Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
File: xg8yRv3WG6G1eS_hrsStypjXWlw.mft (raw, json)
Hash identifier: 0e4YMy3Ab/aVkBYAHr4QfltugYHrn8SFBiAsgPYaImY=
Subject key identifier: FC:CA:7D:CF:D7:C2:D6:79:7D:9A:CF:B6:25:EE:D7:40:D2:70:D6:7D
Authority key identifier: C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
Certificate issuer: /CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Certificate serial: 019EC1489A7BB1E5C40A2D325C9C203225A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
Manifest number: 033C
Signing time: Sat 13 Jun 2026 14:00:21 +0000
Manifest this update: Sat 13 Jun 2026 14:00:21 +0000
Manifest next update: Sun 14 Jun 2026 14:00:21 +0000
Files and hashes: 1: MmQGKSoH5LF3BVkr3ibrE-H9I9E.roa (hash: yWJCfOrBqqRptAvrnSvVrhM/S/WywcoV/IXeHHMd0es=)
2: xg8yRv3WG6G1eS_hrsStypjXWlw.crl (hash: ZUcCXrr3cRQpPRLFN04mj4qKvuXzdXdhDYMOleWtB4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:9a:7b:b1:e5:c4:0a:2d:32:5c:9c:20:32:25:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c60f3246fdd61ba1b5792fe1aec4adca98d75a5c
Validity
Not Before: Jun 13 14:00:21 2026 GMT
Not After : Jun 14 14:00:21 2026 GMT
Subject: CN=fcca7dcfd7c2d6797d9acfb625eed740d270d67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:68:41:c9:19:c4:e7:a1:eb:dc:93:61:37:73:
db:98:c1:32:0b:1e:5e:b6:97:fc:be:c4:e7:8b:62:
67:31:83:00:37:94:42:92:f4:99:71:da:2d:ab:ff:
57:60:0d:3a:c9:12:42:69:57:db:3d:5d:68:e6:c2:
66:8b:ed:af:4b:cf:e2:8b:e1:85:c0:d8:ee:d8:8b:
da:03:0c:6c:79:83:dc:f7:53:a3:8d:cf:47:2e:a3:
2a:1b:b7:48:7c:17:cd:10:24:68:46:38:bb:68:04:
ee:87:cd:d4:84:e9:60:b7:46:c2:25:52:91:d2:2b:
67:09:1d:39:2c:14:d3:06:f9:c4:57:cf:a8:dd:44:
b3:65:02:ae:13:e8:44:93:9b:ff:34:1c:a8:63:19:
60:ba:ce:d2:67:08:e9:b2:5c:f3:55:53:c8:61:8f:
59:e6:8f:ed:f3:d7:21:88:9c:b8:be:63:50:d8:da:
78:76:03:2a:c8:5a:f6:1d:b3:71:0b:4e:2e:ce:15:
cc:67:71:b3:d8:30:6e:71:30:e1:d7:4a:01:28:2b:
58:d2:7a:5c:e8:d9:71:1e:6a:95:32:df:60:87:c2:
1e:1c:fa:c6:f8:25:8d:11:1e:7e:96:27:e1:bd:4a:
a6:6e:28:80:4e:4f:0d:e8:3f:9e:2c:06:75:2f:fb:
b1:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CA:7D:CF:D7:C2:D6:79:7D:9A:CF:B6:25:EE:D7:40:D2:70:D6:7D
X509v3 Authority Key Identifier:
keyid:C6:0F:32:46:FD:D6:1B:A1:B5:79:2F:E1:AE:C4:AD:CA:98:D7:5A:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xg8yRv3WG6G1eS_hrsStypjXWlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2a656a-9323-4424-8fb5-179792768dae/1/xg8yRv3WG6G1eS_hrsStypjXWlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:60:17:b6:3b:99:c6:06:c2:f8:60:b1:be:99:a7:a4:3a:de:
bb:f8:b8:92:5e:fe:1e:31:00:d9:d6:61:c4:2d:26:54:c3:df:
d9:a0:80:e6:8a:5b:e7:29:7b:d5:72:35:30:31:7c:99:12:3e:
ea:98:6a:8b:0d:b7:af:70:02:e5:71:22:51:e6:2b:be:af:f0:
08:18:f8:4f:fe:45:b4:50:58:eb:00:25:39:af:22:81:b5:4c:
3d:1e:3a:6b:2e:cf:46:7f:e0:8e:81:43:96:18:8e:81:00:e9:
09:0d:2f:c2:19:9f:15:ad:9d:ce:0c:47:cf:e3:75:7f:f5:e9:
ec:7a:cd:c2:f4:ed:77:9c:31:22:f5:e3:2a:d7:b9:37:4e:bd:
95:a3:36:77:83:c4:c4:ce:78:c0:4e:91:bf:c0:0c:db:46:cf:
48:a6:de:f4:45:91:9b:6d:ca:4e:e1:29:3a:20:0a:79:3d:b9:
06:e0:bc:23:ee:ce:bd:ab:a5:0c:bf:69:52:0c:e3:fa:5f:4b:
6d:19:36:a2:81:8f:fd:4f:9e:9a:90:4f:4a:21:b7:d3:16:8a:
68:f4:74:81:0b:62:0c:fb:3d:5e:6c:af:a6:79:6d:b4:7b:dd:
2b:f6:82:f7:04:e6:5a:0a:d1:d6:19:32:9d:be:83:de:6b:77:
a9:a5:0d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:03:27 2026 by rpki-client