Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json)
Hash identifier: 9lKKpE8GfxFTs7WvDx1GD7akAHnjAdQQW1HccTkyUoA=
Subject key identifier: 4D:2E:D8:18:D0:56:A7:A9:E6:B2:5B:E6:50:9C:E4:D0:1E:DB:01:7F
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial: 019EC336EACA555BCA8DC027828B937C80B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
Manifest number: 14C8
Signing time: Sat 13 Jun 2026 23:00:16 +0000
Manifest this update: Sat 13 Jun 2026 23:00:16 +0000
Manifest next update: Sun 14 Jun 2026 23:00:16 +0000
Files and hashes: 1: NrZRCuerFzj4EhFGKoh_NKbZNxM.roa (hash: 5QAUpIfqv2CVCHxJDOL189fybpsclOVK/PxPIJsB8Xs=)
2: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: dHkrxj5MuqQGQcFREYHBkAdOCxetF0L9g7/kbWTFbu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:36:ea:ca:55:5b:ca:8d:c0:27:82:8b:93:7c:80:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Validity
Not Before: Jun 13 23:00:16 2026 GMT
Not After : Jun 14 23:00:16 2026 GMT
Subject: CN=4d2ed818d056a7a9e6b25be6509ce4d01edb017f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:00:c7:0f:55:35:86:db:cc:95:1b:e0:2a:bf:
b8:cc:e4:7c:52:d9:9b:5e:30:16:56:33:6d:c4:a0:
d8:8e:d1:77:bd:5a:f4:30:db:e6:e5:b5:73:86:85:
d2:0c:89:df:3e:aa:4b:d2:f0:ef:26:57:b0:d8:f2:
57:a7:8e:d5:51:78:07:94:7a:d7:8c:37:0a:d0:a9:
a9:56:2c:36:3d:cc:7e:ae:40:e5:f5:76:26:b7:5b:
eb:6c:fa:1b:a0:db:ca:49:ad:22:bd:ad:3f:c7:85:
76:cb:6f:ec:27:68:53:c0:49:de:3c:2c:00:30:a0:
bd:98:ad:11:91:c7:3e:a8:db:88:32:17:ef:a5:4d:
70:38:eb:2b:04:b0:7a:32:78:e9:64:16:5f:a4:e8:
58:b0:c1:3f:8f:67:b0:b8:c9:1b:86:c7:77:fb:c9:
21:9e:c5:05:8c:7f:41:e8:b4:de:3f:32:1b:34:9e:
9c:1a:17:c8:a7:6e:54:52:35:dc:5c:a4:4b:f7:0d:
1b:57:28:1e:89:a6:60:68:e1:7c:c0:c7:54:4a:c2:
d5:bd:eb:62:e1:a7:0e:f7:d9:16:94:dc:26:2e:9d:
95:4b:52:ca:b7:92:05:88:f3:e8:5b:f1:29:b5:d3:
5b:e4:a7:3b:ea:89:58:46:40:bd:91:18:db:5f:71:
7e:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:2E:D8:18:D0:56:A7:A9:E6:B2:5B:E6:50:9C:E4:D0:1E:DB:01:7F
X509v3 Authority Key Identifier:
keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3b:0a:53:2f:22:a4:6a:c8:2e:b0:31:70:47:66:7f:5a:8a:
2d:62:65:d2:63:66:15:03:b7:22:8e:c0:76:7e:fd:27:20:4e:
b4:ab:50:46:10:55:09:e3:3f:44:45:d1:b4:11:ad:e2:8a:60:
e7:6b:66:44:8a:2a:7c:0a:35:f4:20:1a:74:a1:a0:42:92:19:
44:9a:66:e2:e5:fb:c8:85:42:cb:7d:00:b4:75:9f:ac:4b:f0:
7c:2a:6a:11:51:f3:3a:24:35:72:1f:a3:5c:b5:2c:36:f6:d6:
32:6e:a1:7e:40:6a:ce:cc:3d:84:57:c8:13:b5:37:2b:d2:83:
36:53:2b:01:27:33:c9:8b:99:b5:fa:5f:c5:85:03:be:82:db:
9f:31:2c:c1:9b:25:5c:b6:e7:58:ad:53:6a:1c:8b:b4:30:57:
1f:e3:e8:cf:fc:61:3c:68:9a:7f:99:d4:0d:71:20:5d:69:fb:
91:ae:2d:39:bd:e1:44:cf:55:b8:b5:f9:c4:76:d6:b6:e0:c9:
d5:47:af:a5:b6:e1:1b:76:d8:9f:d4:49:a5:a9:df:f9:6b:e8:
38:1d:90:87:9b:72:80:d9:50:4d:52:18:5b:bb:3b:72:ae:77:
e7:a3:ef:6d:0e:48:b6:40:8f:67:a1:33:74:34:9f:e7:54:5e:
cf:af:f5:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:43:31 2026 by rpki-client