Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: JsvgsUSTiz8sdMkyVEeCjhJFOU8DKjLWFukN33gVLos=
Subject key identifier: 99:7E:F5:1A:B7:E6:22:E0:A8:F9:0B:05:1A:AB:A2:55:E8:B5:A1:E4
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 019EBFC8DD89DBF7F778D6A921985F1593E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 07:01:12 +0000
Manifest this update: Sat 13 Jun 2026 07:01:12 +0000
Manifest next update: Sun 14 Jun 2026 07:01:12 +0000
Files and hashes: 1: O0e9J99nDHDBcPP1W09ssXrN96E.roa (hash: aQvYlglowNCiS102CJiAb4sYyaW4lZND2gALby9zlgw=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: SLfnadBYvsgi63FBj/nWARDPIbZgwEIAuTzPhzn4H5s=)
3: x58D33wXY03IBALkfNVEewlOjxI.roa (hash: l4BRaOtR+rQZWBsP3tk/LVs3kvHtYkV6QExE7KMTpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:dd:89:db:f7:f7:78:d6:a9:21:98:5f:15:93:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: Jun 13 07:01:12 2026 GMT
Not After : Jun 14 07:01:12 2026 GMT
Subject: CN=997ef51ab7e622e0a8f90b051aaba255e8b5a1e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b2:d8:ba:3c:2f:66:b9:c0:16:d9:09:04:ee:
b3:a1:91:ff:a9:71:38:1b:6d:5b:a0:46:bc:dc:b9:
33:7f:00:a7:43:75:6f:e5:ca:ec:b5:61:bd:57:8b:
35:c5:a4:e6:c2:03:9c:6e:5f:f0:c7:39:e7:7e:c3:
d1:98:1d:50:d5:8a:1b:d8:ae:64:51:3c:2b:3c:4f:
57:c9:e3:5b:e5:52:53:c5:fb:bb:6d:06:6d:ca:af:
10:a0:65:06:95:2b:e2:7e:43:29:7e:9c:53:1f:0c:
d3:b3:b6:3f:13:19:59:dd:d4:37:1f:23:66:0b:00:
49:ed:66:a9:75:19:8a:e1:56:47:d1:c6:58:6e:ed:
4b:a6:2a:2f:83:bf:62:a4:57:39:96:90:5e:03:2b:
27:3f:88:59:57:33:ef:a1:e9:e3:1b:b0:df:eb:ed:
81:f4:ca:8f:ac:3b:d3:ad:24:26:e2:eb:8e:e7:76:
4a:0d:cd:6f:fc:06:56:b9:99:1a:1f:a7:75:7d:0b:
42:62:80:e5:ca:65:86:73:57:51:56:83:c4:d9:3d:
3e:fd:de:e2:ca:8e:5e:cd:07:6a:4b:a6:45:12:24:
40:df:07:59:15:10:05:d9:7f:1e:d9:66:65:3f:2a:
39:6b:40:5a:19:9c:64:cf:12:cd:f7:9a:c4:15:29:
39:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:7E:F5:1A:B7:E6:22:E0:A8:F9:0B:05:1A:AB:A2:55:E8:B5:A1:E4
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:c4:25:bf:46:e7:1e:c4:bb:9d:93:0c:b6:c0:9d:13:5d:09:
61:7c:cb:10:2b:6c:fc:77:b6:56:77:b3:0c:b2:79:2f:9e:7f:
0e:d7:6c:ed:f6:cd:39:5d:c2:82:2a:8a:94:6a:d9:85:0e:f8:
52:d3:2d:2b:98:71:78:41:db:06:06:40:a2:eb:a2:75:be:a5:
9d:aa:c9:8d:bd:86:c4:dd:c5:be:18:af:ac:b2:44:1a:71:b1:
37:d4:45:12:dd:cb:ca:ff:f5:5b:e5:55:f7:a4:1e:dc:23:7b:
53:93:e4:d5:1a:be:b4:92:ee:dd:01:91:e5:3c:9c:e0:bc:0d:
47:27:a0:31:17:cd:c5:5e:34:2d:2f:d7:13:4f:95:14:ac:1a:
b0:cd:ca:e6:64:65:2e:c0:86:22:6b:58:b0:f8:0c:2f:25:02:
81:4c:d2:dd:52:e7:09:b7:33:3c:cd:d3:9a:81:4f:1f:79:db:
b4:3f:62:de:ac:ba:4f:f7:ce:ef:7f:d0:a1:e5:05:8e:d1:6f:
a6:f5:6d:e5:2c:20:f3:42:d9:05:64:df:13:ac:a1:ca:51:12:
c3:b2:c8:49:31:53:c0:48:7a:f2:cc:d1:fb:ba:b4:f8:64:8b:
0f:17:ec:cf:6d:68:87:59:bc:3c:2f:79:8d:e1:c7:3d:10:5e:
14:09:49:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:30:51 2026 by rpki-client