Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: 971Ffd8Wm/CX2mrLOpQe1EG5+RWBuXbwKWHc0CrUzaI=
Subject key identifier: 43:24:A4:BA:33:26:7A:54:47:80:15:62:F3:5F:86:17:5C:57:8C:B4
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 019EC2922A7D9ACB5B0FB962EECDD08455B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 195E
Signing time: Sat 13 Jun 2026 20:00:19 +0000
Manifest this update: Sat 13 Jun 2026 20:00:19 +0000
Manifest next update: Sun 14 Jun 2026 20:00:19 +0000
Files and hashes: 1: D7RyDh7lTL4H2jBeI3MtODxeB2w.roa (hash: j4FPb00AEU8sTGz7vN2WFChjUdkqXvKYmGt4w0kqQbw=)
2: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: es8rJxuOB2PEP1bekH4Vv4gaB+WlE2dJFu3eeO/GtnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:2a:7d:9a:cb:5b:0f:b9:62:ee:cd:d0:84:55:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: Jun 13 20:00:19 2026 GMT
Not After : Jun 14 20:00:19 2026 GMT
Subject: CN=4324a4ba33267a5447801562f35f86175c578cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:11:5b:ad:59:2f:ee:59:06:e1:6f:6f:2e:6c:
e1:e9:94:9a:9b:08:e3:3b:0f:e9:2f:7b:5f:6f:af:
a5:d0:b8:14:b4:cd:f9:0d:bb:13:78:0b:cc:be:25:
34:4a:47:ea:4d:3b:86:72:ab:24:35:43:fc:f9:9c:
fb:15:a5:5c:85:aa:83:aa:db:85:b3:6b:e2:b2:3d:
c5:9e:e1:e6:cf:86:61:0c:c7:e0:07:2f:52:af:53:
37:90:86:1d:e1:4e:f4:83:87:74:eb:5c:fa:74:b3:
20:d0:7c:04:a6:f6:60:ce:aa:fc:e1:07:61:53:77:
70:21:d1:44:23:ec:74:a6:ef:f9:d3:0e:1b:58:66:
4a:82:d3:7e:94:9c:62:99:34:51:e8:74:80:7f:70:
7d:11:52:61:2b:63:3a:d2:6e:3a:1c:61:1d:4b:b8:
41:cc:ba:e0:e1:7b:ec:75:d0:41:e8:28:00:c6:44:
2e:54:a5:21:79:96:5a:ef:ce:34:13:c4:7e:ed:c9:
88:e7:f6:97:72:5b:32:5b:ce:03:c5:52:48:21:9f:
fa:5a:65:e9:27:0a:12:ad:c8:ac:64:09:51:ff:41:
bf:65:e2:c2:15:28:60:3b:78:45:3e:67:a6:90:17:
d0:b8:b5:6f:e2:3c:80:63:b2:9d:75:0b:1e:4c:5a:
b3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:24:A4:BA:33:26:7A:54:47:80:15:62:F3:5F:86:17:5C:57:8C:B4
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:a7:9a:1b:a2:6e:30:f2:25:99:ac:7f:ff:58:24:86:82:4a:
43:8c:68:5e:16:c9:59:2a:36:b2:e2:4c:f2:15:7d:7e:75:68:
8a:b7:c7:ef:b2:4e:fb:42:42:c1:e6:6d:0b:e0:3f:8a:60:c8:
d9:92:ae:79:89:ea:e2:78:d0:31:a2:d3:86:b0:85:19:f0:ab:
ac:1e:68:ca:be:3c:de:cd:51:6c:63:54:90:67:7d:c5:59:ed:
23:f5:cf:5c:f3:09:17:6c:9d:b6:f7:1a:db:db:78:3e:66:b5:
f4:11:a1:80:80:96:32:ce:80:f9:59:e1:91:27:00:4d:1b:24:
fd:78:bf:b1:4c:47:1a:15:c6:1a:8a:2b:fa:a4:1e:e6:ec:40:
20:81:19:d7:6b:5e:d5:dd:a2:35:85:15:e6:e0:37:4f:50:f5:
45:9d:55:c3:e3:1c:33:8a:78:c4:c2:1c:ff:0b:ed:3b:9c:17:
3c:43:57:c3:c8:46:42:ef:3b:cb:88:e8:d9:dc:a7:bb:a3:38:
df:3a:63:0a:92:4c:4c:c0:17:3e:ab:95:cd:97:56:24:ac:a1:
64:bf:e4:6f:14:e0:8b:6f:6f:98:af:bd:ad:71:4c:ee:2f:84:
77:7a:49:88:fb:55:e2:45:89:41:67:ef:f2:68:59:48:f3:f8:
70:0a:52:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:30:07 2026 by rpki-client