Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
File: x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft (raw, json)
Hash identifier: kKXoxavyLn8b298OPUuAITxb2SY86pmvq8Y5dwU4Kgo=
Subject key identifier: 3E:5D:74:A4:D9:6F:0D:12:88:3E:E4:31:CE:8E:2B:0D:6B:DD:88:E5
Authority key identifier: C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
Certificate issuer: /CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Certificate serial: 019EC29281A341190E90A8C8A3BE5976EAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
Manifest number: 15A4
Signing time: Sat 13 Jun 2026 20:00:41 +0000
Manifest this update: Sat 13 Jun 2026 20:00:41 +0000
Manifest next update: Sun 14 Jun 2026 20:00:41 +0000
Files and hashes: 1: VVO2x6L7LFTZsVY_zaZrcjz-CLU.roa (hash: mrQRCF7HAxobAPy4OykpZkTQroOOHVdF+aZo6ajUous=)
2: XSKluvUTTgVd2egTpJ08l-exvKw.roa (hash: k4WvTC/++ULE/2LzyeolM06KPsDEfc4ZDC8+guSUNtQ=)
3: x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl (hash: bsUjAqyGWL+D3mYZL3Y2v2Qu3X/BdsJp2j+FMAjWSnM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:81:a3:41:19:0e:90:a8:c8:a3:be:59:76:ea:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7db56cda2e7ddb023168c5d77ec97d9a006baed
Validity
Not Before: Jun 13 20:00:41 2026 GMT
Not After : Jun 14 20:00:41 2026 GMT
Subject: CN=3e5d74a4d96f0d12883ee431ce8e2b0d6bdd88e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b4:6f:38:aa:19:88:4e:31:1d:f1:04:d9:54:
3e:44:3d:01:6c:92:2f:d4:ec:de:fe:d8:8c:f4:97:
ba:71:4f:37:b3:f2:b2:e9:8f:88:f7:8b:b6:0c:da:
12:c2:97:59:a8:06:da:04:35:80:d8:ec:84:dc:69:
73:0e:52:7d:f1:e6:64:a9:ee:b7:06:21:62:6b:53:
17:aa:e7:a6:17:25:3a:40:d0:8f:85:42:11:8c:54:
c8:f2:71:49:6c:37:9c:0c:29:bc:da:07:59:9f:5c:
93:87:26:83:fb:4c:8c:76:8d:92:25:d6:30:59:54:
f5:ef:25:c0:1f:52:dd:94:34:a7:17:ae:b7:1b:41:
5b:fb:b3:0b:c5:26:3b:c1:b5:e7:bb:af:92:29:53:
51:8c:ee:a2:2a:23:0f:2e:44:71:63:78:27:1a:d1:
99:c5:19:e2:53:50:df:50:9f:e4:0c:df:81:d9:7c:
76:23:29:83:b3:2b:09:56:94:bd:99:90:80:30:ad:
7a:f3:4a:18:14:30:5e:c2:bc:30:e1:7a:23:6f:44:
07:65:da:14:84:4f:0d:c7:e5:0c:73:61:5d:48:42:
25:0e:f4:09:e8:78:9b:1a:4c:df:f0:4d:0e:01:d4:
a4:0f:12:69:2c:c3:6e:eb:64:6c:9e:98:67:f2:28:
51:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:5D:74:A4:D9:6F:0D:12:88:3E:E4:31:CE:8E:2B:0D:6B:DD:88:E5
X509v3 Authority Key Identifier:
keyid:C7:DB:56:CD:A2:E7:DD:B0:23:16:8C:5D:77:EC:97:D9:A0:06:BA:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9tWzaLn3bAjFoxdd-yX2aAGuu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/a978ab-43d5-4335-afa2-82eb6fd11dd5/1/x9tWzaLn3bAjFoxdd-yX2aAGuu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:71:ed:c6:dd:b3:8b:ec:2e:b6:38:73:d8:da:1c:e1:ff:f0:
f1:33:c6:cc:ad:32:c0:f4:89:b9:3d:f1:e4:2c:47:f8:29:86:
3f:13:14:cd:65:91:84:d9:b5:69:dd:9a:d9:d4:3f:46:97:fe:
47:3d:c4:d8:17:aa:1b:90:a2:aa:2d:69:3e:94:99:07:44:12:
81:e4:7e:7c:ec:0b:0c:0a:ab:c9:18:e0:22:eb:c7:c1:fc:03:
89:fa:73:dc:85:89:d1:48:0f:7b:5c:08:f8:4f:3d:2c:1e:e8:
83:ad:2a:35:4e:2f:fb:d1:0e:a6:5d:83:92:c4:fe:49:40:3c:
cd:28:3b:1a:2e:99:ed:25:cd:77:9d:e0:ac:54:06:c2:be:78:
7e:c5:9f:3d:b5:7b:a4:1c:eb:5e:c5:b6:7a:3b:8c:65:cf:66:
6f:dc:8c:b6:c4:30:45:aa:31:71:93:75:ed:7d:94:d6:10:2a:
9f:8d:6e:a0:84:ae:ba:31:95:7c:4a:58:04:18:56:22:88:51:
71:26:5b:0a:51:77:d3:53:85:39:e3:90:6b:a7:ff:7a:f6:a9:
10:61:c3:03:0c:b2:a7:66:19:22:45:b7:5f:e3:08:4e:d2:3a:
f6:d5:53:65:e8:e8:e3:e3:6d:8c:81:b6:ce:c4:9e:12:fd:34:
a4:5e:83:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:07 2026 by rpki-client