Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json)
Hash identifier: YiI52MYipLhAUgJnY7zpQGQtsShqr1mzpuAICEAs2MA=
Subject key identifier: 91:C0:3A:94:B3:3F:B1:55:C3:38:96:9D:A2:E3:93:BB:08:A2:3D:5C
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 019EC3DC5AC26629D94A65DBF7B0C546AC9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
Manifest number: 1665
Signing time: Sun 14 Jun 2026 02:00:58 +0000
Manifest this update: Sun 14 Jun 2026 02:00:58 +0000
Manifest next update: Mon 15 Jun 2026 02:00:58 +0000
Files and hashes: 1: IcvWLfVUU_qQmUluK1ZJPZKwDUE.roa (hash: 5KtWCkiCc0spLueO4XERS0KkPgjFXkSMZZzwBDaPptQ=)
2: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: R5/8VfZ/pax/EgX52xN2VjWM2EYTDXQA6N2RZC47aW0=)
3: iTA00PhnwnNaKrIdb7Sf-BOFNWU.roa (hash: VqBJga5+IchMfnf1RmPYAK4MIX90SZMIG8XmiqppDnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:dc:5a:c2:66:29:d9:4a:65:db:f7:b0:c5:46:ac:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Jun 14 02:00:58 2026 GMT
Not After : Jun 15 02:00:58 2026 GMT
Subject: CN=91c03a94b33fb155c338969da2e393bb08a23d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:75:52:36:01:9f:57:17:6f:03:44:3b:b9:33:
4f:67:29:47:ce:72:e7:03:5a:68:d3:dd:6c:74:f5:
b7:3c:4e:0a:48:b1:d7:05:af:05:26:0b:7c:ed:dd:
de:f3:e0:3a:a2:ef:a5:64:f8:6e:fe:5c:ae:b2:ae:
1f:3e:28:15:c6:da:c4:36:19:f7:c5:e2:f6:f9:b2:
7a:e6:da:80:04:ea:92:f0:5e:ef:f2:76:d7:66:8e:
c0:e4:bf:1c:c2:12:c0:ee:91:4e:25:2d:55:f3:d9:
8b:0a:02:88:de:bf:1f:07:e6:2d:6d:6f:4d:59:6e:
21:c4:2a:00:18:38:4c:06:65:7f:53:2b:b7:2a:b7:
2e:21:8a:ff:81:29:d1:ee:5e:4f:cd:86:9b:87:a7:
d5:cd:75:c0:48:92:1e:d3:84:fd:42:79:01:a9:4d:
66:fd:ae:cc:29:cb:6f:7e:54:ea:30:38:42:86:30:
8c:c1:c0:f9:10:f1:fb:3f:23:7f:43:6e:06:33:6e:
e5:27:c8:93:a2:ab:e7:62:5d:5b:20:26:1b:88:1e:
b2:27:df:58:f7:e6:9b:90:6a:a5:10:b6:70:2a:01:
e5:4b:03:51:3d:40:4d:c3:80:38:ad:3a:c6:e1:27:
2b:5b:d5:8f:37:25:cd:92:80:be:e7:3a:c4:ba:7c:
ef:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C0:3A:94:B3:3F:B1:55:C3:38:96:9D:A2:E3:93:BB:08:A2:3D:5C
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:00:2a:6c:26:db:1a:3b:bc:c8:cd:d4:d8:b5:2a:76:b0:72:
45:28:9f:c5:34:18:36:3c:62:ec:58:b0:42:ef:7f:4b:39:13:
63:64:09:59:ce:b1:86:43:bd:c1:11:37:3a:ae:7f:0d:49:1c:
1a:d0:fd:1a:b6:b0:b3:6d:31:93:cb:cd:ca:6c:d6:fc:f5:f5:
6d:0f:fa:5b:0c:3c:58:6d:b4:9c:a3:61:fe:31:c3:66:1d:47:
01:ef:f7:b2:83:88:99:44:f3:0a:fa:22:86:34:05:67:56:b1:
4c:b7:2f:ea:72:fc:bd:64:9a:fd:e9:d4:4c:c5:ec:87:31:28:
8c:b4:de:b6:33:be:d8:81:9f:60:c0:ec:0b:6f:64:72:ca:39:
20:f1:30:a7:37:72:74:56:13:fe:10:68:28:c2:16:65:0a:1f:
e9:08:2e:1f:be:67:40:44:a0:81:be:0d:81:04:75:78:35:e3:
0c:af:9f:45:f5:3f:20:29:7d:85:c9:dc:7b:22:a3:69:42:23:
2c:72:2c:2d:c6:1f:1d:6f:c1:79:fa:ae:5b:d2:74:2a:b3:32:
ef:03:26:89:21:44:83:8d:41:db:e2:47:39:77:27:7c:54:47:
15:aa:2b:ea:5b:79:96:9d:94:6e:56:f7:fe:58:d5:e9:2e:a9:
a8:65:0a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:06 2026 by rpki-client