0e:0d:58:c7:56:
1b:7b:af:82:f6:8e:9e:a4:79:19:fe:19:42:64:82:
6a:ee:98:b7:08:95:45:f8:eb:be:dd:3e:00:6e:5d:
c3:58:58:26:a2:b9:3e:0b:03:20:c6:4f:e2:b6:13:
da:ff:9e:d3:6b:47:ff:f5:02:0c:14:d2:07:85:d2:
cd:51:9e:93:11:e3:70:1b:36:6d:1c:e6:2c:7a:73:
61:ed:93:81:84:b1:aa:f5:62:17:28:a5:3f:2d:e5:
33:42:e6:11:a8:8f:cf:36:d9:40:68:85:08:78:2d:
9f:02:e1:e3:99:89:7f:c1:17:59:e8:0a:dc:1f:6c:
47:2a:85:34:e1:55:8f:cb:de:57:95:86:64:c5:1d:
ae:62:0c:19:78:0b:73:be:e7:27:20:1e:ed:0b:90:
63:44:cf:2b:b1:e6:b2:56:a2:18:97:2d:53:ba:bc:
b8:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:FB:E0:2F:A6:69:E6:A5:45:54:C4:40:34:CC:B3:8A:8D:DE:30:EF
X509v3 Authority Key Identifier:
keyid:C5:C4:B3:AE:59:D9:81:F2:50:CC:87:DA:B5:97:85:4A:BE:D7:A3:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcSzrlnZgfJQzIfatZeFSr7XowA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/9f54a6-933f-47de-8726-eddf527e8f2d/1/xcSzrlnZgfJQzIfatZeFSr7XowA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:fa:a4:3d:a4:8b:71:9d:13:df:ec:f8:f7:fa:a2:1d:04:ab:
2a:03:c8:d1:a2:ed:eb:0f:0b:d0:74:a6:e7:bc:b2:e3:93:5f:
1f:c3:9a:55:e2:b2:27:10:15:86:28:08:d2:c6:b5:df:a1:17:
04:78:dc:50:ea:d4:9d:5d:f4:2d:38:0f:8f:a8:0b:89:90:bd:
47:ee:a5:2c:05:f6:d9:a1:ed:24:6c:8f:2d:a9:10:a8:d3:58:
01:32:f7:09:82:06:65:b8:bb:d8:60:2b:a9:1a:86:d4:9e:4d:
00:ef:04:95:8f:22:b6:4f:e1:bb:c7:09:b0:44:35:cf:75:7a:
46:c9:31:cd:83:71:b5:48:13:df:86:11:02:4b:d6:1c:18:76:
9a:02:48:2e:a7:64:6c:eb:bd:cb:1a:81:de:c9:35:d3:5b:66:
6c:ca:24:34:29:55:88:62:a0:26:6e:96:66:b9:6a:a2:20:8c:
83:c7:75:bd:a7:18:67:ee:25:f6:07:56:64:3c:2d:84:21:24:
6d:5e:59:e0:74:3f:b1:f6:58:45:78:42:20:f2:d0:b1:b5:87:
d9:72:9b:62:2e:29:0b:6c:a0:16:7f:de:1a:91:bb:d0:3a:36:
73:39:4b:8d:00:0e:aa:ab:f2:53:f0:36:fa:d1:31:96:7b:89:
da:72:8a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:21:00 2026 by rpki-client