Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
File: XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft (raw, json)
Hash identifier: kVIFGrjYa8bWoFIU9naaxGVK5kNCkaqW5UgPJtDyY9o=
Subject key identifier: 93:FF:4B:BE:40:AB:43:C3:1D:FF:9B:00:C1:DE:6A:3A:FF:63:A0:E2
Authority key identifier: 5E:E5:DF:38:60:B2:4D:DB:BA:57:3E:D0:48:D4:A7:23:0B:F5:B1:A2
Certificate issuer: /CN=5ee5df3860b24ddbba573ed048d4a7230bf5b1a2
Certificate serial: 019EBE7EE77BC47491A7FD0CA2FE6C865A4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
Manifest number: 3C
Signing time: Sat 13 Jun 2026 01:00:48 +0000
Manifest this update: Sat 13 Jun 2026 01:00:48 +0000
Manifest next update: Sun 14 Jun 2026 01:00:48 +0000
Files and hashes: 1: 5AArOA0LkskA5tw5SWJx3j9Dv6g.asa (hash: g3ncVbCPorzKexZkECV8nZNdPxcAqa14QO98wuTocr8=)
2: XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl (hash: l4z0uEh6tJcq5r/BHGpRhU7LELUHDLuqi3GhcAxpcB4=)
3: sZcKQ6cgnSFOArUoubXO-7UtF2w.roa (hash: i70yL5ZQtlkXeA37PkWypyq+6GqmS0P1o3XFiLGyrFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7e:e7:7b:c4:74:91:a7:fd:0c:a2:fe:6c:86:5a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee5df3860b24ddbba573ed048d4a7230bf5b1a2
Validity
Not Before: Jun 13 01:00:48 2026 GMT
Not After : Jun 14 01:00:48 2026 GMT
Subject: CN=93ff4bbe40ab43c31dff9b00c1de6a3aff63a0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:64:e2:dd:f3:22:38:33:6a:f0:31:08:0c:1a:
6c:93:29:d9:a1:18:d6:04:32:86:95:f1:14:70:c2:
4c:78:23:a2:37:9c:46:62:a7:9e:5f:0c:fe:b6:4f:
e3:7f:5a:2d:dc:e3:7b:6e:53:c4:75:24:af:c6:8b:
ee:1e:7a:dd:85:a5:00:78:f5:aa:a9:7d:a3:dd:e4:
70:6a:01:6a:d5:e3:01:2b:11:1a:94:bb:65:c2:8f:
8c:75:19:63:f4:60:2d:18:2c:5e:65:c3:0e:b2:30:
7f:17:42:2f:ec:6b:86:36:f0:35:d5:ba:14:5e:0e:
37:56:43:79:aa:c2:90:45:89:c0:3f:61:13:e5:f2:
97:d2:a9:f9:cd:32:f3:aa:ee:1b:73:73:22:14:e5:
8f:f1:63:24:4e:32:0f:fd:06:90:e5:fc:b6:f3:2a:
3c:6b:f2:34:9d:0a:1f:96:61:67:ca:47:e4:8a:31:
76:7c:87:26:a9:61:2c:cb:db:3c:e4:c1:f3:9d:84:
64:a5:3d:3e:7d:25:07:95:fc:10:a3:0e:7c:32:47:
07:51:9a:af:eb:46:eb:65:81:e8:1c:7b:1f:58:f5:
06:f3:93:8c:b8:44:7e:98:ae:7d:22:14:2e:ad:c9:
fd:09:b9:e5:15:1d:f2:b1:52:80:ec:22:bd:a2:7b:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FF:4B:BE:40:AB:43:C3:1D:FF:9B:00:C1:DE:6A:3A:FF:63:A0:E2
X509v3 Authority Key Identifier:
keyid:5E:E5:DF:38:60:B2:4D:DB:BA:57:3E:D0:48:D4:A7:23:0B:F5:B1:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:6e:fa:de:62:6c:a5:c8:a8:f8:6c:0f:8c:ba:24:52:49:d7:
68:36:52:b3:bc:c3:5b:65:33:c4:9a:08:ba:c9:76:36:e3:7e:
39:77:03:09:8b:49:ea:10:e0:2c:cf:79:f8:56:64:1d:3c:a5:
e0:af:c0:fe:2a:1d:51:b5:54:6b:0f:4b:b2:7a:9a:34:65:ae:
0b:64:7d:9b:aa:8a:6f:36:42:49:7a:3f:de:8e:c8:70:c7:ba:
7b:23:42:d1:fa:ee:a1:59:7f:a2:2f:28:eb:7b:5c:4b:11:a5:
8f:eb:54:25:a4:13:a0:dc:c4:87:85:df:52:03:4e:00:0c:5a:
09:64:e0:5e:50:83:55:e1:59:e4:89:ed:de:fe:19:4e:ab:5a:
f3:d2:4c:d9:8b:60:0b:02:0b:30:f8:43:ae:68:a9:c0:27:fa:
fc:8b:90:6a:4d:b8:b4:d4:30:17:f5:f0:f7:ef:e7:d8:1f:87:
44:61:70:3c:02:f8:ff:a8:9c:50:cc:b5:9d:66:d8:7e:81:27:
40:1b:a9:60:77:a8:aa:0a:bd:4e:ef:76:f2:fb:6e:b5:19:34:
14:d6:a4:69:e6:84:7d:db:65:dc:b9:47:2f:27:ff:62:3e:ad:
1d:04:cc:a9:ef:f3:9f:85:c5:27:cd:80:f3:78:83:82:93:3b:
41:0b:5b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:55:35 2026 by rpki-client