Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: 19kNCwS4TgmDFywtmUDq5WgR0Lt2X3w+NsmfpkgFSG8=
Subject key identifier: 3D:36:F3:8F:15:34:F9:BB:C7:17:98:48:B6:E7:9B:F1:68:37:08:B6
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 019ED386EB45BA21FD92047C00A91DD60EE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 18F5
Signing time: Wed 17 Jun 2026 03:01:35 +0000
Manifest this update: Wed 17 Jun 2026 03:01:35 +0000
Manifest next update: Thu 18 Jun 2026 03:01:35 +0000
Files and hashes: 1: 1-JQqdOgGI5A2jgfNA9GBznLZL4o.roa (hash: 8aD9D5dY520w/e92POgprpQwJQRjt7y1yNeMs6zlp6Y=)
2: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: ne900xetUwNwGxx0a+RVRH/mXKEyYwvmTstwhe5pxbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 03:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:86:eb:45:ba:21:fd:92:04:7c:00:a9:1d:d6:0e:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Jun 17 03:01:35 2026 GMT
Not After : Jun 18 03:01:35 2026 GMT
Subject: CN=3d36f38f1534f9bbc7179848b6e79bf1683708b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:06:3e:c0:67:63:e8:56:a0:ab:d1:49:a1:5d:
df:b8:38:a1:1e:fd:01:3e:a9:a9:9f:d5:66:a8:7b:
12:9b:9c:7e:dd:3c:81:90:ab:d8:b0:da:c3:c0:10:
28:f5:6d:51:85:09:58:5f:a9:ef:30:30:76:35:b1:
67:0e:a4:f8:3b:c9:3a:9b:45:b0:5c:28:de:a0:64:
d2:23:bd:60:ce:39:cd:78:27:1a:15:85:26:6b:1b:
91:43:bc:b5:8e:01:07:af:8e:c5:c3:c7:16:df:bb:
80:a9:7c:a1:3b:2d:9c:79:d2:e2:de:19:57:92:20:
77:be:16:b5:27:3b:f0:57:a6:9d:80:1e:9c:75:9d:
08:4d:26:31:54:d3:e8:92:54:69:cd:6f:f1:60:c5:
45:d0:9b:dd:24:b2:c0:26:00:27:90:21:ba:4e:7a:
c1:0f:96:19:00:22:73:5c:b4:f9:0b:24:51:0c:6b:
6a:73:ea:b2:57:c6:58:6c:0c:7b:97:fd:2c:9c:d4:
cf:e2:f1:8c:b5:0c:52:bc:4e:7f:e0:27:52:b9:42:
1a:5b:7f:8e:19:96:96:25:ba:93:4c:69:5e:fe:b9:
55:ab:a8:75:4a:32:a8:46:cd:0c:7b:3b:5a:35:61:
9f:59:42:10:b1:79:85:25:26:45:c3:77:2b:ae:b3:
c5:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:36:F3:8F:15:34:F9:BB:C7:17:98:48:B6:E7:9B:F1:68:37:08:B6
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f0:f9:6a:db:62:9a:32:ce:6d:4d:32:7b:18:50:5f:5e:80:
d9:c7:ad:da:5f:2f:98:5b:35:35:c8:03:60:7f:c0:aa:4b:31:
07:3e:21:b6:34:62:3a:fc:fd:73:58:fc:85:b1:4b:9a:7c:33:
0f:64:97:71:02:5c:c3:3c:e6:50:d7:36:c5:3c:97:f9:b0:ad:
d8:ee:50:0a:3d:c6:ef:79:d2:3e:7b:10:1f:03:a0:c4:96:e1:
0d:ff:c5:9f:be:6e:c0:7b:67:1e:f2:b4:2d:6e:b8:c8:50:e6:
33:4e:f9:de:a7:b2:74:15:04:3e:78:2c:3f:97:a6:81:da:ff:
8e:3e:3e:11:1d:8e:e7:b1:6a:ef:cc:c4:e2:fd:ea:0b:b0:66:
b3:0e:20:5a:b7:1e:63:e7:df:fa:e5:ff:c4:0b:56:e0:60:01:
a3:07:56:45:a0:ea:09:21:91:3e:e6:1b:45:97:d1:54:3a:42:
f9:84:5f:c2:82:01:55:fc:c0:8e:f7:ac:a9:78:d9:f1:dd:15:
40:49:42:6a:92:18:bc:13:db:72:c5:2f:4f:fd:c2:e7:72:c4:
a2:6d:3a:c7:a7:38:6a:26:b6:c5:9d:a9:d9:dd:9a:c2:d8:89:
33:b7:4b:42:50:c9:f0:53:6d:66:55:c5:d5:78:a8:0d:39:5b:
94:14:ca:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:00:41 2026 by rpki-client