Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
File: xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft (raw, json)
Hash identifier: 8ggVtiCpV+pKrP/nsDrgfDLQfALY+n3FoPnWiJluoW8=
Subject key identifier: D1:4E:16:B2:E9:3F:1F:30:AB:63:B9:9C:B0:1D:27:B4:D7:91:84:FE
Authority key identifier: C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
Certificate issuer: /CN=c576ba0c098dc472186223c91e7def5216e239f1
Certificate serial: 019EC2C963A7FC51A1A11289B365D9028529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
Manifest number: 0851
Signing time: Sat 13 Jun 2026 21:00:38 +0000
Manifest this update: Sat 13 Jun 2026 21:00:38 +0000
Manifest next update: Sun 14 Jun 2026 21:00:38 +0000
Files and hashes: 1: D93aVb7wrIXUaG1-CC-3JUagYOE.roa (hash: /8ReYoccQ/vVAZ/EZIZ9ttYSoWEPANiLCShHLXPhYb0=)
2: xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl (hash: AvdpVavyWZtsIeFpSFHOLhqZN0IChaGZTMj0u2zmmNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:63:a7:fc:51:a1:a1:12:89:b3:65:d9:02:85:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c576ba0c098dc472186223c91e7def5216e239f1
Validity
Not Before: Jun 13 21:00:38 2026 GMT
Not After : Jun 14 21:00:38 2026 GMT
Subject: CN=d14e16b2e93f1f30ab63b99cb01d27b4d79184fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3f:c3:07:07:c0:0a:81:cf:b6:47:bf:b7:64:
cf:1c:c1:b1:75:76:0c:6c:67:b0:6b:44:0e:07:08:
82:62:6c:2c:b3:56:d4:2d:1c:8a:ff:1b:71:55:40:
3d:7a:b9:9b:74:2c:f9:fa:f0:26:1c:95:75:63:36:
56:9f:ef:97:11:31:6e:10:59:ba:e0:2b:9b:96:f3:
5b:13:ff:62:d0:e6:2a:8b:98:1c:8c:fb:bf:4e:2d:
43:a3:63:e9:b8:bc:41:b7:13:22:ae:70:6a:a7:38:
98:05:0f:cd:3e:8b:40:a4:48:17:f6:51:0e:a0:ed:
29:a7:b4:8f:86:c6:53:58:ff:89:1f:08:e8:b0:63:
4c:7f:6e:24:a6:59:65:f0:59:f1:2b:33:55:a2:b6:
eb:fb:71:52:ee:3f:ab:a6:45:40:69:59:8f:6c:54:
9e:37:0b:62:c7:f9:53:c4:a9:a7:9e:a5:d8:ba:b4:
ad:b4:1d:7f:76:c0:ef:89:e1:c7:e5:9d:3c:a1:4e:
85:27:67:1b:10:44:8a:5d:2a:b8:0f:b7:45:5b:7b:
eb:00:1f:08:b5:d2:f6:45:21:49:52:f6:7a:bd:a5:
1d:05:d9:72:74:49:4f:5c:67:9f:8b:09:0b:67:e1:
d1:3b:be:9a:bf:66:44:9b:01:f1:aa:88:0f:50:97:
13:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:4E:16:B2:E9:3F:1F:30:AB:63:B9:9C:B0:1D:27:B4:D7:91:84:FE
X509v3 Authority Key Identifier:
keyid:C5:76:BA:0C:09:8D:C4:72:18:62:23:C9:1E:7D:EF:52:16:E2:39:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xXa6DAmNxHIYYiPJHn3vUhbiOfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9d62d4-d033-46e9-bfd3-32ee458a6348/1/xXa6DAmNxHIYYiPJHn3vUhbiOfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:88:50:48:00:ae:cc:0f:0f:a8:d8:11:35:f4:1a:e8:98:e8:
4f:58:d5:d9:c8:4e:91:f1:c7:86:a8:3b:f4:69:df:b6:b5:6a:
42:93:9b:3d:8a:7c:b4:4c:73:7c:e4:98:cd:48:f9:61:f2:fa:
a1:2e:b1:8b:a3:d2:64:55:f7:76:2f:34:66:44:df:49:20:a1:
d6:d0:7f:6e:fa:15:d3:42:98:5d:79:49:56:38:57:a6:82:fb:
3b:94:22:f1:55:e8:87:9e:55:46:45:52:d6:33:95:ea:67:bc:
62:64:92:f1:3f:44:b2:4c:59:17:f1:63:8b:f0:57:9a:eb:f0:
5d:d6:5b:8b:14:80:31:d7:28:44:57:46:cd:b7:0b:32:09:20:
c6:13:ad:b6:47:da:59:c8:fe:7a:88:f7:e1:8c:76:52:72:c8:
e2:66:ed:6b:de:49:d5:cd:c4:5f:3e:a8:70:40:d2:6c:3a:7e:
28:75:d2:ce:6b:ef:4f:7b:60:26:e1:d5:e9:59:01:59:fb:39:
7e:83:1d:83:05:28:f0:82:d1:9c:f3:31:5e:11:dd:a5:19:f5:
32:51:7c:1c:d5:0b:88:fb:2b:a9:6a:ca:a1:14:f6:32:1a:7d:
7e:f3:fe:93:54:15:35:22:aa:50:8f:82:2b:20:1e:f6:6e:ea:
61:e3:f6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:45:48 2026 by rpki-client