Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
File: xXHZWAqPAeScYcX8_f8uWJlTS48.mft (raw, json)
Hash identifier: +jpIofbpqbrTRgsJ/jkK8p3T2r3cpLgPTwWwMdlLiX4=
Subject key identifier: 15:46:25:83:E1:68:E1:47:DF:6E:C4:77:4A:65:57:1F:21:B9:8E:C9
Authority key identifier: C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
Certificate issuer: /CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Certificate serial: 019EC1B75DA02CB044C449E73C88E8975DED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
Manifest number: 080F
Signing time: Sat 13 Jun 2026 16:01:20 +0000
Manifest this update: Sat 13 Jun 2026 16:01:20 +0000
Manifest next update: Sun 14 Jun 2026 16:01:20 +0000
Files and hashes: 1: uWNKx0IJVXvtTHYU4bkunZTjfuw.roa (hash: AUH4XmlqocQ9F/9lHvt0FvG+HzGfyUQaY0PdFUq9T4I=)
2: xXHZWAqPAeScYcX8_f8uWJlTS48.crl (hash: zCr1jiSBdT0xmAh0i5TL4FqNAIML0f+dzca37wUMhbw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:5d:a0:2c:b0:44:c4:49:e7:3c:88:e8:97:5d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c571d9580a8f01e49c61c5fcfdff2e5899534b8f
Validity
Not Before: Jun 13 16:01:20 2026 GMT
Not After : Jun 14 16:01:20 2026 GMT
Subject: CN=15462583e168e147df6ec4774a65571f21b98ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:33:6b:73:e3:5d:d4:28:e4:1a:8f:8a:09:05:
f3:b9:36:b1:a6:ff:0c:fc:98:a3:e7:99:c0:34:34:
91:9d:91:b8:e4:31:96:d1:bd:86:50:b0:82:75:7c:
b6:0c:dd:1f:f1:18:a6:9a:29:1f:2c:9d:30:c0:0c:
02:9f:16:86:ad:1d:56:0a:0c:ae:f8:c5:dd:23:2b:
f8:56:32:bf:74:58:34:33:8b:bb:1e:13:5c:81:ca:
21:76:be:ce:2c:91:83:1c:4b:17:2f:9c:e6:26:62:
9b:32:f3:8d:ed:f8:20:d6:94:a7:d8:52:5d:98:b5:
58:05:5f:54:f9:eb:70:e5:37:fa:7b:b3:1b:d1:45:
46:5f:fa:9f:12:b9:bc:c9:17:05:57:e9:43:af:75:
6b:4c:9c:9e:eb:2d:92:46:1f:f7:ca:fc:e6:5e:2b:
22:f7:44:3c:cc:51:42:5b:af:47:97:b9:93:86:63:
fa:ef:2f:e5:bc:80:24:13:d8:03:c4:68:21:5d:e5:
74:4a:8a:46:fa:7a:dd:b4:08:38:76:01:31:d6:3b:
51:90:85:3d:9b:4b:43:d4:37:ad:45:5b:85:23:ac:
1f:8f:48:74:d4:cc:2d:90:83:c2:c1:69:1d:f2:dd:
d4:4f:97:ee:dc:63:6f:99:30:4e:96:a3:54:36:71:
b6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:46:25:83:E1:68:E1:47:DF:6E:C4:77:4A:65:57:1F:21:B9:8E:C9
X509v3 Authority Key Identifier:
keyid:C5:71:D9:58:0A:8F:01:E4:9C:61:C5:FC:FD:FF:2E:58:99:53:4B:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXHZWAqPAeScYcX8_f8uWJlTS48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/811f21-125b-4d07-bac8-7546dd1716c8/1/xXHZWAqPAeScYcX8_f8uWJlTS48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b3:7a:bd:8b:82:75:71:31:20:a8:5f:bf:3c:84:8c:1b:8f:
a2:4e:5e:a3:2e:61:10:f1:a8:d7:05:7d:1b:8e:c0:83:40:d1:
ab:cc:ea:d0:27:8a:fd:50:fc:67:5b:a9:10:44:44:1d:9d:37:
f1:3b:79:93:16:9b:ae:96:86:bc:8c:bf:3c:f8:36:bf:4a:91:
89:39:47:ba:9e:a3:b4:6c:9d:2d:2a:74:e4:21:3d:af:46:a1:
b0:6c:8b:af:ba:90:63:c9:05:e2:45:d4:2b:38:5a:52:ec:aa:
23:06:b7:73:a9:38:ca:5c:da:2b:83:6a:93:dd:72:02:a1:48:
b3:07:ce:6e:7e:2e:07:bf:f2:e7:90:f3:88:14:4c:d8:87:d9:
0a:ce:72:ba:c9:c2:ac:e0:02:60:3a:3a:9e:4c:b7:90:22:f9:
56:42:42:f3:ce:18:73:40:b1:82:41:42:79:51:01:c3:95:39:
47:f3:c6:eb:67:28:78:de:8b:f4:1d:71:b4:c5:8e:10:05:62:
fb:05:70:3d:ed:27:dd:87:10:3c:d0:56:8d:c2:81:8e:4a:11:
79:d1:79:8d:19:56:53:7b:70:59:d7:e9:21:1d:f9:21:4f:4e:
ae:9d:5a:3c:b3:fa:06:b3:95:c9:18:d7:dd:1c:b8:14:04:15:
13:60:42:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:29:07 2026 by rpki-client