Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
File: XX9jQBQHwcx5excDToE9IlT5dz4.mft (raw, json)
Hash identifier: ScCA6/qKdu/3JefygwFhsJVfUntp2tXDS4taVrFubE0=
Subject key identifier: 70:AB:DF:1D:71:DF:E1:B1:4A:A8:C5:A6:BC:55:2A:E8:77:DF:D1:F3
Authority key identifier: 5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
Certificate issuer: /CN=5d7f63401407c1cc797b17034e813d2254f9773e
Certificate serial: 019EBF91C421427A89CE902D62E89DE73B73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
Manifest number: 0FF1
Signing time: Sat 13 Jun 2026 06:01:01 +0000
Manifest this update: Sat 13 Jun 2026 06:01:01 +0000
Manifest next update: Sun 14 Jun 2026 06:01:01 +0000
Files and hashes: 1: IJctrhezjfWjiA84ZaayWYeZh1k.roa (hash: VetyKsjNSyH6fNCp1k97xHgv6Vja8yJIQbMcO2qIjkU=)
2: XX9jQBQHwcx5excDToE9IlT5dz4.crl (hash: qkA4XCER98IE5AgZ3tpa3nATYm3neRc/EqMCafQj9YM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:c4:21:42:7a:89:ce:90:2d:62:e8:9d:e7:3b:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d7f63401407c1cc797b17034e813d2254f9773e
Validity
Not Before: Jun 13 06:01:01 2026 GMT
Not After : Jun 14 06:01:01 2026 GMT
Subject: CN=70abdf1d71dfe1b14aa8c5a6bc552ae877dfd1f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:75:44:17:9d:eb:55:b9:51:40:3c:ef:f3:
07:80:22:dd:18:69:51:63:dc:d5:61:d2:83:a9:61:
fa:fb:fb:ed:a6:00:c1:bc:d2:9e:f2:2c:22:bf:42:
0d:64:5d:81:5e:0b:2d:2f:81:ab:86:45:40:48:cd:
e2:17:8e:16:53:40:17:fb:13:74:87:ff:15:42:6f:
10:39:d0:c3:b1:14:3b:8f:d1:31:08:9b:e0:68:ad:
bd:00:51:9f:d5:6e:66:5a:8a:a7:75:fc:ca:81:f6:
76:1b:33:43:a7:3b:73:be:40:76:20:b3:a1:06:24:
5e:7c:0d:ac:24:3f:a7:0a:d1:ec:b4:e1:22:06:4e:
a4:1e:e0:29:0c:98:74:6a:39:c3:ea:bf:b5:ed:98:
96:af:09:32:2e:27:c9:28:ad:00:f8:d2:d6:87:3f:
9a:7d:c0:fc:39:80:fa:70:b0:2d:8b:57:c0:ff:30:
f0:3e:af:5b:57:c2:2e:9a:9a:ca:e9:01:a4:02:ae:
c2:2f:fa:ce:9c:f0:62:8c:7c:c2:fa:65:2d:47:eb:
77:56:26:3d:06:b5:ac:bc:9b:52:d9:9a:77:7a:81:
a8:0f:3b:a6:3f:0c:1f:ae:dc:ea:11:37:1d:26:88:
32:d2:34:13:3f:d5:71:d0:6d:a1:c1:3e:14:ce:89:
49:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AB:DF:1D:71:DF:E1:B1:4A:A8:C5:A6:BC:55:2A:E8:77:DF:D1:F3
X509v3 Authority Key Identifier:
keyid:5D:7F:63:40:14:07:C1:CC:79:7B:17:03:4E:81:3D:22:54:F9:77:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XX9jQBQHwcx5excDToE9IlT5dz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/550004-e1a6-4569-ae63-33fb1452bb0a/1/XX9jQBQHwcx5excDToE9IlT5dz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:31:c5:42:02:ee:80:ab:cb:d3:bc:75:6b:69:59:33:09:38:
00:20:ed:09:4a:3d:ea:bf:49:62:ff:34:ac:5c:38:ca:82:ba:
8f:3e:98:9a:e4:c6:8b:3c:04:d5:c6:2f:1b:30:b7:5d:cd:2c:
42:d0:1e:88:e4:b0:16:d0:e7:84:3f:ea:d3:98:d8:a4:4d:94:
6c:66:2d:67:c0:57:7d:22:a0:73:fd:54:ef:c8:73:9a:97:ba:
48:d7:ee:9e:00:74:a4:40:48:bb:f7:b1:44:6a:70:88:77:3e:
a8:92:e5:7d:a6:c8:a8:5c:2c:1a:ae:5b:85:bd:fd:b6:07:0c:
ca:f1:13:88:3e:76:56:a8:5e:59:7d:56:c4:e0:3e:0e:4d:92:
40:39:d5:2d:4a:75:86:13:2f:55:7c:ea:02:68:80:71:6e:0d:
38:8b:e5:16:53:6f:cd:2c:f9:38:ca:ff:2c:a0:a9:28:6e:98:
89:76:39:56:e8:69:30:c6:85:86:fa:77:e8:9d:1d:d1:fb:8a:
f3:7c:d9:63:49:5b:c5:6a:83:39:e9:ae:32:61:e0:24:1e:e7:
f1:06:5f:7d:13:63:74:b4:29:52:84:e0:0f:3f:53:83:71:49:
de:0d:3f:4d:b1:b1:da:11:a5:e7:22:f5:bc:eb:0b:56:1a:ea:
73:e5:c6:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:51:11 2026 by rpki-client