Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: iSWa/UcFeVxhlU1ymKtcTwELwvOS/Mx2PKuMrl0AOwQ=
Subject key identifier: DD:C4:13:9E:F3:1A:56:F0:1B:1A:63:B6:32:C4:B8:63:3E:99:C5:0A
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 019EC0DB1E4C8558589944A2A0F59C5DC894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 195C
Signing time: Sat 13 Jun 2026 12:00:45 +0000
Manifest this update: Sat 13 Jun 2026 12:00:45 +0000
Manifest next update: Sun 14 Jun 2026 12:00:45 +0000
Files and hashes: 1: pl4G0drpVsiUnTNv0aNJRxAq40Y.roa (hash: TIrmY5F1mz/rcq5o0AaF7KuNyHFmI5rxVVBApqp6+Ig=)
2: uCT5qS0TatwLKR2syBgBgC34NYE.roa (hash: 6Pav0LB8Y/JGRbLI7vMShFMSStiFyP+H+ECIrWK519s=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: nip+MfMKA0FE8+QqbMy90hjToc/rmuET9RB0hJETE3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 12:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:1e:4c:85:58:58:99:44:a2:a0:f5:9c:5d:c8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: Jun 13 12:00:45 2026 GMT
Not After : Jun 14 12:00:45 2026 GMT
Subject: CN=ddc4139ef31a56f01b1a63b632c4b8633e99c50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:2b:b7:a2:d5:ab:f7:dd:6b:47:ce:fc:88:1f:
a6:b8:22:4e:46:9d:ba:a8:46:8a:03:9e:1d:5b:64:
46:db:7b:08:a3:2c:bc:94:4c:b3:b9:36:6d:07:a0:
a1:4e:f6:f4:e4:4f:4a:f0:6c:9e:d2:82:15:00:ed:
37:87:84:2f:ae:d4:08:67:a4:1e:17:e8:96:a7:95:
7b:c1:80:e0:45:6d:a5:42:7e:c8:83:91:f6:dd:5f:
6d:be:60:4f:0a:0c:8f:3f:37:05:f6:2f:d4:f7:d7:
03:30:3e:06:49:41:1b:10:0d:05:1f:ec:44:38:65:
45:d3:0f:84:ac:c9:fe:82:bb:e3:3f:ea:8b:d3:bd:
76:2a:8e:b7:7b:b5:44:47:4e:cf:32:78:91:8b:bb:
6c:f2:a5:1b:8d:88:55:1b:65:a4:27:58:70:64:2d:
ca:6f:dd:db:86:6a:8f:5a:62:90:1d:c6:4f:cb:01:
fa:94:3f:cb:16:cf:8d:44:4b:35:2c:5a:a7:cc:34:
08:ad:fb:71:ad:f3:93:8e:aa:ed:6e:d3:43:9c:ff:
b9:c5:b5:d0:32:69:c4:d4:27:d3:2a:64:ae:98:ba:
3d:77:24:12:d7:7d:17:40:65:81:c8:a5:34:54:a4:
8a:d6:e0:d8:16:f4:83:84:a0:ff:e1:90:b3:36:3c:
d2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C4:13:9E:F3:1A:56:F0:1B:1A:63:B6:32:C4:B8:63:3E:99:C5:0A
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b2:50:70:99:1f:be:f0:04:7a:25:ef:f1:c7:57:e7:a7:10:
9a:61:09:c8:99:62:b0:7b:96:e1:23:4c:53:e6:02:45:ba:89:
3d:74:5a:41:7c:92:0f:2b:88:21:0c:cc:83:c3:50:b9:40:22:
a7:20:ed:cf:ad:ae:b4:97:d6:63:90:6d:52:be:c4:4e:42:f6:
22:5f:8d:58:f9:0b:da:ba:37:be:db:8d:b7:ac:e3:af:57:97:
20:24:dc:b2:47:20:db:d7:88:71:f1:0c:e8:e5:cd:98:2f:1a:
aa:2f:2d:56:2e:ea:c3:0a:5c:6d:eb:26:7c:09:a7:16:da:e9:
5e:45:fb:40:ba:27:2c:cd:3e:ee:f9:0b:46:1c:dd:bb:a3:81:
0e:70:39:d3:31:ef:81:77:4e:cb:1b:df:e6:8a:24:af:1f:7e:
0c:57:b3:f9:40:e6:1f:e0:75:58:e8:18:22:1e:02:b9:7f:93:
98:10:5f:f8:d1:c8:78:33:8d:13:04:78:1e:6a:41:1d:5a:0d:
98:3b:25:07:9b:5a:26:40:0c:ab:36:04:64:b2:d1:dc:f7:15:
f9:9b:58:51:62:62:09:0a:cc:d1:1d:d6:8e:88:c7:69:37:83:
cd:18:e9:8d:d7:5a:d5:46:39:37:aa:32:01:58:af:76:29:d8:
72:9a:f1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:24:21 2026 by rpki-client