Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: pgal2drKe3izpEyfw5LkcdLPvLhtyGLmrpAefVKiaWI=
Subject key identifier: 40:AE:BE:79:5B:F7:AD:AA:0E:9D:05:F1:59:92:25:AB:1C:0B:ED:4B
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 019EC1EE0E60DA4566AC707C601EAE3AF036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 08E2
Signing time: Sat 13 Jun 2026 17:01:04 +0000
Manifest this update: Sat 13 Jun 2026 17:01:04 +0000
Manifest next update: Sun 14 Jun 2026 17:01:04 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: w+ntllOMiSEcho2seHTwsZi0TYmnKouKoCStY0ylPBc=)
2: xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa (hash: 4Tr8pcApL7OMPNYK6DHiqFf/BMOwe5lvOFY1rUx8z6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ee:0e:60:da:45:66:ac:70:7c:60:1e:ae:3a:f0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Jun 13 17:01:04 2026 GMT
Not After : Jun 14 17:01:04 2026 GMT
Subject: CN=40aebe795bf7adaa0e9d05f1599225ab1c0bed4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2f:92:77:14:b7:d0:3e:07:42:a8:06:84:28:
9f:ca:83:b0:fe:ec:70:e3:1e:70:89:df:e6:01:81:
ab:09:de:8e:a4:1c:d1:d7:28:f2:59:2a:ca:64:22:
76:9e:82:81:85:ea:7c:bc:e5:82:a5:32:4d:2c:a5:
d8:64:e7:6b:da:43:9a:f8:e9:0a:eb:f2:41:c9:31:
63:f8:20:41:23:fe:07:69:89:fb:24:e0:75:83:01:
3d:de:a6:33:3f:d5:1f:8a:f2:f7:42:16:a3:99:04:
fb:15:97:fd:dd:ab:fb:a3:0a:db:4e:2f:62:5b:b4:
0b:ab:fc:02:e8:b0:0a:be:83:9d:c1:6e:8b:aa:46:
91:98:10:61:45:bb:df:b3:8d:94:96:e5:9c:81:1e:
d2:0f:4e:11:f0:e1:73:1d:eb:2f:c0:15:62:de:3b:
25:b2:05:31:ca:83:20:70:0c:a3:5a:e1:c5:ec:b4:
7a:6e:58:c2:86:b8:b6:15:9c:2e:d5:89:84:c3:d5:
6e:ea:c9:37:63:7f:9c:46:53:9b:f3:a9:ea:b3:18:
e5:5a:09:c6:2c:92:fa:df:97:33:84:bb:43:02:87:
29:10:1f:65:2d:dc:bc:ea:29:75:66:68:32:41:84:
80:21:ea:aa:c8:90:34:31:d1:92:5f:43:14:8d:21:
6b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AE:BE:79:5B:F7:AD:AA:0E:9D:05:F1:59:92:25:AB:1C:0B:ED:4B
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ed:12:60:35:d0:a1:9b:72:38:83:16:a2:44:ca:5a:04:5c:
af:25:92:21:40:67:a3:3c:58:3e:5c:ae:df:35:c9:4f:a0:a4:
c8:53:f9:91:c2:71:62:42:93:59:05:27:df:4e:b9:92:ba:1f:
91:40:ef:03:8b:dc:8c:4b:32:8d:5f:e0:be:c6:15:38:cc:4f:
92:2f:68:19:63:0a:b3:76:2e:7a:43:e7:a2:4d:9e:19:7c:82:
34:7a:b1:03:13:64:cc:68:c5:6a:31:88:e7:8f:f1:4f:28:33:
d0:eb:25:b9:3f:f1:f3:cc:cc:cc:c3:cf:e7:22:b3:1d:5b:35:
30:6d:55:f0:cd:28:66:6b:7a:09:6e:ea:c3:cb:31:af:b9:47:
f6:d8:bf:e0:ed:6c:e4:fa:13:d5:77:47:b9:99:27:d2:13:08:
a8:09:20:e9:8d:0c:4b:47:a8:57:c3:05:c9:86:e8:a2:04:ed:
8b:bc:d2:c3:1d:68:97:b5:46:cd:59:27:6f:34:86:6c:83:88:
ff:64:b4:96:e6:8a:98:69:dc:ae:eb:a2:6c:13:7d:7d:33:19:
f7:d1:f0:33:d4:be:0b:0c:55:a5:27:db:23:6c:78:f5:6e:d8:
c2:48:d6:a1:1a:7b:bb:ad:86:0b:64:9a:a0:c3:f3:f2:d0:a7:
ba:01:d6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:44:45 2026 by rpki-client