
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier: z6gBRkL/0B0jqkfx3AUpB2mHswaMeYguFYIsdVBYOCg=
Subject key identifier: 2B:A4:6C:4A:B3:BF:24:72:CD:CE:F8:96:6E:C5:F1:29:86:BD:84:53
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 019EC3006A9E1906B50449CD46F5C76D3F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number: 1962
Signing time: Sat 13 Jun 2026 22:00:44 +0000
Manifest this update: Sat 13 Jun 2026 22:00:44 +0000
Manifest next update: Sun 14 Jun 2026 22:00:44 +0000
Files and hashes: 1: FXTyPwjMGAiU5KxW_Bfbg2AROHw.roa (hash: OnE+aJgFklXNXWETHHDMbnfVlcK0uF/bBVveHl9Em7A=)
2: T3lGsdRYO3Jiv8YeumY1-URxH8k.roa (hash: 2iZU0Zg9KB5iXER8e3UtbINmEwCtWsu/Q8hRWGFKAwI=)
3: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: Q7wp0fIKeblhqzES7dkz5UhC50yH4l77XxBM/AFyFr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:6a:9e:19:06:b5:04:49:cd:46:f5:c7:6d:3f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: Jun 13 22:00:44 2026 GMT
Not After : Jun 14 22:00:44 2026 GMT
Subject: CN=2ba46c4ab3bf2472cdcef8966ec5f12986bd8453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d4:d9:29:aa:ca:45:8f:0c:7c:4b:7a:0a:ae:
6b:56:09:f0:30:a9:45:07:e7:61:22:24:05:a4:a6:
ef:52:bf:ed:10:b1:c4:5b:3c:2e:bd:50:c6:9c:70:
db:9e:e4:44:74:07:f5:e0:5b:61:39:b6:ed:fb:f9:
c8:a7:c7:c8:6c:c7:d8:1c:5e:5a:92:f1:0e:9e:11:
3a:e1:ca:54:88:57:91:99:fd:2a:4b:8e:c6:b3:22:
6b:ff:c2:18:53:7e:f1:52:9c:24:ea:e5:3b:ac:b8:
74:4e:a3:b2:48:56:a1:8b:ce:50:97:48:ff:5c:85:
d2:aa:bb:3a:20:b8:af:88:72:1e:c8:da:9d:73:b0:
30:87:7c:54:d7:2f:65:e8:5b:ec:90:3a:da:dc:03:
97:2a:a3:4d:76:f1:a1:40:77:52:2d:9f:5b:e8:f6:
53:47:85:46:b2:3b:dc:1a:3b:44:ad:65:88:86:94:
12:36:07:57:84:d9:2a:1e:9b:3c:30:c5:e5:89:9c:
a9:b0:88:26:b7:9b:03:3b:8a:77:1e:ae:fd:87:80:
97:5b:69:f4:d5:f3:86:72:fe:68:e8:8a:fb:8a:1e:
d7:ba:52:cc:0c:3d:a3:af:e8:41:fe:c4:97:fa:a5:
f6:d3:d1:46:6c:42:ed:54:ba:af:f0:34:82:25:46:
26:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:A4:6C:4A:B3:BF:24:72:CD:CE:F8:96:6E:C5:F1:29:86:BD:84:53
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c7:6c:99:ff:1d:4c:11:5e:de:0e:06:8c:76:ea:55:42:2d:
15:e4:eb:04:f7:91:35:a3:fd:2e:76:49:51:8a:00:c0:ac:33:
ec:52:0c:c5:48:b8:d7:22:3f:04:8e:48:45:fa:a7:33:a0:df:
24:c6:85:0f:5a:f1:fc:f2:c8:0f:7c:2b:32:e4:5d:32:a8:6f:
0c:48:72:83:75:9f:8d:f8:6e:8d:b1:c7:da:89:65:29:72:74:
f3:a6:83:d4:0e:14:c9:8f:90:e9:d9:9b:f4:a4:00:73:94:7e:
fd:e6:e0:10:14:88:9c:08:fd:62:da:39:bf:4e:ce:a3:2d:d0:
84:81:5d:78:d1:c4:2e:16:09:70:a7:ba:0b:01:45:ec:65:1d:
d4:e3:2c:c2:d1:f8:d2:58:dc:a1:fd:46:90:a8:a4:4e:73:9e:
0a:0c:6d:a8:89:af:34:ec:70:7c:14:09:44:84:58:a8:55:d2:
e2:bf:ca:db:a7:22:08:3f:a2:aa:27:72:0b:2a:30:00:11:a7:
f2:6a:50:37:e9:aa:76:3a:e1:78:7b:f6:34:23:ee:32:38:0b:
dd:8b:b8:bf:46:04:94:12:fd:52:a3:97:6f:fe:38:c0:a9:15:
c1:82:7e:97:53:9d:35:d7:0f:62:69:b1:d7:34:87:8d:72:76:
df:4b:bb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 03:02:29 2026 by rpki-client