Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
File: xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json)
Hash identifier: hwUTFNkWoPbuoCTwjUgPyZGaBcgBmUP8Z9wZPGI+cXs=
Subject key identifier: 4E:B1:FA:DD:26:F0:81:30:6F:6D:D8:24:F1:FB:36:7C:7E:6E:E5:AE
Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Certificate serial: 019EC1498DF097F65DE2786F9ABF44819B93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
Manifest number: 07C1
Signing time: Sat 13 Jun 2026 14:01:23 +0000
Manifest this update: Sat 13 Jun 2026 14:01:23 +0000
Manifest next update: Sun 14 Jun 2026 14:01:23 +0000
Files and hashes: 1: Mk6KT-G0Nd_n-6Ue0npJ0Pqa4CI.roa (hash: 2cQhzB6rvIgJcWKL8JGJ8AUuDd5CAqSH0lZjme07urY=)
2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: /2TJt6VgiD2MSr/BCKsowIP3WU9uJPV4ABk4cuCMOwQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:8d:f0:97:f6:5d:e2:78:6f:9a:bf:44:81:9b:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Validity
Not Before: Jun 13 14:01:23 2026 GMT
Not After : Jun 14 14:01:23 2026 GMT
Subject: CN=4eb1fadd26f081306f6dd824f1fb367c7e6ee5ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:34:22:8d:9e:7e:b0:e4:b3:89:ff:cd:99:0e:
18:8b:ec:35:a9:aa:e5:33:9d:b4:d7:d2:83:cf:7f:
a5:7c:10:79:b7:41:84:d9:d6:ac:8f:c5:2e:4c:51:
91:ed:0f:50:52:bd:9d:a5:75:28:1f:b8:fe:83:c6:
57:4b:f8:12:1f:95:dd:4b:c8:48:20:06:8f:24:88:
09:9e:38:3f:21:b2:65:b4:ae:0a:dd:af:10:ff:e5:
ff:1a:7a:3e:9e:34:d2:72:41:0f:67:0b:24:17:c3:
05:8a:13:b3:97:8c:77:47:2a:ea:ee:69:e1:91:3a:
18:ae:2c:af:fb:2f:16:b9:3c:66:2f:c3:7a:1d:fa:
60:61:33:5c:98:d6:86:32:ea:88:9f:0c:2b:b4:f2:
11:2a:63:1b:82:52:0a:3f:81:6f:00:a4:45:dd:42:
38:8d:a4:82:37:7a:f5:59:19:71:01:dd:99:56:a6:
6d:9c:ed:b7:a3:17:2c:29:b1:c2:d1:7b:44:b4:a8:
f1:3f:b1:d8:5b:10:3e:4e:a7:17:ef:e4:f3:7b:97:
ca:33:a1:d0:a4:22:a0:33:20:55:4d:2a:d7:87:cb:
33:c2:93:11:5f:45:fe:39:7c:1e:97:d4:4b:ec:7f:
6e:21:c0:e0:7f:c4:2a:12:7a:dd:71:6c:84:60:de:
d1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B1:FA:DD:26:F0:81:30:6F:6D:D8:24:F1:FB:36:7C:7E:6E:E5:AE
X509v3 Authority Key Identifier:
keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:f0:01:20:9c:eb:06:c1:68:e7:df:0b:b6:de:f5:b1:e6:cb:
a1:54:70:4f:eb:fd:c4:7d:c7:87:da:d8:ef:cc:6f:24:bc:ee:
8f:81:8d:da:ef:e1:c9:31:00:2b:61:c4:a2:6f:60:23:c3:21:
dd:1f:de:91:14:23:f9:1b:d2:dc:51:a0:31:e9:35:e9:07:6e:
25:1f:a1:7f:cc:56:bf:c4:95:f5:3e:15:34:b2:5c:60:bb:bf:
09:90:e3:df:da:bb:c8:bd:f7:dc:5c:d8:11:c7:26:aa:3d:6c:
99:35:43:e5:f4:20:73:c5:90:76:1d:64:24:22:6b:be:b6:a1:
fc:fc:6a:6f:77:08:37:40:15:5a:7a:05:8e:15:05:10:4f:9e:
5d:b4:79:68:cd:8c:93:19:cf:6d:93:d7:93:52:3f:a0:18:fb:
28:1b:d6:89:2c:22:8b:03:60:32:57:d8:ed:1e:eb:ed:67:30:
63:31:0f:77:07:97:33:4c:46:2d:e9:8e:e9:3d:d2:38:e2:98:
b0:26:8e:02:c7:e2:f4:43:6d:6e:9e:6c:57:66:8a:9e:6c:b5:
3d:17:d5:e0:c9:61:13:56:1b:b1:4a:1b:d2:ff:19:db:46:bd:
44:36:0a:92:cc:ab:25:0c:20:3e:05:c9:1a:0e:a8:9a:fc:74:
09:17:e4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:05:32 2026 by rpki-client