Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
File: XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft (raw, json)
Hash identifier: x7aHlRv6h5j+SWv7mCxb1mX8gQUb7/7g49P+B+RIzAA=
Subject key identifier: 8D:56:91:A9:48:63:25:56:0F:55:29:29:0D:CC:6A:6E:8F:F8:16:8D
Authority key identifier: 5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C
Certificate issuer: /CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c
Certificate serial: 019EBEECC95AE87BBB738A9793A6A0859663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
Manifest number: 01DA
Signing time: Sat 13 Jun 2026 03:00:49 +0000
Manifest this update: Sat 13 Jun 2026 03:00:49 +0000
Manifest next update: Sun 14 Jun 2026 03:00:49 +0000
Files and hashes: 1: XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl (hash: XBFKcza8E6Sq8GjQGIB+VtJiMG1ZhWWqkjXAJs9PQV8=)
2: pPahSaeBPta7w6VOnQkraRmUcA0.asa (hash: FCTya6t/QqQMoFaMDmatYCTAuidSm61Lv7qwKelhC5E=)
3: rXJCBpwtYShFouVpouU47HymwWo.roa (hash: z0tPKD9etDZny3IDTZR0T2qHlWP90XZw84nhExsH4jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ec:c9:5a:e8:7b:bb:73:8a:97:93:a6:a0:85:96:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c
Validity
Not Before: Jun 13 03:00:49 2026 GMT
Not After : Jun 14 03:00:49 2026 GMT
Subject: CN=8d5691a9486325560f5529290dcc6a6e8ff8168d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:63:32:c8:f3:9e:31:79:fc:8a:77:7d:1a:60:
f0:c9:d7:5f:9f:78:86:ff:67:7f:d3:98:da:86:92:
c9:19:53:00:9e:79:96:f6:97:c7:4d:cc:6d:ec:a7:
37:8e:82:0c:81:be:5c:e4:fa:56:58:b0:0c:1c:7e:
01:db:de:bf:4a:9e:b8:66:c7:d1:16:2f:b2:51:7a:
98:b5:7b:43:15:f9:41:56:d8:57:c4:28:64:9e:95:
35:e5:d4:e5:4d:da:2c:1f:66:85:f5:07:18:25:f1:
c2:c8:19:fb:b2:cc:40:78:36:06:91:35:b7:de:22:
5c:da:fb:e3:43:95:ff:13:8b:16:f3:83:17:7e:14:
01:6e:b3:ba:d6:a8:9f:ea:29:ac:51:bb:06:03:b6:
ca:a9:d9:a0:f3:dd:47:80:03:4b:ef:aa:fd:29:71:
19:56:83:32:0f:25:0a:75:91:7b:dc:cc:53:04:70:
6e:f3:fb:80:40:c2:6c:77:55:f6:38:7a:a9:85:97:
38:8f:42:b7:0e:03:ec:37:6e:47:2d:2d:11:54:38:
b2:b6:cc:e6:88:4f:f7:26:3b:f7:b5:1d:32:2f:4c:
be:1a:b7:12:08:65:6e:15:5d:5f:e0:df:36:36:40:
9b:1e:2e:50:47:8a:75:7b:e2:f9:95:e5:bd:02:50:
e4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:56:91:A9:48:63:25:56:0F:55:29:29:0D:CC:6A:6E:8F:F8:16:8D
X509v3 Authority Key Identifier:
keyid:5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:b5:57:d2:bc:ad:f8:ff:e6:d8:e1:28:7b:73:e1:9a:12:13:
bc:78:3c:5f:4e:f1:eb:12:4e:5f:10:ff:41:bc:57:f3:01:87:
30:b2:ce:bd:b1:37:08:09:e8:92:b4:ae:ff:d1:9f:7a:ad:d5:
82:2e:4a:8e:da:1c:e7:eb:23:f8:ac:44:7b:6b:f6:79:2f:b9:
c7:7b:99:5d:1b:1c:d8:b2:08:ad:16:b7:77:56:f0:5c:87:c5:
85:03:44:02:f7:dd:02:9d:db:fa:8a:23:72:59:d6:16:36:92:
de:ee:22:ca:b3:1e:39:6e:56:33:32:9c:c0:c1:63:76:c2:1b:
99:6f:fd:a9:0b:52:a9:6e:19:c4:ce:8d:b0:c9:1e:61:f2:fb:
4c:d5:07:47:6a:f6:d2:5f:2d:07:6f:bf:6c:d0:a8:27:0c:36:
ae:b2:41:cd:de:c7:dc:cc:b0:c1:66:a3:92:e8:0a:56:13:90:
95:d8:af:03:78:c8:14:59:60:0b:ed:7f:36:30:1e:ca:3e:99:
2b:44:29:cc:b6:29:d5:6d:a2:db:d5:b8:16:38:87:e3:cd:e7:
70:72:20:95:9f:ed:bc:1f:63:55:48:55:47:c2:b3:10:24:d1:
a0:09:4d:7e:65:ff:62:f8:0d:f6:93:8c:18:86:18:b6:d5:35:
7e:3c:fd:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:13:16 2026 by rpki-client