Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
File: xvw4sqEAOV-puZGa15LnrLLbLgc.mft (raw, json)
Hash identifier: P2bvzrEtw+OTyexcDiWX8Xy7CkcG7OMwBwbcJbG2Kbo=
Subject key identifier: A2:C9:1C:CD:2A:51:13:4E:DE:A9:B8:0A:37:90:F8:00:B0:36:03:D4
Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
Certificate issuer: /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Certificate serial: 019EBF23BD793CD8AA6631DC241F6C3C2C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
Manifest number: 0927
Signing time: Sat 13 Jun 2026 04:00:50 +0000
Manifest this update: Sat 13 Jun 2026 04:00:50 +0000
Manifest next update: Sun 14 Jun 2026 04:00:50 +0000
Files and hashes: 1: 4kLVVeCRQJrEoKU2Z3FAZr5ZTZg.roa (hash: N+n4RQm/UCrzmjM9BuILs0DGf1giItqSLrBBjPu0qrU=)
2: MAAniPDXI9HsVNZwiBPzQo7C0FE.asa (hash: +t1AssvVOScBcP/9D61rppScOKqy8/J9uspPTrgro+o=)
3: xvw4sqEAOV-puZGa15LnrLLbLgc.crl (hash: dcxAnKxznOUo6gMWURwWpM6AWb1jifEA6SHvKNFoFSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:bd:79:3c:d8:aa:66:31:dc:24:1f:6c:3c:2c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Validity
Not Before: Jun 13 04:00:50 2026 GMT
Not After : Jun 14 04:00:50 2026 GMT
Subject: CN=a2c91ccd2a51134edea9b80a3790f800b03603d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:39:eb:db:87:8f:05:c1:7e:39:0d:32:5b:17:
29:65:e8:fb:1c:10:53:94:b6:6f:0e:a4:d5:36:49:
6f:91:bd:25:57:dc:2c:65:6e:a1:7e:6e:04:8f:ac:
c0:95:38:4c:0e:15:5b:4d:61:c2:10:72:89:46:59:
51:fa:23:ef:7d:26:14:9a:9a:16:fa:7c:0f:e6:e7:
b7:59:7d:3b:4d:41:62:9b:9a:07:18:23:15:e5:6e:
c7:9e:c9:66:7d:0b:03:fb:a8:fb:36:88:ad:ab:c1:
76:e0:80:a3:a1:b4:02:6e:bd:8c:14:ce:0e:29:60:
46:25:e9:d8:08:9b:5b:c6:26:4f:74:74:f0:9c:bb:
e1:63:8c:bb:34:f2:41:d2:10:0c:97:5e:ae:d9:09:
77:f7:ab:9a:16:83:ae:b3:51:52:84:a8:e9:f1:3b:
99:a9:b1:48:9f:51:99:a1:3a:72:fc:b7:6e:05:3d:
93:56:ab:47:01:41:26:01:08:a8:9d:06:e4:09:29:
79:a3:11:3a:ea:bc:ff:7d:3a:dd:48:d9:21:d6:ce:
85:2c:c9:05:89:4e:2e:29:74:55:47:63:ae:b7:22:
0c:9e:af:48:32:55:2a:14:b9:d6:cd:cc:7d:84:83:
4c:40:f1:ee:77:63:69:54:87:9f:31:3b:60:47:23:
7c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:C9:1C:CD:2A:51:13:4E:DE:A9:B8:0A:37:90:F8:00:B0:36:03:D4
X509v3 Authority Key Identifier:
keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7a:ab:09:03:be:88:7d:00:36:fc:bf:eb:f2:cc:b9:2c:0c:
32:59:16:3b:ad:a0:a9:b1:a2:b5:47:4d:ad:fe:76:b6:4e:de:
0f:e8:69:76:8e:c8:68:53:96:d5:9e:4b:06:ad:f2:32:f0:53:
e9:e7:c4:62:d1:a1:b5:41:c1:f8:b1:d4:97:1d:54:0e:b2:c9:
2e:df:f1:64:65:a7:22:28:d3:dc:17:1b:30:81:ac:bd:36:bd:
cc:c4:bd:38:49:b3:e4:d8:01:2f:81:89:b2:31:9c:c3:b0:80:
8d:f1:91:3d:b7:b2:e3:72:36:6d:00:2b:26:de:7e:f1:7b:08:
ec:63:fa:f2:c6:2d:9b:25:6c:18:16:fd:3c:f6:5c:d8:f3:03:
fc:76:67:01:5e:8a:5d:29:35:1e:c4:8e:68:47:2f:73:97:88:
44:db:04:6f:be:a5:4f:39:5d:c6:74:3a:94:95:8b:61:d1:d8:
90:e9:25:f6:97:5d:6f:41:7c:2b:46:0c:a6:b1:d3:89:25:e3:
18:72:df:23:88:fb:e4:84:40:5a:71:6f:9f:94:09:ff:9f:fe:
6b:d3:b4:c1:f7:02:8a:51:53:6a:0f:7a:19:82:44:cb:70:00:
17:f0:c4:cd:bb:c7:19:55:55:b7:f7:13:3f:48:5c:c6:ee:72:
ce:77:b2:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:36:47 2026 by rpki-client