Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
File: XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft (raw, json)
Hash identifier: LTIA9na4bss77uPJ/djtfVhnjAPW5ZYmXuZRjWN30ls=
Subject key identifier: DA:F8:53:4A:F4:5C:69:84:BB:3C:5B:A3:22:B2:72:1B:29:21:96:D2
Authority key identifier: 5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
Certificate issuer: /CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Certificate serial: 019EC0DB6622990F575F74E4369D453373B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
Manifest number: 0C25
Signing time: Sat 13 Jun 2026 12:01:04 +0000
Manifest this update: Sat 13 Jun 2026 12:01:04 +0000
Manifest next update: Sun 14 Jun 2026 12:01:04 +0000
Files and hashes: 1: MXmi4elQgkZloOXKc5KxZJXFILw.roa (hash: 4eGKiA6fp/86boDwfJeXXyGqjfCWRwxGmH0ShZjDAuQ=)
2: XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl (hash: 0hUKgwiQnTWdeKM3Fr1MP1aA0Axy8JuLmVZg1Jjj3dQ=)
3: taZbUsGibT55ZZu6Th_Go_ILjiU.roa (hash: d/WlzB5v4feaToE5n6krRnONbSIkTydQjlb9UBErHJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:66:22:99:0f:57:5f:74:e4:36:9d:45:33:73:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32311952566d1ce18f088e8bb6ceabe7e7935a
Validity
Not Before: Jun 13 12:01:04 2026 GMT
Not After : Jun 14 12:01:04 2026 GMT
Subject: CN=daf8534af45c6984bb3c5ba322b2721b292196d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:7a:45:1e:67:7f:dc:e0:de:a4:b9:a6:78:
0b:28:6d:96:05:2b:15:d8:67:8d:d7:c6:0b:1b:98:
10:d2:a2:f8:0e:41:ac:96:f9:97:a8:60:16:0e:8e:
d8:99:2e:7b:de:03:6c:15:04:cc:90:30:dc:7b:e2:
bf:b5:38:7b:fe:88:06:3f:47:6e:0c:1d:e9:42:ee:
98:bb:38:0b:b4:03:38:43:a0:22:12:95:2b:a2:74:
0d:06:11:69:6e:9d:a1:0b:53:99:0a:ea:70:21:e4:
be:83:51:f4:0a:1c:fb:6f:c9:73:5e:e4:8b:82:50:
cf:69:df:3e:ab:de:ae:87:15:33:20:31:4f:96:bd:
77:44:cd:9c:69:61:59:c5:db:2a:7a:24:63:03:c1:
48:e1:3c:a6:83:52:d9:2e:e1:2c:ba:a7:d0:3e:47:
59:d7:7e:97:a8:17:5a:c9:69:23:77:d7:58:a6:ac:
9a:84:a9:48:f4:fb:62:71:76:a0:7b:5d:a4:3a:e4:
73:e0:fe:0f:d2:e0:5b:e0:87:f0:fe:77:cd:8d:b0:
01:e5:05:97:06:44:60:5b:16:59:74:65:a2:51:5d:
33:d3:32:1c:8a:e0:0c:59:fe:67:54:61:b8:72:58:
ae:bd:f4:2b:6b:65:08:93:60:ea:09:96:cc:60:83:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F8:53:4A:F4:5C:69:84:BB:3C:5B:A3:22:B2:72:1B:29:21:96:D2
X509v3 Authority Key Identifier:
keyid:5C:32:31:19:52:56:6D:1C:E1:8F:08:8E:8B:B6:CE:AB:E7:E7:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDIxGVJWbRzhjwiOi7bOq-fnk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5dfd89-4d79-4bb6-8bf3-0d38dddb0780/1/XDIxGVJWbRzhjwiOi7bOq-fnk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:64:4a:7f:58:e9:6e:39:c6:77:86:96:98:55:3f:89:5b:25:
72:52:fb:22:63:36:87:c7:44:ca:af:fa:e6:6f:ee:15:9d:ac:
08:c2:b1:a6:4d:2c:14:3e:7c:c6:35:51:27:9c:1b:de:ff:25:
d9:e7:12:f8:4c:ac:12:c0:45:9a:0f:43:3b:83:d5:5c:9e:bc:
e8:0f:53:fb:10:c4:05:1f:89:3e:95:09:a4:82:7d:fe:a3:0c:
d2:9a:8e:1a:78:63:b9:29:02:59:83:51:7a:21:45:29:11:c6:
46:9d:72:57:8d:06:94:96:c9:3b:fc:97:b9:05:7c:31:67:2a:
46:26:36:f4:54:3a:b1:02:8d:3f:71:e8:a9:e2:00:8a:60:18:
7e:5d:fd:5e:78:69:5a:3a:f4:de:12:e7:84:86:b2:33:bd:a7:
9c:55:7f:be:18:e7:a9:cc:49:b2:50:a4:98:72:e1:c3:a9:eb:
d5:0d:70:ff:b7:df:c7:9a:f3:e0:7a:96:a6:88:1c:0c:16:87:
86:9b:86:68:c5:95:9e:4d:ae:19:db:2b:76:52:8e:3e:8d:39:
be:65:0c:4e:b6:82:8d:00:d7:13:64:1c:39:0f:2a:03:b9:ec:
f5:17:22:50:40:b3:76:37:22:e9:ab:0e:17:0b:a5:30:47:a2:
3d:b1:91:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:49:06 2026 by rpki-client