Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: faeDzj1xDJMxhoZx9/X5Y99tXKUvgc7DItw8HijwffE=
Subject key identifier: 77:12:B5:39:23:C1:9D:5A:6E:5B:85:05:00:A2:9B:E1:B4:93:EC:9E
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 019EBF913FBC119C34BD717DD2D5328BABA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 06:00:27 +0000
Manifest this update: Sat 13 Jun 2026 06:00:27 +0000
Manifest next update: Sun 14 Jun 2026 06:00:27 +0000
Files and hashes: 1: jbS8RSSk1qPuBMHXiz0NFlG5gaU.roa (hash: ffpPuQq0nfWr1B/H6xQP1tfUAtvyoDxPWUAq5WEIXy0=)
2: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: QEXwoAil9UkpS9MYQCjlKER0eOZF3TBdUsSMhbwsCj4=)
3: xo3E7B75wnW1W3d1HJPhSZevYZA.roa (hash: PthsrXu6VgY7H1QeefirkpT9auw29AQ4kvdF+HY+Frc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 06:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:3f:bc:11:9c:34:bd:71:7d:d2:d5:32:8b:ab:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: Jun 13 06:00:27 2026 GMT
Not After : Jun 14 06:00:27 2026 GMT
Subject: CN=7712b53923c19d5a6e5b850500a29be1b493ec9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:e4:03:bb:70:5b:10:c6:40:91:17:67:45:7f:
18:2a:4b:89:41:ba:a2:b0:ac:f5:69:12:e7:59:62:
b2:34:9b:08:92:51:72:d9:89:55:74:bc:31:84:cf:
b6:12:d2:84:d8:16:92:24:a2:24:c2:59:18:4f:10:
b6:a9:61:1c:55:b4:26:03:de:65:56:99:f8:10:64:
57:f5:85:cb:e1:d6:f6:56:4c:cc:ef:38:9d:0d:c7:
4f:73:fd:00:03:92:14:94:c4:42:c9:3a:6c:36:dd:
4e:b8:18:42:21:ee:ee:ca:22:a9:d0:50:d3:7f:b9:
82:b6:f0:e3:6b:a0:c2:e6:2c:85:f6:1c:26:93:2d:
9d:f8:f5:9f:a0:42:4b:a1:fe:5a:e5:01:b0:ac:6a:
54:c3:21:da:c7:5a:b6:17:3c:51:f7:e1:0d:5b:52:
5a:25:32:04:8e:35:86:fa:04:61:b8:87:af:68:fc:
70:57:c8:8c:b5:bf:1a:ab:a6:f6:f0:75:97:67:a4:
44:a2:eb:4f:18:a3:e5:5e:a6:82:48:c6:db:c8:c0:
07:f0:ab:08:50:e4:33:13:4c:d7:a2:a9:4d:4e:b2:
3e:72:b9:84:ba:51:61:12:92:7e:3c:50:05:2c:51:
c7:dd:64:9b:3b:0c:89:4f:8c:18:91:0e:e3:97:81:
c0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:12:B5:39:23:C1:9D:5A:6E:5B:85:05:00:A2:9B:E1:B4:93:EC:9E
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ac:86:07:4b:e3:77:f5:3e:45:0e:f2:f4:86:87:32:43:f5:
0b:ec:1a:b8:10:e3:ad:6c:c6:9c:f2:25:8b:e1:fb:9b:8b:df:
c6:bd:63:3e:2a:f1:65:34:23:bd:68:50:f7:e6:6e:eb:fe:eb:
3b:ba:61:0c:05:f1:85:cd:57:41:68:c2:72:10:94:8f:ed:e4:
44:a1:96:0b:fc:f4:37:f1:e4:3c:d6:86:52:7e:35:8d:25:de:
3b:ee:fc:d8:ac:e5:ab:c4:d7:73:0c:4f:2d:dd:09:d2:87:d9:
4b:2e:e9:46:12:07:b4:81:c4:94:6f:b8:7b:24:08:92:e2:de:
e1:42:9a:17:76:9f:02:15:bb:01:82:24:2e:08:c3:39:30:ab:
fe:7d:92:de:54:c4:d7:73:7d:c1:aa:77:05:2a:59:4e:da:f5:
be:de:58:c2:bf:b4:60:8e:7d:17:b8:5c:d1:e8:fc:44:b6:92:
e6:f9:da:74:28:71:02:0c:3c:ea:7a:23:90:1c:ea:7f:a4:c4:
f1:af:89:25:35:d3:ea:5b:4c:a8:54:41:67:40:b6:81:ec:dc:
a9:f7:be:1d:0d:94:2f:f3:a4:ba:9c:17:df:9e:05:77:1a:dd:
08:3f:43:c6:06:2b:06:3a:80:d3:78:a8:5e:17:1d:cb:b4:66:
48:cc:cd:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:41:47 2026 by rpki-client