Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: YBiYIanZ7LXniNPJ9biODOCRzBMEy+xlO8OhCMNB+Ao=
Subject key identifier: 53:67:C8:0C:9B:57:3C:F2:DA:35:B4:F1:7B:0A:2D:7A:AA:E7:EB:AE
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 019ED42BB899A1A13B2B6B887566153F83C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 1969
Signing time: Wed 17 Jun 2026 06:01:35 +0000
Manifest this update: Wed 17 Jun 2026 06:01:35 +0000
Manifest next update: Thu 18 Jun 2026 06:01:35 +0000
Files and hashes: 1: YJVBg6yi8rhbBJuxWKJ7v5Xiat0.roa (hash: Hyd6ST+4DY0Ptd4aJ86bVxwbS75QcKsP6VrnesIx1WI=)
2: __9VedluN1sWd7ruf5_gxA1gv9U.roa (hash: 9+zLsshZreT9h4dF/gegkgeeA5ROS1Ql2Nv3i9Zy+8U=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: dBrry5+BBieTJhmRkdNGAVch0yG2x2V8PhiJN7YfQLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 06:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:2b:b8:99:a1:a1:3b:2b:6b:88:75:66:15:3f:83:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Jun 17 06:01:35 2026 GMT
Not After : Jun 18 06:01:35 2026 GMT
Subject: CN=5367c80c9b573cf2da35b4f17b0a2d7aaae7ebae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6e:5d:9b:5f:b9:3d:53:82:f6:e7:22:be:21:
15:b2:69:40:75:f3:d6:d9:86:24:3c:94:db:38:76:
d9:f8:79:35:9d:08:df:ea:f1:47:81:4a:1e:d4:8f:
7f:c5:b2:a2:47:87:b4:8a:30:38:3d:2b:1c:d6:ae:
e9:26:cd:4c:ab:4e:65:3c:17:86:e8:43:33:62:2e:
68:04:68:37:47:1b:d5:11:69:71:f3:8f:4c:54:f5:
8f:1a:96:a9:b9:75:5a:21:c6:f1:a9:10:ee:1e:57:
33:b0:31:37:56:ba:e4:b4:ba:c8:5a:e1:44:fe:87:
8b:80:78:d4:a3:9c:61:78:38:ac:c3:e3:b2:6b:63:
ba:f1:a6:2a:38:64:f4:51:f9:32:dc:3e:d4:e9:bc:
18:48:3c:04:4f:2a:4e:85:f9:ab:f9:46:23:02:22:
49:bf:0a:94:84:3b:b6:58:a6:32:eb:b4:f9:a4:90:
da:22:2d:ee:4e:44:ad:dd:e4:4c:e7:53:b1:2e:d7:
c6:02:8d:be:5e:fa:2c:3c:e5:45:2c:ea:a0:9e:96:
7f:93:ed:eb:11:65:47:9f:43:00:a4:42:ee:a9:3e:
89:b8:9d:ab:61:42:9c:13:d0:39:f0:88:80:49:b8:
1c:92:da:a9:4a:2a:7d:16:09:15:4b:0c:dd:26:4d:
36:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:67:C8:0C:9B:57:3C:F2:DA:35:B4:F1:7B:0A:2D:7A:AA:E7:EB:AE
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3b:95:bc:f2:00:ec:66:27:a0:b6:0a:05:c0:5d:34:a8:0e:
2f:6b:6e:19:ca:91:9b:af:e8:90:62:17:2a:a5:2d:ee:86:54:
d3:e0:c2:07:3b:a6:c6:e1:fd:1f:6a:8c:90:09:91:e2:a3:db:
fa:c0:a4:9d:ee:01:8c:48:8b:2b:b7:da:d3:87:e7:6a:07:cd:
64:f6:2f:c5:24:1a:79:f8:0a:14:af:a3:b3:bd:72:92:49:7c:
a4:e2:d6:00:64:ef:50:84:15:68:8a:e8:3f:d5:d4:b1:14:3d:
0a:fd:bc:97:2d:ec:9d:25:1e:5a:9e:45:8c:95:6d:9a:fc:3d:
3e:b4:6e:11:96:61:9a:74:57:40:b4:5a:9b:c3:84:24:60:b6:
db:ea:e7:b0:1e:12:b5:eb:5a:19:47:7d:d3:4e:b5:cd:41:29:
38:e9:75:c5:93:58:d8:82:05:18:5d:e9:38:a7:7d:f3:38:9d:
0e:d1:12:bf:fe:f9:dc:1e:25:d4:84:ac:ea:2d:c9:e6:71:b4:
0a:11:9b:7e:83:be:ad:aa:ee:ba:4c:c6:cd:4d:a1:62:c5:ff:
b9:72:5b:d3:fd:60:2b:36:b1:9a:dd:aa:57:e4:c0:96:51:da:
ad:de:ff:b4:f6:ce:cc:19:66:5e:61:45:49:3b:bf:07:5a:68:
8a:f4:ed:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:38:33 2026 by rpki-client