Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: DU0TdM6RJNJa+eDPHyjUouPSPSvixm/B2Wo38uBMt+g=
Subject key identifier: BC:33:60:F7:E8:1A:65:28:90:87:D1:FA:81:FC:F5:B2:00:60:F4:E1
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 019EDD9C10510DC27B361EC8E8D9CD927B9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 196C
Signing time: Fri 19 Jun 2026 02:00:52 +0000
Manifest this update: Fri 19 Jun 2026 02:00:52 +0000
Manifest next update: Sat 20 Jun 2026 02:00:52 +0000
Files and hashes: 1: LXxDQYBI8a2bgUeaO6Um5RWeWus.roa (hash: eyN2GAZCoXjAEdKeBKmxr2YBtVYHGsGtrSqCUIPElRo=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: p8mjazqDu7x4BLbTgrgbDmVZrvtH2/I4LahFome/NEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:9c:10:51:0d:c2:7b:36:1e:c8:e8:d9:cd:92:7b:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: Jun 19 02:00:52 2026 GMT
Not After : Jun 20 02:00:52 2026 GMT
Subject: CN=bc3360f7e81a65289087d1fa81fcf5b20060f4e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:67:d0:e5:f9:d7:50:49:51:a7:79:26:36:
e8:ef:6c:7d:87:9e:cb:c2:d4:15:9b:1a:cc:ff:c8:
d1:b6:8d:d1:eb:30:3c:5b:bb:dd:01:b5:b1:70:7f:
bd:a0:c4:2f:ac:d1:15:70:c4:50:4d:8c:f1:17:83:
22:b2:fc:c0:00:a1:05:80:5e:db:0e:e3:72:17:43:
f5:af:04:fa:19:f6:cd:0d:98:cf:f3:15:33:c2:46:
17:d6:fd:00:5b:4c:50:ea:26:cb:55:b8:6b:ed:15:
06:52:8a:de:12:28:39:13:ab:6b:60:5a:22:b5:77:
75:26:1c:c1:bb:a8:ee:e7:8a:b9:6f:b3:47:fd:04:
87:19:c4:b8:27:83:bf:00:44:cf:2d:3a:47:2d:1c:
50:36:e9:06:22:d2:a1:b5:ca:05:7e:96:94:9a:b0:
ce:22:dd:a3:fe:8a:c4:b5:21:5d:12:49:c5:83:94:
dc:49:89:15:12:96:38:1d:3d:97:9a:0c:11:c1:f2:
45:67:31:9f:af:45:a8:a3:5e:3e:f5:48:1e:7a:e5:
c8:2a:21:c7:3a:d8:36:eb:e2:a4:31:16:7b:a6:8b:
bb:ff:8f:e6:47:f5:07:e5:6e:86:57:2a:42:2d:a9:
23:15:50:98:78:94:61:f9:31:8f:e3:80:b6:53:eb:
e6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:33:60:F7:E8:1A:65:28:90:87:D1:FA:81:FC:F5:B2:00:60:F4:E1
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:1d:a7:a1:d8:cf:20:8c:a6:1e:b6:f8:38:84:a8:4c:fe:7f:
ea:95:43:90:10:94:7c:3d:b3:89:4a:20:bc:50:e8:a3:de:b2:
35:56:18:c7:15:6b:ee:ef:54:38:d9:2b:55:83:b2:3c:4d:68:
d5:d7:49:47:48:95:82:fe:66:ff:c8:0c:5c:e6:33:40:26:ca:
3c:09:87:ba:14:e6:72:1a:ad:5b:3a:c0:4c:36:29:42:b1:31:
be:d4:58:16:70:31:21:d4:33:b5:2e:e9:99:59:12:bd:77:96:
29:03:a5:ec:b3:10:57:7b:0a:fe:d0:50:63:04:27:36:dd:77:
d9:02:81:c8:a2:61:12:df:91:a9:be:fc:4e:04:50:0a:8c:7d:
7d:4e:87:4a:4f:7c:75:55:72:9c:16:27:b9:d0:c9:52:9f:77:
b7:ce:ad:db:21:ca:0f:15:28:5e:ab:3a:2c:bf:bf:db:9c:f0:
ae:30:de:da:03:60:69:6c:87:7a:5c:47:c8:da:4a:49:12:b1:
b8:fe:4e:d6:23:42:e5:4a:f4:f4:8b:93:eb:d3:3a:38:d1:e4:
08:78:5d:05:c1:e2:59:b9:ed:e3:c1:7a:06:0a:5e:15:6a:18:
7b:62:44:a8:75:0f:c9:c9:7f:56:23:21:64:84:4a:21:50:ad:
7b:40:59:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:22:02 2026 by rpki-client