Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: d1tIDnDkCOYE5rAllTs1hyjfPqWGXZI8iriiBbu+hkM=
Subject key identifier: 1B:58:42:97:C1:8A:A5:2E:D0:99:9B:91:55:7F:BF:29:30:35:F4:4D
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 019EBF237C6BAE770CAC2547CB62D291CBAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0CF0
Signing time: Sat 13 Jun 2026 04:00:34 +0000
Manifest this update: Sat 13 Jun 2026 04:00:34 +0000
Manifest next update: Sun 14 Jun 2026 04:00:34 +0000
Files and hashes: 1: EmJaWy9ErTq18djeUNfT6TYwXlA.roa (hash: 4n7tztgrwrUxD6WI3OMeFvCbZPJYYWR7ZCZusKoAv2Y=)
2: I-K9nqaL8isdaQPATdz15jV472A.roa (hash: IzWVmalHZuVa9srOGb7K8LfnsGA4gkEh+RLBEqMh0oM=)
3: RcwVn60BAjXaSKd54kN8HvE9mEI.roa (hash: HMzOnWY8MpFn7ebVHAu3c09I2xVaAKGb1gijWHIVX6I=)
4: VMEOZBTbdat5Ej2FDGSSyvWxON4.roa (hash: il5PH5NsJiNfZtmLceTZARbKmqNBVyPmTfnq15PGTB8=)
5: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: SPyTUaqysetQlKe4U++quv81dA88ga+wYunxdeZsCOc=)
6: lIxTSYsNmmcqNIHLrqXgnkuovB4.roa (hash: KyCy7f0RC+Gah0kPcXWSGeJFDqftrveXwrbOBQUq7gE=)
7: n6hUs8ScD2JiUwNfl89-e_tCc6w.roa (hash: /7fv2sWCDJbqb4l7iyEbmK73ArodpdBZ+jyH4nyo2WE=)
8: roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa (hash: HW4LBYiaQzfwjk4eYDYDeite6KGRHXlfiOHLKtkmNeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:23:7c:6b:ae:77:0c:ac:25:47:cb:62:d2:91:cb:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: Jun 13 04:00:34 2026 GMT
Not After : Jun 14 04:00:34 2026 GMT
Subject: CN=1b584297c18aa52ed0999b91557fbf293035f44d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5d:fa:f5:b8:fc:0c:31:32:89:bb:62:70:56:
49:3b:20:4c:09:89:f0:bd:85:74:b7:50:df:99:e2:
e3:42:ac:00:60:c4:c1:05:42:81:67:b6:38:fa:70:
db:c3:9b:dd:c4:cc:77:72:5b:10:60:59:f2:e9:81:
c0:ab:cc:3e:f9:40:87:17:67:f0:fc:26:cf:1d:63:
57:44:8d:1a:1d:73:46:09:26:34:9a:7c:4e:e1:70:
93:62:b1:90:d8:a6:7f:d3:08:f5:1e:cf:fd:b3:df:
3f:3b:31:99:43:2a:70:ed:c3:32:61:9c:dc:fe:2f:
37:3c:d5:db:6e:65:31:d3:75:71:74:43:96:6c:0b:
08:31:28:77:fe:f2:89:33:e6:6e:5f:e2:17:fc:55:
c7:3d:1b:f7:6a:4a:8a:43:58:5a:18:f2:4f:1a:2c:
01:87:d5:b3:25:94:04:d9:b1:dd:69:25:dc:c2:17:
eb:11:09:b1:bb:ca:1e:6a:64:5f:84:27:77:9a:02:
49:ef:56:5f:2e:25:73:93:0e:13:0d:ae:cc:ef:96:
f6:5d:6a:7e:0c:33:eb:a0:9e:84:63:07:45:c8:bf:
50:3e:ba:19:d9:4a:59:55:9d:4d:48:16:72:de:18:
b8:c0:bd:07:3c:ce:7a:30:4f:56:72:9a:04:58:49:
e9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:58:42:97:C1:8A:A5:2E:D0:99:9B:91:55:7F:BF:29:30:35:F4:4D
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3f:a6:04:89:dc:f7:71:f3:12:20:f0:33:71:39:32:a2:14:
2c:41:01:39:40:db:8b:8a:35:d0:f8:63:1a:e5:47:c2:4a:3f:
3e:8b:39:2a:7d:4b:1e:12:9e:e3:fe:51:bc:72:89:e6:49:d4:
ad:d0:eb:91:91:b9:b8:74:bd:ca:84:e7:fc:ce:64:ac:30:d8:
14:6e:c0:71:98:11:ef:df:bf:aa:bd:4b:9e:f3:66:1e:e2:05:
b1:d8:0d:34:bc:a6:ba:2b:e0:08:59:7c:6f:46:fd:1a:74:ae:
e4:66:11:5c:0e:7c:06:99:f8:0f:5f:e0:74:d4:3c:29:ec:d9:
a1:26:8c:a7:a4:e0:77:75:e4:df:7e:11:7c:76:cc:4f:cd:ce:
d1:25:d5:16:9d:6b:8d:66:f6:3b:15:22:68:71:b1:0b:58:a6:
c5:8a:56:79:df:5e:07:02:22:5c:a9:20:ca:1f:e9:b3:8b:30:
9c:16:18:39:b9:96:44:62:82:c6:6b:1b:94:11:71:a4:1c:18:
43:df:14:60:71:2a:0d:58:57:d7:22:da:ef:f2:ba:7e:d8:02:
4d:91:2c:62:9a:4f:6d:b1:d2:20:c6:e0:5f:d6:06:1d:6f:a3:
1c:10:be:69:5d:4f:68:9f:b6:9b:9f:86:d1:90:89:1a:53:b2:
13:ab:36:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:53:35 2026 by rpki-client