Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
File: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft (raw, json)
Hash identifier: G0bugV2FR1GzNlKHrOGWkTrMhsjEnnesP38fOrJfJTM=
Subject key identifier: 9D:54:AF:40:3D:EE:02:39:35:4B:C9:CE:31:B6:3B:2A:DB:DB:34:D4
Authority key identifier: 5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
Certificate issuer: /CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Certificate serial: 019EC14879DB053EEB6FB4037E13B10D03AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
Manifest number: 0F40
Signing time: Sat 13 Jun 2026 14:00:12 +0000
Manifest this update: Sat 13 Jun 2026 14:00:12 +0000
Manifest next update: Sun 14 Jun 2026 14:00:12 +0000
Files and hashes: 1: Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl (hash: ooZGCc0EeP7wZsVEIvwx2i/mVPds0bOLS0Gt1gwV4wo=)
2: qvDZMPgKFD7gi5Q44AZYhiZ--Ig.roa (hash: cmgO04c2D3BrRGS4WvX7cY6GozgnK7NT0TwhEs+74Kg=)
3: uKoRxEv3mOldDEo6fDHAk9yg0S8.roa (hash: 4hEUcG83yfbcyvkKT/jDeEV25ZBIHXMO6CdGZ2yW5wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:79:db:05:3e:eb:6f:b4:03:7e:13:b1:0d:03:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dedd6b0e36f4bd8f1d57e26cc1c2d18c6993c04
Validity
Not Before: Jun 13 14:00:12 2026 GMT
Not After : Jun 14 14:00:12 2026 GMT
Subject: CN=9d54af403dee0239354bc9ce31b63b2adbdb34d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cc:28:65:8b:19:ce:cc:ae:00:95:7a:72:75:
e1:b8:b1:b2:eb:e0:05:50:9f:54:3b:15:0d:cd:8d:
b0:6a:a8:ef:12:43:fa:16:99:79:99:41:1a:d4:97:
96:2a:38:95:b7:f1:9b:37:6c:98:1d:8d:ea:33:3f:
b9:f3:e9:ba:49:35:17:70:44:96:28:19:95:e7:95:
34:6d:17:ed:27:2f:0f:57:da:d0:e0:24:1b:d3:21:
80:db:99:dd:47:43:05:a0:58:9d:c0:a3:0b:10:38:
26:c4:26:82:cd:6c:08:4c:6e:7d:a7:2e:87:14:ba:
32:98:29:16:bc:c0:07:33:7f:b8:a3:03:68:c7:27:
de:a5:bb:58:ff:54:c5:d3:c2:41:39:cd:db:e1:33:
de:fc:71:8e:26:cb:d0:49:94:89:76:60:e8:60:d5:
44:6a:db:ec:2c:48:77:8a:3b:59:10:3b:2f:22:44:
7f:c2:e3:28:c8:21:fa:76:c9:46:f0:19:99:0d:b8:
0a:3c:ff:b9:c5:27:0b:bc:50:7f:35:9d:d7:83:0f:
26:2f:2f:d1:54:7b:5a:3d:ff:d8:f7:93:20:37:a0:
3a:37:da:01:9d:90:a7:14:06:46:a4:ee:2d:dd:a4:
5b:53:95:a5:d0:76:84:5c:03:7d:04:42:46:a9:e7:
7c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:54:AF:40:3D:EE:02:39:35:4B:C9:CE:31:B6:3B:2A:DB:DB:34:D4
X509v3 Authority Key Identifier:
keyid:5D:ED:D6:B0:E3:6F:4B:D8:F1:D5:7E:26:CC:1C:2D:18:C6:99:3C:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/f03cdc-2945-408c-8889-c69871f5d305/1/Xe3WsONvS9jx1X4mzBwtGMaZPAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:03:c3:20:e1:c6:c6:bb:c9:1a:01:65:3b:ac:0d:2e:b7:eb:
a1:f9:ce:20:34:3d:34:a9:b7:c5:19:c4:93:7a:e7:20:31:26:
65:f0:c4:ae:77:9d:80:0d:82:c8:20:74:21:9a:72:77:c0:b0:
d9:9f:4e:d7:79:3f:19:d0:e4:c9:5f:93:77:17:99:57:0d:8d:
0a:39:47:ef:fc:1a:5d:4e:2f:ed:7e:85:01:5e:b7:9b:92:5b:
9b:c3:36:b7:16:54:74:5d:4a:82:11:83:14:90:65:9d:44:f9:
ac:cc:3a:63:f6:90:e7:4a:7a:74:b1:9e:b3:ca:ac:51:bd:c1:
54:3f:56:28:84:57:a9:ab:75:b3:ce:a1:e7:af:0b:8a:14:99:
7b:ed:1c:ec:3b:63:c7:39:fb:a9:e1:66:95:9b:25:2a:f4:f5:
73:f2:de:a0:fa:0f:8c:64:ae:a0:07:80:0a:b6:da:e3:59:70:
cc:b2:08:14:d7:12:2d:7c:ab:d4:c0:d9:68:ae:c2:46:1a:f8:
9b:46:b2:d2:d4:d5:80:d0:3d:83:41:82:cf:1f:b8:32:db:15:
2b:dc:49:54:09:8a:6d:45:87:f8:24:c9:ad:af:7e:a8:71:ee:
10:31:af:0b:88:09:2b:51:95:6a:97:06:7d:be:25:10:34:0f:
b3:86:0d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:54:22 2026 by rpki-client