Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
File: xDt0aX74sFcJ99OU0f4pUeidXFU.mft (raw, json)
Hash identifier: CjBi4P8ZjtFgcYHK7wHOgZ1CG0q3w9Bt8Asi/it2Wcs=
Subject key identifier: D2:57:67:5C:AB:7F:ED:73:57:9C:22:F3:28:69:A3:E3:43:A4:1C:57
Authority key identifier: C4:3B:74:69:7E:F8:B0:57:09:F7:D3:94:D1:FE:29:51:E8:9D:5C:55
Certificate issuer: /CN=c43b74697ef8b05709f7d394d1fe2951e89d5c55
Certificate serial: 019EBE48095AF06AC6212EDA0384F71C1DBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
Manifest number: 83
Signing time: Sat 13 Jun 2026 00:00:52 +0000
Manifest this update: Sat 13 Jun 2026 00:00:52 +0000
Manifest next update: Sun 14 Jun 2026 00:00:52 +0000
Files and hashes: 1: cdK-ddxQ6uw5AVK3VADEiG5b7xU.roa (hash: kzD188j7ogf+ogrfaYMQ1BaJogJz8brxVXslH2Z+iS8=)
2: xDt0aX74sFcJ99OU0f4pUeidXFU.crl (hash: TmmSHdnH7Oh34317mcJq4whWhi6K5SwV/XcGrZefPiM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:48:09:5a:f0:6a:c6:21:2e:da:03:84:f7:1c:1d:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43b74697ef8b05709f7d394d1fe2951e89d5c55
Validity
Not Before: Jun 13 00:00:52 2026 GMT
Not After : Jun 14 00:00:52 2026 GMT
Subject: CN=d257675cab7fed73579c22f32869a3e343a41c57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8a:15:4c:54:48:44:23:7a:54:d6:60:5b:dc:
e5:1f:6b:49:cf:b8:be:42:26:87:f3:45:ab:51:30:
1f:16:46:49:9f:56:64:74:3c:ed:45:42:e3:db:20:
1a:00:fa:f8:89:43:11:a3:f2:74:41:68:ee:64:a9:
8b:37:e6:4e:bd:25:d5:2c:7c:19:87:2a:ee:c5:45:
5f:84:07:5a:df:a2:c1:69:0e:5e:92:92:06:53:28:
44:5d:35:65:d5:e5:6f:ad:e3:d6:55:cb:8f:07:bc:
50:8f:12:b4:cd:80:05:d1:57:35:18:84:ef:92:bd:
bb:87:a7:a4:df:59:7c:69:6f:f7:52:09:17:2a:63:
82:5f:ea:6a:b6:7c:69:b0:dd:4f:06:d3:3d:3e:71:
61:9b:a9:ff:12:c9:09:06:a2:4d:d5:b6:da:bb:2e:
61:7a:d3:66:77:8a:40:40:bc:17:36:41:6b:79:0c:
7e:db:88:e5:33:c5:7a:ec:ee:da:46:f8:38:78:6e:
a4:76:8b:83:f6:0d:e1:8e:ae:17:6d:bb:38:66:4a:
4d:0e:9f:5e:72:c4:7b:7f:8d:f9:8b:00:1c:42:b2:
8b:f3:86:13:c2:2e:80:c1:b9:3d:4b:96:c8:f2:f2:
bc:f9:8f:6b:9a:5e:a6:2f:c5:58:b3:87:ab:c1:2c:
b9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:57:67:5C:AB:7F:ED:73:57:9C:22:F3:28:69:A3:E3:43:A4:1C:57
X509v3 Authority Key Identifier:
keyid:C4:3B:74:69:7E:F8:B0:57:09:F7:D3:94:D1:FE:29:51:E8:9D:5C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a7:7e:75:37:77:d3:45:7e:9c:ba:d6:4c:08:a2:b4:dd:98:
2f:45:87:a3:47:ef:26:c4:04:b6:31:1b:df:f6:0c:02:ba:9c:
e6:af:29:85:e4:b3:44:7e:24:f7:eb:05:29:a7:33:19:8f:bb:
fd:5b:df:a7:b6:da:83:12:2c:fa:78:01:70:8e:f9:6b:25:4e:
ce:1d:52:f6:e1:7d:8d:bc:c9:4e:52:50:e5:66:a9:c1:40:5d:
01:1a:71:bd:87:6a:1c:e8:02:02:0a:30:30:e0:58:a2:30:46:
d2:b8:47:70:f3:ba:0b:7b:72:f2:db:5c:e6:34:42:e1:c3:e3:
39:55:36:29:cb:f5:1f:99:06:76:af:2b:ec:5e:05:b1:54:98:
80:e7:fa:0c:48:90:3c:28:3f:1c:af:59:40:68:3e:08:66:e4:
8f:90:08:82:b1:e4:60:8c:da:25:a1:e3:29:2c:c4:40:5d:88:
4d:d5:08:6d:0c:de:07:9c:73:08:8b:33:f0:23:3d:e2:6d:34:
73:1d:95:a4:bd:eb:44:b8:c7:d0:c9:74:cf:58:23:24:9c:14:
00:62:00:1d:46:e8:70:98:5d:aa:60:09:59:06:f9:9a:98:a4:
35:7a:66:17:e9:8c:db:39:e4:96:89:1f:0c:d8:85:a7:c0:a3:
c0:79:34:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:06:09 2026 by rpki-client