Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
File: Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft (raw, json)
Hash identifier: LZ0rYy1lamFcgabRGxuYg5yngElrQiN+gmPUv8/5AHg=
Subject key identifier: E3:BC:81:78:F1:80:9B:98:CA:12:A5:68:75:56:16:92:B0:F4:1E:0A
Authority key identifier: 5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
Certificate issuer: /CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Certificate serial: 019EC224B4D032100E451F39E62DFDF2ABE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
Manifest number: 0E4D
Signing time: Sat 13 Jun 2026 18:00:45 +0000
Manifest this update: Sat 13 Jun 2026 18:00:45 +0000
Manifest next update: Sun 14 Jun 2026 18:00:45 +0000
Files and hashes: 1: RrwlRSSdwln9HbzArcN9f7ThR9c.roa (hash: Ic3y0/hXv+5FL5zNAqt7WX+ncQH0cGC5wuQsjbsXF7I=)
2: Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl (hash: 2EVH0XcFL26Mm1i2OyYUz4uiK8W43sfu5u2ku/5wf+M=)
3: fWpL_ta7aXoIKT8lwYmDL0nQegU.roa (hash: r+7J0jRgrAdlkGpSk5T7jtJhr78GxAY9zYWBhS85+uQ=)
4: l5tw0iDO7abT_AibKjZJaQ4nwWc.roa (hash: r+71S+WnEwowT4NhvO1eI4eYiERh6tzaeOlSbc80Img=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:b4:d0:32:10:0e:45:1f:39:e6:2d:fd:f2:ab:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f1f213b8c792b7e013fa5041f5b89971e6f62d6
Validity
Not Before: Jun 13 18:00:45 2026 GMT
Not After : Jun 14 18:00:45 2026 GMT
Subject: CN=e3bc8178f1809b98ca12a56875561692b0f41e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:01:b9:b0:22:4b:e2:75:81:5d:20:7e:3f:9d:
38:82:79:29:35:02:0a:2f:96:30:93:c2:6f:41:7c:
bb:36:21:b3:36:08:34:9c:b3:41:88:42:70:35:c1:
6e:24:15:1a:67:30:05:76:0d:07:84:ab:41:9d:2b:
1a:c5:0a:b4:ff:5a:fa:93:0f:f4:e8:3a:34:f9:ca:
46:12:0b:c9:2a:44:3f:75:b5:b5:87:c8:41:63:70:
92:64:b2:81:af:d3:d7:4d:6f:c2:d6:66:fb:e1:b9:
da:34:1b:5a:ee:23:17:45:bc:ae:3a:28:e3:50:ff:
e1:84:81:a9:1d:52:87:55:fd:48:b2:4b:0e:be:92:
95:76:11:52:65:78:35:c1:a9:0b:f8:58:79:a5:66:
9f:f1:97:a4:3a:bf:4b:49:c8:2d:04:6f:36:5a:26:
5d:29:d0:a1:91:71:27:b7:f1:ee:52:99:45:79:d2:
e1:43:ff:a6:87:63:fb:a9:0b:77:3f:70:6e:b5:fb:
53:22:70:01:5a:54:2c:04:61:4d:8c:9f:15:34:2a:
6b:90:46:f2:4d:12:bd:78:d3:ca:a3:8c:af:ab:2e:
96:bc:33:0e:ea:d9:06:c6:53:ae:05:a1:db:33:52:
8b:10:7d:6d:2a:8a:93:98:a0:69:e0:3f:e6:02:ad:
47:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:BC:81:78:F1:80:9B:98:CA:12:A5:68:75:56:16:92:B0:F4:1E:0A
X509v3 Authority Key Identifier:
keyid:5F:1F:21:3B:8C:79:2B:7E:01:3F:A5:04:1F:5B:89:97:1E:6F:62:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xx8hO4x5K34BP6UEH1uJlx5vYtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32f8d3-7328-45f0-a007-402238638ea3/1/Xx8hO4x5K34BP6UEH1uJlx5vYtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:ab:cf:b3:15:8c:d4:6f:dc:91:11:db:ee:e1:0a:b3:84:42:
b9:4b:b8:af:5c:aa:01:91:a5:75:81:1b:fd:25:63:09:1e:27:
49:a3:d8:d8:94:06:ce:3f:88:3e:fa:73:31:5b:65:9c:15:82:
e3:9b:53:6e:ae:4c:4c:80:cf:30:cc:a9:c6:ab:48:d1:4e:50:
aa:cf:0b:b3:5c:8e:28:7c:11:7f:c8:e7:ff:ee:55:52:c4:ad:
5e:f2:6c:99:41:f6:aa:e1:96:0e:e4:ba:15:81:87:55:1d:33:
41:5e:2f:e9:59:0e:9c:70:92:f6:e4:16:bf:55:d5:2e:ca:d1:
72:2e:0d:87:09:75:a2:88:4f:33:10:d6:32:8d:16:e5:ba:55:
aa:2d:be:f7:35:6c:77:6b:7a:2d:33:8a:e9:4e:fe:ad:0a:0b:
62:cc:7d:d7:e7:29:20:19:66:eb:2f:bc:42:b7:b4:30:9c:72:
76:33:c8:9f:a2:92:32:2f:ae:cf:c8:a5:98:bb:62:52:0c:0d:
17:fd:eb:1e:a6:eb:5c:80:5e:d9:9b:5d:53:10:e1:f6:72:e8:
44:4a:ff:fe:dc:04:f7:03:b8:4e:ef:ff:14:e3:13:b0:4e:a6:
de:1b:b5:61:ce:37:39:6f:a9:7e:ec:86:9d:a6:1a:d2:d3:d6:
40:8e:c5:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:30:51 2026 by rpki-client