
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: 0eHtoVqfVO3d5lYHzaQ8pXA27uhYrpyhEJytiwm6kY8=
Subject key identifier: FB:59:64:C5:61:CA:7A:B2:9B:8F:21:61:BA:A8:7C:40:51:B6:8C:C3
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 019ED42B3AFB1912F148013AAACEEF7E2186
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 15A0
Signing time: Wed 17 Jun 2026 06:01:03 +0000
Manifest this update: Wed 17 Jun 2026 06:01:03 +0000
Manifest next update: Thu 18 Jun 2026 06:01:03 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: npU3FiTUvsLifWVJQaOOXA8X1SAys8lGFlhAW2UrExw=)
2: fDzIkCC4HQZF8d8gvy277WuuRYM.roa (hash: TzMFdxwnyUIL4oJ9MUVrNEjKX81ekLEZoq92hFxo3V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:3a:fb:19:12:f1:48:01:3a:aa:ce:ef:7e:21:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: Jun 17 06:01:03 2026 GMT
Not After : Jun 18 06:01:03 2026 GMT
Subject: CN=fb5964c561ca7ab29b8f2161baa87c4051b68cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:07:4f:83:4d:61:36:45:17:dc:25:43:cd:19:
92:db:53:38:00:ea:5b:b1:12:5b:5b:3e:60:b6:fc:
25:29:bd:62:8b:4e:c8:e6:0b:4f:80:84:62:e5:5a:
00:32:1a:b7:ef:c1:64:de:fb:6f:cc:f0:c3:f6:eb:
24:04:77:09:b0:eb:07:f5:78:93:9b:35:66:01:7f:
5c:20:36:5d:3d:e7:f3:2a:6e:89:42:ea:a3:78:35:
6f:72:9c:d2:c1:8b:4e:53:5a:eb:f0:b4:52:51:6d:
48:47:2b:b4:33:43:3d:1c:36:9a:ba:39:43:c4:21:
eb:d9:80:2c:e3:2e:6d:de:fd:8a:7c:fc:4c:c1:69:
67:a7:4e:40:c9:3d:c1:21:17:de:fd:49:b5:3c:39:
95:b1:66:ad:4f:b2:c8:b7:c3:98:21:0f:84:81:8d:
57:10:e3:08:69:48:33:4c:6f:47:e8:40:91:ab:c0:
8d:ce:8d:dc:03:7f:b6:19:5a:c4:9f:20:49:bd:52:
b5:2a:8b:1e:c4:f5:73:88:bc:5c:ee:a5:41:7e:53:
19:df:76:de:68:c9:fe:c6:c9:d6:d7:de:eb:d7:40:
34:08:63:26:26:e6:ca:d4:0e:74:3e:60:b1:94:05:
d2:d9:57:4f:51:1c:b0:56:12:a3:2e:33:3e:b1:6a:
03:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:59:64:C5:61:CA:7A:B2:9B:8F:21:61:BA:A8:7C:40:51:B6:8C:C3
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:11:1d:77:8b:c1:32:20:2c:9b:ff:58:29:d2:82:19:02:71:
d0:8e:4f:04:72:87:e8:6d:63:aa:b7:e9:6b:09:21:bd:b2:6c:
1e:83:43:e2:50:ca:0c:55:a9:73:77:80:5d:15:bb:24:83:54:
77:6b:60:56:a2:94:28:af:f7:52:d2:5a:f9:cd:e2:05:85:79:
28:9a:ff:19:9a:ac:6c:a9:2f:5e:98:34:8c:fc:51:31:61:df:
60:c9:08:eb:13:a3:ce:f1:7b:43:9a:46:69:01:17:e4:4b:51:
f5:65:77:17:de:3f:6e:1a:1f:b8:d6:45:22:b2:39:ad:03:b3:
d6:90:81:7d:a7:fa:fa:f4:67:6e:e1:7e:b3:ce:f6:25:c7:a3:
62:5d:b2:97:cf:c6:d6:9c:45:ad:1d:8e:ba:86:5b:c3:34:4f:
8d:af:30:c4:ef:5c:2e:e0:38:b7:a0:38:2b:d4:df:43:96:76:
8e:d3:60:48:5e:6b:58:4b:21:0d:50:98:78:0b:75:2e:d3:90:
fc:6e:b0:c7:e3:42:f0:2a:fa:70:0e:62:e2:6e:41:07:52:84:
8f:22:fc:2a:8d:15:6f:ac:61:1e:68:4a:89:b8:ef:e0:c3:e1:
b7:95:35:73:68:3b:d8:f1:9b:25:66:87:4b:50:09:65:80:25:
d4:92:29:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:23:03 2026 by rpki-client