Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: 2AkI+rNbXACOq2vwYGOZzVqOAid4XRxFpE1R1X+q7M4=
Subject key identifier: E0:2D:63:72:A0:E8:A5:66:50:1B:43:C5:BB:01:5E:4C:A2:63:A8:C2
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 019ED3867F0EDF7C245E0553F7A264137C77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 1963
Signing time: Wed 17 Jun 2026 03:01:07 +0000
Manifest this update: Wed 17 Jun 2026 03:01:07 +0000
Manifest next update: Thu 18 Jun 2026 03:01:07 +0000
Files and hashes: 1: Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa (hash: rjml5J5gqgFMe9KzjlWTkxUk0orx3tU+r2zl+R9xROo=)
2: wcLWWQG314JWSm8pfpN9yL_5EII.roa (hash: D4VS38hxLq9k1urmiJ5Azd8OYDvuYJ5hUnqD5WiA9F0=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: qi0rEOrVUZpgnob/gMBl9U5ZEo136fy8cX1rIoBEM7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:86:7f:0e:df:7c:24:5e:05:53:f7:a2:64:13:7c:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Jun 17 03:01:07 2026 GMT
Not After : Jun 18 03:01:07 2026 GMT
Subject: CN=e02d6372a0e8a566501b43c5bb015e4ca263a8c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:af:b5:b8:50:4c:a9:f5:02:ce:d2:bb:6b:c7:
26:1f:9d:4c:4e:cd:0e:6d:6c:31:9f:42:b3:5c:2c:
ba:1f:0d:c1:b2:4d:bb:fa:d0:1d:2d:e4:82:48:d4:
1a:e7:46:b8:0f:f0:59:5e:ac:ef:8d:4f:57:4d:67:
5c:db:f9:87:b6:b6:b3:21:9e:86:41:76:cd:6a:bd:
9a:1a:e8:b9:f3:f0:35:f3:45:f6:5e:a9:c7:ec:b5:
6b:3f:c0:c8:93:27:2f:a1:5c:22:9c:40:e6:87:27:
23:16:97:c0:1c:1c:c3:72:21:5c:84:e8:5c:f1:82:
3b:24:bc:76:a4:8a:5c:34:0e:dd:56:b0:d7:94:67:
5e:0b:d1:a9:a1:33:f7:a3:38:c8:86:b2:6e:70:b0:
f5:41:29:d7:ef:99:e2:7b:37:01:7f:7d:d4:d4:3c:
1a:32:ea:db:c6:8a:ff:e9:58:71:7d:3a:48:48:a1:
4e:34:85:4b:b7:92:8c:96:d1:c2:18:92:da:d4:4d:
f4:a4:f4:e9:39:c1:0b:d7:d5:b4:0b:c1:8b:d7:ee:
c9:df:b6:6d:1a:0d:1f:d7:4d:50:36:91:8a:b6:b0:
cc:1c:0a:0f:e0:f2:63:ed:3a:b9:1b:b5:41:89:73:
3f:16:7d:d7:d2:cd:53:3c:65:a5:c7:04:2e:96:1d:
6a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:2D:63:72:A0:E8:A5:66:50:1B:43:C5:BB:01:5E:4C:A2:63:A8:C2
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:f1:80:0e:e9:f8:03:52:bd:45:1b:b7:14:ba:86:4a:0e:56:
69:e5:4c:4a:81:1b:41:9c:a8:ed:6e:88:fc:c6:c5:26:0b:98:
91:e9:36:65:75:38:1e:70:75:f6:86:99:cb:7f:aa:73:71:a9:
c7:18:17:4b:af:eb:4b:ad:71:e4:eb:be:e8:c1:d9:b4:f4:33:
48:f2:f7:46:c7:96:eb:bf:46:5d:32:67:dd:e1:86:47:ca:d5:
d3:e1:3b:37:65:32:fb:fb:f5:44:40:92:43:ba:55:7e:b1:4c:
33:b3:89:60:5e:ad:61:cb:b1:a4:f0:e2:59:52:a8:59:b7:74:
8b:b7:c4:dd:c7:ce:14:52:26:e0:cf:bb:be:31:ff:30:33:fc:
5b:8d:30:06:09:ba:c1:b4:ce:16:45:a7:df:7b:69:c5:07:99:
54:9f:eb:c5:16:b9:15:de:7d:55:4b:3f:43:1d:f7:18:88:2b:
48:dd:90:ae:37:80:68:af:51:43:e7:47:62:37:2c:41:4f:fc:
74:90:45:83:a1:14:40:58:c9:3c:c6:60:8f:db:b7:41:50:7d:
ee:f0:22:e0:14:cf:2e:40:1e:32:0c:c7:98:e1:c9:a7:3e:5b:
90:11:f9:29:3d:96:56:25:54:d6:5e:fe:49:ff:23:90:c1:cd:
11:f3:bb:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:26:40 2026 by rpki-client