Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: 9Be8aT39dMvnWFolPaHJgX0FaHogsYJIaZlA83HGMKo=
Subject key identifier: 39:35:F9:A3:A2:BD:5D:35:A0:7D:D4:25:93:D8:96:94:55:0D:E7:11
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 019EBE7F17861452F3AEE5A0A9C8859C1FC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 195D
Signing time: Sat 13 Jun 2026 01:01:00 +0000
Manifest this update: Sat 13 Jun 2026 01:01:00 +0000
Manifest next update: Sun 14 Jun 2026 01:01:00 +0000
Files and hashes: 1: MsnqFaljx-vLs6R1klCk-k4mqbE.roa (hash: 9w5Fj/ix8Y1oWU+nhqJcIUFjp29qAgz5fs3U3GbWExc=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: keGleyWMOWQPn6+YnyTFRpd2S8WZKPpUxCiUgWytHY0=)
3: Y-0LFW4QQXme0gq1FoIF-wZ-SQc.roa (hash: wu/R/xhocC/i/LlV9UK65CdEa6/Nxe99KI2JumwUKlc=)
4: a_XjHLHQF6uE4SSOtjsOa8f4-2Q.roa (hash: m3nX1Uyzi87lTewY/HPBoiE0m8iVkIMnK/iQX/3hwYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:17:86:14:52:f3:ae:e5:a0:a9:c8:85:9c:1f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: Jun 13 01:01:00 2026 GMT
Not After : Jun 14 01:01:00 2026 GMT
Subject: CN=3935f9a3a2bd5d35a07dd42593d89694550de711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:43:98:69:cb:45:89:ab:3e:17:6e:84:1f:
be:22:a4:2b:a7:23:59:35:ae:92:9f:34:38:c4:bd:
5f:f0:58:d0:f7:a9:01:87:86:35:91:53:aa:53:5b:
bc:e6:95:ec:20:0c:4c:86:ed:2b:4f:91:e7:f1:40:
e0:d3:38:20:a5:77:0e:2e:ba:69:d9:7b:b5:89:ea:
ef:ef:78:70:14:d4:0f:96:04:2d:d0:a4:11:5d:d4:
7a:30:81:73:98:21:cd:4a:4c:29:f5:b7:90:4a:4e:
b3:97:98:e3:34:cc:89:4a:c6:45:29:a7:fd:79:80:
e5:5d:a5:85:8b:e3:e9:0c:61:2b:8b:e0:98:49:09:
98:15:ef:03:e0:a4:1c:d4:45:9a:d2:c6:1d:6a:7d:
66:48:0f:b0:e7:2b:89:16:db:95:b5:5c:19:8e:c9:
f0:de:44:96:d1:79:33:52:db:ff:49:48:90:c6:c7:
95:4b:38:77:ed:4a:2b:7b:8f:fc:34:f7:21:72:a9:
bd:75:d7:a7:b2:df:8f:54:6c:62:87:ab:b4:0b:9c:
70:38:65:3b:12:c5:58:dc:e8:1b:20:f5:3e:f2:51:
07:f6:ba:ac:72:5f:79:b4:8f:73:b4:39:7a:62:ed:
31:a3:e6:63:d0:ed:e6:fa:06:39:3e:85:e5:d3:b3:
cf:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:35:F9:A3:A2:BD:5D:35:A0:7D:D4:25:93:D8:96:94:55:0D:E7:11
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:e2:aa:3a:af:35:9b:5f:3e:bb:6f:12:82:2d:f3:bd:b6:1a:
65:fb:56:89:64:99:93:b3:40:39:3d:1c:27:69:1f:f3:01:4e:
87:5d:2d:ab:ff:10:34:d7:cf:10:77:ea:76:be:7c:07:f1:3a:
81:bd:85:1a:ff:b5:3d:15:20:4d:fc:57:7b:18:cb:a7:04:f7:
7e:2e:67:7b:17:9e:fc:e3:c4:6e:64:23:47:78:37:bd:e7:bd:
7d:b4:3e:d2:79:f6:fe:ca:33:ea:38:44:19:e3:aa:05:23:96:
89:d5:a1:09:47:21:0f:8c:1b:d1:fa:55:41:05:38:b4:f7:4f:
5b:d7:d2:b5:ad:00:07:6c:86:46:c1:65:c2:5a:23:73:2e:40:
b5:0f:e6:4e:01:71:c2:41:9a:94:f4:82:7b:8b:43:ae:ce:f5:
2c:c4:93:ab:c7:29:40:53:01:64:ce:10:8e:51:05:4e:0a:39:
cf:a5:4f:7e:31:d7:df:c7:85:7d:35:93:73:4b:66:b8:75:c6:
f2:03:f4:97:ba:5f:6c:3e:fd:92:e2:97:66:02:e2:86:cc:04:
d3:81:55:4e:68:bc:1e:c1:b7:fe:0b:8e:6e:69:07:49:b0:3a:
fa:b8:95:ec:3a:81:5d:08:ca:4f:ba:35:f7:8c:af:24:72:c8:
22:9a:3a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:16:24 2026 by rpki-client