Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
File: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft (raw, json)
Hash identifier: hK8mf82RWGe6Ok88vCk5OhndIfwtaHSc3F5G5yn6HFE=
Subject key identifier: 10:D7:51:AC:01:E3:30:E2:34:8A:BB:C5:E6:27:E3:59:6C:E9:1C:70
Authority key identifier: C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
Certificate issuer: /CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Certificate serial: 019EC148AD17FACB099B33CA6BC463996BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
Manifest number: 17B0
Signing time: Sat 13 Jun 2026 14:00:25 +0000
Manifest this update: Sat 13 Jun 2026 14:00:25 +0000
Manifest next update: Sun 14 Jun 2026 14:00:25 +0000
Files and hashes: 1: RA_P8M2CbE3vpnTaUf4TR1pQq4c.roa (hash: sqZi/SBA/dg8k8Qf9vK6EYY7YFO+mp6oMfC87nRDLEY=)
2: xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl (hash: yFHywG2LyCTyqV7scBXI5OQ74G8urscNfCX4t8ED1oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:ad:17:fa:cb:09:9b:33:ca:6b:c4:63:99:6b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c719cad9922115bcfa7452ba0a6e43a6af4e4c24
Validity
Not Before: Jun 13 14:00:25 2026 GMT
Not After : Jun 14 14:00:25 2026 GMT
Subject: CN=10d751ac01e330e2348abbc5e627e3596ce91c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:62:95:0e:15:42:11:c1:4e:fa:35:4d:91:2e:
ed:a6:bd:4e:d5:05:89:be:dd:35:5e:33:3a:99:ca:
a6:2c:25:54:06:a8:d0:05:3a:5c:b9:ce:a8:92:95:
54:66:16:cd:0f:02:4b:d8:9b:b4:2b:34:c0:61:77:
2c:db:e9:e9:0d:cc:0b:84:e1:1e:46:e1:f7:5d:34:
68:4e:d5:47:df:00:01:cb:12:e3:bd:07:ac:4d:39:
9a:52:e8:66:20:aa:00:8e:64:99:a4:a5:e3:6c:15:
b2:a0:3e:1a:41:2f:45:bc:38:a5:98:5f:82:82:b2:
b1:03:08:35:80:78:9e:92:ef:71:80:2b:81:27:02:
65:bb:9a:a6:1e:6a:3d:eb:c1:82:5c:2c:6b:01:81:
c3:3b:4c:c2:7a:fb:91:08:25:e1:3d:ac:d7:31:41:
b3:3e:68:f3:ec:23:03:18:12:c3:e1:c2:95:e3:c2:
92:09:a5:35:09:98:6f:a1:61:c7:83:43:5f:23:49:
0e:59:04:f9:96:d4:fe:d1:b0:7e:23:76:fa:92:36:
83:c6:79:a6:8b:0e:68:fc:9a:9e:da:44:43:0a:20:
d3:70:db:89:f9:36:0e:03:65:36:f7:0b:4c:7b:71:
44:64:b0:b4:41:a6:04:18:dc:f9:17:de:ce:b8:eb:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D7:51:AC:01:E3:30:E2:34:8A:BB:C5:E6:27:E3:59:6C:E9:1C:70
X509v3 Authority Key Identifier:
keyid:C7:19:CA:D9:92:21:15:BC:FA:74:52:BA:0A:6E:43:A6:AF:4E:4C:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/149332-6969-4c4b-b591-7c2c08b5ee49/1/xxnK2ZIhFbz6dFK6Cm5Dpq9OTCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:f5:03:34:47:d2:22:8b:8e:5c:29:b8:93:f2:14:8b:97:55:
ce:e8:b8:ab:65:9f:ac:b1:42:7c:5f:ff:16:b9:97:c4:00:1d:
2b:0b:45:25:cf:f0:26:22:1e:cf:32:5f:86:43:8f:58:4c:97:
1f:6e:e8:b4:4b:f4:8b:8b:ba:04:56:f1:21:47:d4:bf:e2:38:
d2:d4:b5:f3:02:11:d8:ef:01:aa:d5:4f:3d:a6:8b:b0:18:ce:
45:35:65:0d:76:52:06:4b:d5:fe:1d:27:5c:03:45:b9:1d:88:
bc:b0:4a:e6:34:34:5e:47:48:bc:36:e0:33:9c:8c:1e:ed:53:
ae:67:35:0a:49:1a:62:c6:06:ab:cd:54:43:be:73:91:b0:a9:
2a:43:75:ea:43:de:ee:a9:96:17:31:7e:73:c7:c9:5d:19:56:
c1:10:c1:dd:88:f0:c0:24:26:e2:97:6e:d5:93:f2:00:02:96:
52:61:b8:b4:4f:c9:7d:2d:84:4e:72:cd:f5:5a:af:6a:ea:ff:
9d:2b:ee:99:ac:1c:da:a6:85:72:f0:4a:c2:ae:9f:46:c7:2b:
84:b0:01:82:26:a1:ac:c4:56:56:ec:c0:92:f1:f2:78:1a:48:
f3:2e:35:86:95:8d:7b:77:e0:5f:37:8f:2b:b5:4d:26:be:74:
3d:b5:78:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:36:07 2026 by rpki-client