Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
File: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft (raw, json)
Hash identifier: aO4pTz5Zfo9XTriBUfhDyEnM33+8q1d8u1oOi/7c1Aw=
Subject key identifier: F1:1A:D7:69:31:CA:4C:17:9F:9D:14:27:C9:05:D7:A2:18:84:53:F1
Authority key identifier: C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
Certificate issuer: /CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Certificate serial: 019EC224C021D89919363DB758812E4CA4CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
Manifest number: 09AE
Signing time: Sat 13 Jun 2026 18:00:48 +0000
Manifest this update: Sat 13 Jun 2026 18:00:48 +0000
Manifest next update: Sun 14 Jun 2026 18:00:48 +0000
Files and hashes: 1: 5Qm3w6W4KV4G70UEua6vpofuK3w.roa (hash: 7gjCA6HtXiqMWysrEHmsQXBLEFr30GX2eXmg9EbiYCA=)
2: mI3qnrq6SLm_VsmkKACilXewKTo.roa (hash: Q4wc/dtQ8g68gQZvC3Ka6nudxiroE6HA9EnDTB3krUA=)
3: xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl (hash: 9Lpyl4ZPpwvcCcThfOtqZWOEJ30SAZa/qtyN6gRaNmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:c0:21:d8:99:19:36:3d:b7:58:81:2e:4c:a4:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61850173c8d28d5afbf91091ca63e5da3c75ed4
Validity
Not Before: Jun 13 18:00:48 2026 GMT
Not After : Jun 14 18:00:48 2026 GMT
Subject: CN=f11ad76931ca4c179f9d1427c905d7a2188453f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:09:1b:ff:02:af:15:1e:fd:83:34:bf:02:c4:
c7:a1:a4:49:57:6d:14:62:80:96:a7:8c:c3:d7:a8:
9f:78:1a:ca:e0:c9:96:18:bf:2e:a0:ac:b8:d3:04:
ba:b1:3a:f1:32:40:53:2e:c7:9d:bc:09:ff:5f:39:
eb:fc:39:b7:09:4f:91:c1:23:e6:71:25:73:45:24:
7e:86:c5:42:26:b7:a9:4c:a8:12:d6:bb:28:32:a3:
44:f2:ab:2f:85:c0:70:c6:77:ab:69:d1:16:eb:21:
6a:ca:ab:b0:01:0f:8f:b5:a9:35:46:38:2e:ed:22:
92:61:6d:3e:85:cd:be:b9:65:0b:13:57:b2:04:05:
db:45:eb:00:56:ca:81:01:98:a8:f3:20:be:0b:57:
a0:36:90:e3:89:b4:1b:d7:28:41:81:54:6f:6e:c9:
bb:b0:6a:cc:5a:fd:a3:3f:ec:b8:d2:ce:52:e3:c3:
3d:ec:45:87:d1:5a:2f:f3:47:5f:4d:67:a9:39:09:
c6:2e:de:72:45:7b:0f:b0:15:58:ea:01:94:c1:12:
d9:da:ff:ac:8f:c5:d3:6d:a1:2a:a6:71:9e:c2:14:
49:07:03:45:3d:0a:99:47:45:c8:87:4b:17:ac:9f:
ea:ff:ca:24:67:f5:29:fd:7d:72:41:81:48:c7:c2:
04:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1A:D7:69:31:CA:4C:17:9F:9D:14:27:C9:05:D7:A2:18:84:53:F1
X509v3 Authority Key Identifier:
keyid:C6:18:50:17:3C:8D:28:D5:AF:BF:91:09:1C:A6:3E:5D:A3:C7:5E:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/ee09f1-7d0b-431f-aaee-bb8debc00388/1/xhhQFzyNKNWvv5EJHKY-XaPHXtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:3d:ae:f6:66:09:61:35:97:3b:ae:8d:65:e4:c8:01:bf:96:
99:42:71:ca:0d:ba:b7:1b:e8:bc:1a:0a:4f:2e:7f:08:27:2c:
19:18:74:fd:52:10:53:52:e8:30:27:84:41:e0:77:1f:c7:bf:
54:a4:7c:18:bc:5f:cb:7a:06:b1:8d:fe:44:9d:1e:b5:60:a2:
65:79:c5:c4:48:53:88:14:e0:28:7c:d1:d6:79:49:13:9a:bc:
69:68:93:2b:c4:e2:ac:51:bc:58:06:58:9c:45:35:20:99:fc:
58:5f:eb:cf:34:f4:75:97:12:e0:73:cd:29:6b:fc:8e:51:cd:
7e:40:a7:0e:03:cc:e9:45:09:51:f4:a2:b6:8f:68:23:50:ba:
ad:d1:e5:6e:cb:01:38:27:3a:64:cc:9f:b8:3b:df:b1:9c:ed:
6e:de:f9:6c:d1:d7:06:2c:51:c2:61:ca:1f:3d:03:99:1a:23:
9f:6a:38:fd:5b:3a:ea:2e:28:f2:cd:68:10:cf:8c:90:33:04:
74:c9:c2:b1:bf:99:cd:80:e9:d0:52:9b:f4:87:ee:68:10:9f:
c5:b1:2e:91:f1:82:05:18:0c:62:3d:68:40:78:4d:01:78:a9:
45:f3:95:a4:24:cd:8d:ac:dd:bb:74:21:6e:71:8d:01:f3:04:
ff:0f:14:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:42:42 2026 by rpki-client