Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: HqonsDpV46mMd/ua8wdbo+cqJsw1aES+C9E1ETrVFBo=
Subject key identifier: C7:19:97:41:FA:B3:EC:4E:F5:7E:73:06:91:C6:1D:19:AB:2B:A4:88
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 019EBFFF1835135D7B38BE285A17E060BF38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 08:00:26 +0000
Manifest this update: Sat 13 Jun 2026 08:00:26 +0000
Manifest next update: Sun 14 Jun 2026 08:00:26 +0000
Files and hashes: 1: 8bjq5CLAkMYnJtGthdYrockLCPY.roa (hash: eDG4zg9ilYUKjh0gJA5+ITJl6INuXH1V6df209hapIs=)
2: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: quHF4kGTtCKJ01SpmA+HYpcBjrsx2JLJdxx0ZjMj5eg=)
3: y6q-4aOfHflX0pozAnd7z21SiEw.roa (hash: BNrcMKA3+AgY/9eYfHPZuG3AM/va4c4zSTiZb/uHiLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:ff:18:35:13:5d:7b:38:be:28:5a:17:e0:60:bf:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: Jun 13 08:00:26 2026 GMT
Not After : Jun 14 08:00:26 2026 GMT
Subject: CN=c7199741fab3ec4ef57e730691c61d19ab2ba488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:78:d3:cb:77:1f:72:3e:58:d5:dd:ec:87:da:
50:07:56:07:af:cd:5a:b9:d6:a0:8a:c9:fc:81:48:
b8:bc:f5:4f:83:f4:6f:22:a2:41:de:0f:b5:f2:2c:
fb:09:a2:ac:71:8b:1c:b0:86:86:8f:fd:26:8c:fa:
2f:74:d6:1d:3e:3e:84:f5:05:7c:39:73:a5:c9:8b:
04:18:5f:fa:06:c8:07:29:bb:b6:b1:f1:64:fa:93:
89:83:77:8d:5a:b7:b2:8b:e5:41:36:0f:bb:41:b7:
50:2e:0b:eb:9d:10:89:b0:4c:73:d2:ab:30:4d:0b:
23:3b:b0:84:f6:93:5d:0c:c1:5a:e5:16:5e:11:00:
50:5f:8e:92:73:8a:4d:92:27:c1:87:1a:5a:c0:5e:
3c:1c:1d:70:c1:1a:3b:7c:35:17:c1:4d:75:f5:90:
f8:95:c6:d1:08:77:89:1a:59:5e:31:a6:02:7d:f5:
5e:04:1d:fd:01:9d:7b:df:57:b9:1a:a2:b1:19:7d:
df:fb:48:1a:df:6a:d4:a8:a7:70:fe:ed:af:9a:0f:
13:c8:5c:5f:fa:54:7c:52:fc:f5:57:5a:96:5b:28:
93:ca:56:92:28:f2:a7:49:38:be:91:7c:67:4f:e3:
ee:93:ec:8b:e6:c1:91:18:dc:13:6b:f2:fc:3e:b1:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:19:97:41:FA:B3:EC:4E:F5:7E:73:06:91:C6:1D:19:AB:2B:A4:88
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:44:ce:92:b3:3f:c2:a7:cc:f4:67:43:f6:82:79:61:19:57:
8c:d5:aa:ce:c2:79:aa:7c:7a:37:d4:f3:eb:3b:27:8f:94:3c:
4f:22:b4:c0:8f:b6:7f:ab:ed:db:fa:69:b5:d1:c4:b1:bb:4d:
89:56:55:8d:ca:16:7a:eb:cc:80:dd:0b:81:31:6f:3f:37:82:
fa:60:b4:93:2a:a0:5a:15:91:b8:81:4f:94:93:98:3b:ac:e9:
47:a3:f0:81:cc:a7:c3:8e:46:3c:d5:db:6c:b9:32:d4:b0:04:
c3:b1:49:29:c3:b5:63:2d:4f:0f:5d:04:59:3f:45:5e:c4:00:
46:24:26:6d:58:53:92:cf:65:d3:b9:39:53:b6:c3:78:78:e9:
0e:bc:58:60:c5:69:56:36:f2:65:9c:85:2d:d9:f1:0d:01:90:
bd:1a:9e:a2:de:36:24:b3:06:3d:23:8c:dd:a7:e1:b0:d8:16:
39:01:43:08:39:2c:cd:1f:c6:0f:91:81:8e:ee:20:93:a2:8e:
d3:47:07:d9:06:de:01:1e:6c:b5:30:24:c9:32:8a:a1:1b:ad:
82:b9:19:0b:81:bb:b0:d4:d8:e1:c4:bb:da:2c:94:71:36:c1:
98:92:1a:92:d2:6f:a3:c0:ff:8a:d9:63:fd:f1:fa:d7:01:91:
75:fd:09:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:21:35 2026 by rpki-client