Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier: PDfh4z35IBWmaw5z8Prw/tWH+gQi0+gsLadL2wW61Nc=
Subject key identifier: 3C:5C:68:E5:B8:78:A0:CE:AF:81:01:BF:EE:FE:42:E8:72:72:2E:B5
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial: 019EC180347E1270ED29CD61A5295BC5BAC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number: 0529
Signing time: Sat 13 Jun 2026 15:01:05 +0000
Manifest this update: Sat 13 Jun 2026 15:01:05 +0000
Manifest next update: Sun 14 Jun 2026 15:01:05 +0000
Files and hashes: 1: RKz3IJpK3tLGmxT3W9hM3i7PGMs.roa (hash: RoVqVK5DIJNCCPA2hRYkxQFyuiyebRh/F8G7DU407FU=)
2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: eDQCOVK7caKPlVNDQXDeIISFoXQ+XascT/iRmyaZCdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:80:34:7e:12:70:ed:29:cd:61:a5:29:5b:c5:ba:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Validity
Not Before: Jun 13 15:01:05 2026 GMT
Not After : Jun 14 15:01:05 2026 GMT
Subject: CN=3c5c68e5b878a0ceaf8101bfeefe42e872722eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b8:2e:a9:1b:dd:a4:21:3a:cd:b9:4e:17:2b:
de:27:bf:ea:0a:9d:ed:39:22:f0:29:db:56:12:ed:
c5:10:ca:11:34:6e:e4:09:63:d7:f4:b4:34:bb:32:
ca:85:9d:07:33:7c:ab:88:79:50:6c:d2:9f:96:11:
a0:89:ba:70:00:5b:ee:5d:58:3b:d0:19:ac:4a:7f:
c5:73:02:df:7f:f5:97:34:3d:ac:94:f7:b6:cc:c0:
45:aa:a9:e3:68:40:74:53:46:25:16:7a:25:55:59:
ee:5a:4f:3c:dd:70:dd:81:ef:87:d9:4e:78:42:5d:
85:75:6b:be:f3:1d:cb:b8:19:35:88:e7:c2:c2:45:
f4:54:00:3d:b6:5d:a1:e4:18:ce:49:bd:cd:1f:14:
c8:c5:5d:82:c9:fb:3e:a3:9a:38:f6:21:0b:9d:46:
43:c1:ef:2b:67:4e:20:a9:80:2d:ae:bd:5e:b2:03:
30:b3:82:ab:7f:d5:16:9e:17:76:2b:23:76:ca:1f:
1d:d7:2e:c4:f1:19:8e:c8:cb:20:d2:d6:cf:0d:5b:
b5:39:6d:0f:10:64:a0:cb:f7:43:c9:0f:84:31:bc:
13:a3:cd:89:16:27:3b:e7:f7:d7:c8:b4:dd:b7:a2:
2c:58:ea:5e:5d:ad:55:c7:a6:b6:0d:6f:53:41:e5:
3b:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5C:68:E5:B8:78:A0:CE:AF:81:01:BF:EE:FE:42:E8:72:72:2E:B5
X509v3 Authority Key Identifier:
keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:66:a1:f8:c0:79:69:8e:43:43:ae:3f:64:b7:54:85:23:db:
20:05:a6:d3:65:2b:49:c5:59:ed:69:93:e5:dd:b4:65:dd:ca:
04:23:d3:1a:9e:ba:60:7f:52:16:da:ca:43:a7:74:71:8c:08:
ec:ff:46:84:95:b8:0f:3d:a4:de:c2:69:69:1e:e4:0f:74:91:
dc:0e:5a:00:14:33:46:16:9a:45:57:28:3e:dc:a4:06:21:78:
3f:26:ea:4e:42:47:6f:3a:81:c4:5b:11:67:f6:e0:c4:05:0b:
9f:62:d0:c1:61:16:90:bb:f8:48:6a:c6:18:00:ba:a7:d9:6c:
59:90:b7:71:34:78:52:7c:68:46:1f:d1:07:c1:58:be:84:d0:
e5:03:66:12:26:91:7a:2f:00:4d:8c:e7:98:f2:eb:06:88:23:
72:0b:42:6e:49:bc:d3:ec:e5:4f:4f:4f:bd:06:c3:a0:ac:71:
9b:8a:17:ec:0d:ce:83:9f:7b:e0:27:13:65:a7:f1:29:47:b2:
98:f0:c8:40:d2:c5:10:22:83:34:d0:31:fb:6b:b4:79:6e:06:
25:cc:1c:f8:3d:e9:64:ec:3e:21:b3:44:37:c2:0d:9f:64:9b:
17:b6:68:c9:1f:3d:01:c1:79:0c:9c:86:64:4f:bd:94:91:f3:
bc:45:e1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:26:00 2026 by rpki-client