Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: 9XNBvHd77/qb6TTRdEt1+6w3ElO0YSXsxVoNt2IgMXY=
Subject key identifier: E6:80:DB:6C:77:8F:ED:E6:EB:4D:4E:35:FD:00:2C:AC:26:25:14:14
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 019EC0DB147090B238777CA145B09AB5722F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 12:00:43 +0000
Manifest this update: Sat 13 Jun 2026 12:00:43 +0000
Manifest next update: Sun 14 Jun 2026 12:00:43 +0000
Files and hashes: 1: 7dSZZTHJ1-e2dDdweLpiAslwQS0.roa (hash: TsQjPnCqokf75A2IgOvFTsvPj11pJfIjU93Enfc2xSU=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: 2Xu/Ip36LXrxSbTxHrH8R4wMiIKnuYEKpOVbadmUbaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:14:70:90:b2:38:77:7c:a1:45:b0:9a:b5:72:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Jun 13 12:00:43 2026 GMT
Not After : Jun 14 12:00:43 2026 GMT
Subject: CN=e680db6c778fede6eb4d4e35fd002cac26251414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:cc:b5:24:50:70:f3:c0:75:72:d6:aa:96:90:
b1:cd:94:36:56:3b:d3:50:f8:03:bc:0c:fd:58:8d:
4b:d4:aa:fa:cb:a8:5f:72:d1:01:d4:bd:43:0f:13:
b7:cd:f6:da:dd:76:40:d0:5d:ec:51:1c:35:67:fb:
a1:24:dc:e4:2e:ab:aa:32:3c:28:21:0a:dd:a8:51:
65:9f:bb:2c:7c:d1:39:a1:72:63:1d:4b:20:1e:b5:
e9:40:d0:df:b3:4b:60:f9:45:bd:1d:5f:b1:cd:84:
26:de:27:1e:14:cf:e0:58:73:58:ab:8f:81:55:aa:
9f:f7:d2:0e:9b:b2:bd:e6:14:8e:6f:8f:71:a0:66:
6f:2d:cc:e1:4b:28:23:23:47:17:a5:4e:30:c5:5e:
16:72:13:73:06:d6:b6:f4:dd:2d:3a:2f:96:54:89:
73:86:1e:17:86:8e:95:5e:69:3d:89:bc:53:17:5e:
78:0f:d9:e4:59:d2:01:c2:1a:a7:d5:b9:80:a5:10:
54:ee:25:6e:67:8f:00:09:89:04:93:86:97:e0:5f:
fe:2b:b0:c6:64:ef:1b:ba:e0:ab:ac:2a:64:5f:10:
14:2d:1f:77:d1:08:f9:9a:de:7e:89:b6:b7:9d:75:
fd:38:e3:fd:d1:61:63:65:f3:54:13:91:53:ad:39:
58:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:80:DB:6C:77:8F:ED:E6:EB:4D:4E:35:FD:00:2C:AC:26:25:14:14
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:f9:8e:b9:b0:ac:0b:9b:d7:ca:34:a3:54:f8:44:27:20:fb:
2c:e0:fc:1d:be:73:6b:3c:8a:e5:3e:01:d9:4a:4f:d8:ef:a3:
62:d7:5d:73:11:79:b8:2b:bd:84:42:f1:75:73:f9:51:ff:95:
64:1f:cf:2c:e8:b2:d0:1f:f6:58:22:67:3e:6e:a7:8f:da:e0:
e1:3a:b5:bd:75:ec:1c:f4:57:0d:dd:f4:29:23:17:ab:4f:bf:
45:03:e2:a1:4b:f9:93:d5:e3:ec:8a:3b:c6:87:d4:e8:1d:db:
95:31:43:d3:9a:bb:38:9d:70:62:b5:68:db:40:f5:61:04:0e:
8c:e8:2d:70:a4:03:c3:eb:05:11:14:48:64:fc:1c:d1:55:34:
c0:ef:98:f2:95:d1:eb:e8:1f:23:61:ff:8e:e5:f3:0a:f0:3f:
6e:33:07:eb:5c:dc:fe:7a:99:a7:f2:95:00:c9:3b:4e:85:8f:
61:04:7c:11:ba:70:1a:1a:98:54:e0:98:ed:c1:e9:eb:86:e6:
ee:12:71:02:28:cc:4a:6a:06:8b:ac:6d:c1:f1:18:c3:b9:07:
b4:5c:69:9f:77:a2:e7:2d:e9:5a:7e:c5:b8:aa:e2:f3:5a:27:
20:9b:c8:dd:6d:7f:c2:68:78:1d:f9:3d:5a:a1:01:4f:32:8c:
50:e6:80:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:06:17 2026 by rpki-client