Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
File: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft (raw, json)
Hash identifier: +t5b7W1ymfcx6pGjRIuufomq+h7YptAXt/RjjSx2tps=
Subject key identifier: 1B:D9:57:FF:D3:E3:5E:BF:63:DE:EF:BA:82:CA:61:8E:DF:EB:E8:81
Authority key identifier: C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
Certificate issuer: /CN=c679522eb892589d7364af579a724040e929f0aa
Certificate serial: 019EC1B72BB529149AD7B5492F25A537B6E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
Manifest number: 1674
Signing time: Sat 13 Jun 2026 16:01:07 +0000
Manifest this update: Sat 13 Jun 2026 16:01:07 +0000
Manifest next update: Sun 14 Jun 2026 16:01:07 +0000
Files and hashes: 1: I-G0evMv-W7tENceyq5-skj-8AE.roa (hash: 0oUsrZrwTBnL45zRT8Ja0q/9Hr2Qx4L4ROr/jwER66I=)
2: WfkhMRx1wTZYcucf2qwTH45YfJU.roa (hash: ne29/g3IaHLU5Kezd9KD2anObeKvyRSWNiQhh2XNOoE=)
3: xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl (hash: yr9WMuFV3ctSP1F+/pplp/nrzklHgidH0iqXji6KvPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:2b:b5:29:14:9a:d7:b5:49:2f:25:a5:37:b6:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c679522eb892589d7364af579a724040e929f0aa
Validity
Not Before: Jun 13 16:01:07 2026 GMT
Not After : Jun 14 16:01:07 2026 GMT
Subject: CN=1bd957ffd3e35ebf63deefba82ca618edfebe881
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d6:d0:1f:21:4d:d9:94:41:ba:c3:27:0d:7d:
0e:5f:6b:54:da:c8:81:37:8c:be:a2:d1:80:f3:fb:
ef:97:1e:67:86:1e:87:bc:ca:f4:c0:18:1c:80:b0:
d8:c3:0a:ed:5e:3f:86:73:1c:3e:9f:52:3c:3a:17:
ef:e6:63:4a:b2:25:aa:fc:4d:32:5e:66:9d:53:f1:
f5:c3:52:b6:a9:91:47:e9:51:47:dd:6c:8d:e0:4d:
da:57:9a:8e:a2:b9:e8:fe:c5:2c:8a:b6:7e:3b:f7:
d4:c1:1c:31:d6:89:22:7d:0c:6d:6e:4a:49:d1:52:
ea:43:00:1f:f5:94:ae:0e:0a:82:39:a8:f0:7c:e5:
39:57:31:fa:50:9d:c2:73:57:a7:3c:c5:2d:c5:c4:
66:96:c5:f0:ac:01:e8:6c:3a:57:e6:c3:ae:a2:85:
c8:c4:bb:61:69:53:e3:fe:18:04:39:ce:9f:b7:eb:
8f:a9:21:db:ad:fb:44:95:35:77:6e:59:6d:c1:42:
d3:41:69:92:6c:76:4f:85:99:3d:6b:98:3b:dd:31:
cb:97:b8:a0:cc:6b:f9:3c:0b:6f:3d:fb:32:7b:a6:
7d:2c:12:13:96:ee:38:28:6e:a2:69:d8:00:12:75:
01:b8:21:7d:68:81:da:63:14:d4:ff:35:23:84:1a:
bb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D9:57:FF:D3:E3:5E:BF:63:DE:EF:BA:82:CA:61:8E:DF:EB:E8:81
X509v3 Authority Key Identifier:
keyid:C6:79:52:2E:B8:92:58:9D:73:64:AF:57:9A:72:40:40:E9:29:F0:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/45c981-1780-4c66-9f98-dc10d5d3bd80/1/xnlSLriSWJ1zZK9XmnJAQOkp8Ko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:02:63:5c:d9:23:68:9e:3d:d8:fc:35:1e:86:cb:11:fc:58:
6a:71:07:59:09:b7:62:66:85:d0:0e:76:86:60:fb:a5:8b:05:
1c:83:8e:d7:1c:6d:4c:0f:c5:bf:b5:20:a6:bd:00:96:e5:61:
24:fd:5d:e6:a5:e0:f5:9a:aa:f2:cc:b8:e2:3b:3d:b8:d5:ee:
f9:97:45:6f:69:bd:81:de:8f:60:04:57:7b:72:1e:52:19:b4:
10:bf:86:bb:e5:7d:3b:99:8f:18:3b:48:b3:08:7e:f6:ae:2d:
4e:61:7e:da:da:ad:d4:21:de:5a:ec:82:53:97:1e:f7:2b:ca:
3d:26:d7:9b:cc:c5:5d:4c:a8:03:c6:3e:eb:af:0f:77:be:9b:
94:41:6c:f6:17:5c:9d:4a:3e:ff:c4:b2:8c:a2:3e:25:e9:e3:
74:1a:c0:5f:c6:dc:ad:75:2b:82:fd:e6:69:21:e9:9e:7d:8d:
29:80:ec:b6:43:d0:b3:88:8e:a7:83:86:e5:55:74:63:3c:8c:
da:2b:b3:85:08:2c:97:6e:0d:5f:04:a7:a0:c3:ad:d4:6b:68:
67:cd:c5:1e:42:72:fa:5b:26:f4:53:99:c3:c2:31:ed:29:8b:
16:f7:43:69:15:2c:4f:b1:df:df:fa:0a:bf:21:8f:60:76:ee:
3a:51:8a:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:08:07 2026 by rpki-client