Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: 559eHI85Q/J0ninZIsejtsct0pUwMJo4CJZdClPjs20=
Subject key identifier: 22:86:03:A1:73:7D:25:7A:A9:72:90:BE:57:F7:D8:C3:18:0D:7B:88
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 019EBFC800C4A78BD811D2015FA35BC7C69A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 195A
Signing time: Sat 13 Jun 2026 07:00:16 +0000
Manifest this update: Sat 13 Jun 2026 07:00:16 +0000
Manifest next update: Sun 14 Jun 2026 07:00:16 +0000
Files and hashes: 1: NKg93JWQUnBu80RX13MwmqJxvVc.roa (hash: nG4jnHVVr/B/zg5snhsHaHEVH2wq5BQYMoc/wJLZKCM=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: 6N6FcHWb+DkoLwLnnepqoC+DUMRp5ayjJ5P8BxD0D/k=)
3: wGoncIYhxzrOvpFggApuVrKV4Vk.asa (hash: S/6luEA1foPNyWEYWaj/UsXwLkgTP/ejkSFX9YYjOE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:00:c4:a7:8b:d8:11:d2:01:5f:a3:5b:c7:c6:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Jun 13 07:00:16 2026 GMT
Not After : Jun 14 07:00:16 2026 GMT
Subject: CN=228603a1737d257aa97290be57f7d8c3180d7b88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:be:5c:b7:63:bf:de:47:0a:5f:0e:8e:cc:28:
b7:a1:46:a7:15:74:98:5e:ef:60:4b:4b:92:9a:28:
26:9e:01:a4:e8:4a:6b:85:4d:26:d7:8b:f9:d4:ec:
2f:e5:b2:c6:6f:73:0d:34:fe:19:25:b7:7b:9e:1d:
f8:0e:90:1b:30:69:24:d2:5f:d7:19:e3:02:09:83:
29:b7:49:87:05:4d:b3:04:2c:0a:65:2b:cf:fa:92:
bf:98:96:c0:47:8a:21:9c:7d:8b:52:3a:9d:de:48:
d7:5a:29:55:58:a0:1f:91:16:22:88:f8:d9:de:21:
76:2d:32:9c:af:20:13:85:4a:9f:49:09:2d:00:00:
33:52:bb:c8:d9:c6:ef:0f:4a:16:b3:a8:d7:1b:d1:
22:7f:7e:97:6e:2a:42:82:90:51:5b:1c:9c:8d:de:
88:57:80:ef:12:90:f8:19:87:9d:ba:c7:1a:6d:34:
0a:6d:82:45:f6:90:34:eb:b6:cf:dd:c8:95:ed:0e:
8c:a2:07:de:53:e2:ff:17:d2:6f:47:ae:f4:c2:7d:
22:57:76:1d:3b:ce:5b:cf:ed:58:9b:cc:87:f3:76:
7d:c7:f3:f7:1d:19:fe:ae:dd:fc:2b:09:b9:41:d2:
ff:d0:19:e2:5d:5b:51:d1:d3:a6:cf:86:c5:71:96:
1a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:86:03:A1:73:7D:25:7A:A9:72:90:BE:57:F7:D8:C3:18:0D:7B:88
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:81:75:05:eb:e3:df:4e:9a:ce:9b:29:57:04:cb:e7:7b:4b:
b9:2c:d1:bf:39:26:2e:09:3f:38:30:00:49:91:c7:5b:df:f4:
da:cf:6c:af:09:a3:14:ff:78:8f:49:41:9a:98:ee:25:f4:d0:
51:b9:b4:ca:6b:1c:59:c9:00:55:c4:f3:85:73:78:c2:5f:ed:
90:ff:55:6c:98:8d:87:87:47:b6:b7:90:f5:6c:4b:dc:30:b7:
ec:52:cc:e9:8b:2c:23:f5:e6:02:ee:14:07:6e:9f:12:ac:4a:
65:ff:8b:a8:df:c2:ff:d2:01:7b:7b:bc:58:e3:66:a8:74:0d:
6e:45:bd:be:41:c8:95:95:b4:51:64:66:0d:8f:f7:2a:b4:08:
75:3e:00:99:d6:51:3a:90:2a:47:26:88:a2:71:e4:56:f4:f1:
e6:15:24:07:4e:26:ca:02:20:3f:dc:b7:ea:4c:50:2a:22:44:
2f:9b:2f:9c:35:61:cc:b5:07:94:da:c9:21:75:fb:ac:9e:70:
cc:7c:27:c4:f9:d9:df:2e:90:20:5d:59:a7:31:eb:4b:9b:05:
01:72:51:c4:6a:23:87:6b:3d:0b:3f:cd:b3:7e:a7:d7:f4:d1:
72:f5:30:70:37:c1:5a:85:1a:fc:28:79:e9:60:b6:d7:38:10:
ce:37:0e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:04:51 2026 by rpki-client