
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
File: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft (raw, json)
Hash identifier: E2Tc9DTTwhvKFNpHUYluaE1klhd/1GDqdhllNLJRDMA=
Subject key identifier: A3:76:33:AB:FC:6F:E8:6F:64:40:03:15:08:B7:A1:D6:D4:54:88:1F
Authority key identifier: FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
Certificate issuer: /CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Certificate serial: 019EC0367C6DC566D62D57943E0A3E5112EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
Manifest number: 1123
Signing time: Sat 13 Jun 2026 09:00:56 +0000
Manifest this update: Sat 13 Jun 2026 09:00:56 +0000
Manifest next update: Sun 14 Jun 2026 09:00:56 +0000
Files and hashes: 1: XfPxNqw04f4ysUNycil0EQofl1M.roa (hash: JClRzQorRQbXDP0L/PC7A7JxisEaLLPV1aRUiLTnBv8=)
2: _xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl (hash: r28iHQjVTSYH+BPd3FeBvmC1T4lcTG3wMc82GLm4Z90=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:36:7c:6d:c5:66:d6:2d:57:94:3e:0a:3e:51:12:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff13a21b4e8ce14ce7d6680c990ec6ba29a027c2
Validity
Not Before: Jun 13 09:00:56 2026 GMT
Not After : Jun 14 09:00:56 2026 GMT
Subject: CN=a37633abfc6fe86f6440031508b7a1d6d454881f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1b:3a:2c:a0:72:fb:e5:7f:4e:68:72:c4:6d:
7a:85:d4:6c:aa:c7:7f:43:1e:0e:ae:de:65:c8:e1:
98:e5:a9:02:b3:2c:ff:67:f3:d6:c5:3e:08:fe:4b:
1c:e3:e5:ce:39:7d:da:f0:0d:68:f6:e2:c6:60:0f:
1b:5d:48:95:07:ab:1d:06:6b:e5:04:46:bf:66:03:
ce:6e:33:01:65:97:7a:0e:81:bf:d4:8c:7f:c2:cd:
87:3d:56:de:e9:b2:8c:15:7d:e2:c8:5e:71:7a:0e:
03:b7:28:e5:05:b5:73:41:e9:39:bc:62:85:de:9e:
bd:7f:bc:a6:0c:bc:19:ba:ba:ea:9b:e3:03:f4:d5:
74:5e:a4:66:67:52:35:27:52:94:5e:c5:36:10:eb:
33:71:73:54:5c:cf:fe:62:74:98:0f:21:13:03:42:
fe:11:ac:47:77:6a:d5:04:c7:b6:85:af:4d:5f:15:
65:12:3c:ec:d5:9b:e5:69:0c:8f:45:1b:f0:c6:f4:
34:cb:e6:de:a7:f1:05:c0:76:00:6b:57:65:50:98:
8e:ee:7a:6c:87:51:2c:7c:54:ad:50:b9:67:5b:e4:
88:1d:9e:53:c2:60:a7:9a:13:12:2b:17:9a:09:12:
b4:16:09:d3:37:7c:8a:4c:65:5a:f4:9a:b3:39:de:
5c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:76:33:AB:FC:6F:E8:6F:64:40:03:15:08:B7:A1:D6:D4:54:88:1F
X509v3 Authority Key Identifier:
keyid:FF:13:A2:1B:4E:8C:E1:4C:E7:D6:68:0C:99:0E:C6:BA:29:A0:27:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d6cfe9-c301-4079-86b9-7fbc4e5797a1/1/_xOiG06M4Uzn1mgMmQ7GuimgJ8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:38:83:a2:12:22:73:08:c3:21:fa:16:1a:2f:31:29:b7:b6:
63:23:27:d5:a4:c7:5f:5e:ea:48:e5:0c:67:4c:3f:9b:c5:2a:
cc:ff:21:16:38:03:6c:ae:9e:72:96:47:14:c8:f5:21:d3:28:
2d:bf:1a:46:68:ea:3a:30:6c:ac:93:24:34:bd:dc:8d:4e:db:
28:9b:57:43:79:d3:1e:2a:6e:99:77:cb:b3:03:52:43:ae:ce:
e2:91:52:60:77:7e:e5:2b:61:93:71:4c:17:bc:35:6d:1e:15:
84:02:72:d3:8c:e8:9a:84:7a:93:f2:22:b1:94:b1:45:4c:f8:
23:4c:fb:bd:eb:ca:88:d1:62:ed:2a:10:8d:45:e8:2a:15:e3:
a4:b9:4a:7c:33:cb:05:d9:02:06:85:7b:12:7d:c9:f2:05:c5:
fa:a5:f8:27:c6:65:e2:03:84:c5:be:00:5a:61:47:57:48:69:
44:da:c8:dc:bc:59:62:48:b2:2f:42:53:2a:45:32:22:54:7a:
f3:fe:c6:49:f2:cb:8d:43:8b:36:c2:3f:93:84:54:c6:91:96:
99:25:47:8b:9f:e2:f5:85:c2:86:55:bf:e6:ef:9a:81:06:19:
31:bb:56:0b:af:b8:e9:37:54:35:fb:e3:bc:ca:d9:e4:dd:91:
c5:38:de:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:33:12 2026 by rpki-client