Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
File: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json)
Hash identifier: fOOtyX32oVhYi//a7heEbfEOEGZYqde0CD4FrPJ/EWI=
Subject key identifier: 41:04:D0:92:AF:D6:6A:71:CE:B8:B2:56:0B:C9:19:DA:BF:E4:E8:B8
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial: 019EC3377A6A6B24F6E84DFF6F851C34264A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
Manifest number: 0570
Signing time: Sat 13 Jun 2026 23:00:53 +0000
Manifest this update: Sat 13 Jun 2026 23:00:53 +0000
Manifest next update: Sun 14 Jun 2026 23:00:53 +0000
Files and hashes: 1: je_dZ3uZwgn_oNlxsf8-FTUq220.roa (hash: ypEWzWUb+UjYyAsZX+8LRu9EB7C2RkmFTCbcPYB408Y=)
2: pt1RHK2niClvZGTwHDZ-ZsdvbEk.roa (hash: /6TgV1nZB5u4zUl3iLf85GJmzgWJev9Zymtz9O1XUPc=)
3: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: JAJOxZtEAZ3QixSxB0G64upOSm2lBP18dMMqHVMfdGg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:37:7a:6a:6b:24:f6:e8:4d:ff:6f:85:1c:34:26:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
Validity
Not Before: Jun 13 23:00:53 2026 GMT
Not After : Jun 14 23:00:53 2026 GMT
Subject: CN=4104d092afd66a71ceb8b2560bc919dabfe4e8b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b0:f8:b5:9e:a0:42:c7:50:95:e6:53:67:3e:
23:98:d3:c7:23:5a:12:10:10:4c:62:52:45:c8:08:
eb:68:43:ba:cf:31:f3:01:a7:12:8a:a8:c0:ef:43:
2e:3f:d2:3b:32:9f:0f:bf:50:ac:85:8e:16:f0:5a:
0b:c9:6d:89:f2:da:70:82:d6:98:d9:91:a8:6e:8b:
4c:7b:c5:51:30:62:05:d9:c3:ce:97:01:26:56:75:
c1:a5:e9:6b:86:05:9f:00:7d:b7:cd:c5:19:f4:92:
54:91:0f:ae:08:a6:b0:68:21:e7:61:0b:25:bf:e3:
be:d9:a0:02:5f:b2:b1:e4:56:bf:0a:82:8c:1d:64:
66:39:37:61:06:d2:b5:5d:fc:4e:fa:cc:54:a9:6d:
4b:3d:0e:59:11:2c:dd:bd:d5:87:8e:32:35:84:ae:
d0:5d:7a:5d:41:77:b4:4e:d8:c7:4d:df:19:05:45:
86:31:f2:51:cc:3d:29:16:7d:f4:20:78:bd:65:b3:
e9:56:eb:f4:11:75:bc:af:57:8d:a6:d0:e9:c2:5e:
d2:db:27:a8:c1:3a:e2:16:8b:9d:c6:aa:eb:97:6d:
f7:f3:e3:dc:8f:09:9c:2a:ff:96:ee:94:29:8f:d6:
8b:de:89:9c:e8:3f:c8:32:8a:c7:0c:d6:e2:13:99:
f8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:04:D0:92:AF:D6:6A:71:CE:B8:B2:56:0B:C9:19:DA:BF:E4:E8:B8
X509v3 Authority Key Identifier:
keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:5f:47:be:e1:6e:be:a9:7d:9f:4a:2e:14:51:a8:96:60:89:
4d:51:9e:1d:84:c9:f4:0f:b0:7d:a2:7f:46:23:63:3a:24:43:
e9:f0:e1:1c:24:da:89:d8:ad:e1:a5:13:8c:b8:43:2e:19:92:
bb:2a:a8:f5:21:39:b1:92:10:c3:ea:1b:dd:f1:c9:14:0c:c5:
8b:31:a9:47:e2:38:01:41:96:2c:3f:41:17:03:a9:12:86:66:
b9:50:ec:5c:6e:a8:d3:51:4e:0e:1d:ff:0c:e6:95:44:1e:e5:
00:18:53:a3:ab:2b:cb:07:5b:a7:cb:dd:14:48:be:cd:39:59:
bf:e2:e2:a6:75:d5:88:6a:8f:29:18:e2:62:b4:d1:e3:9e:f9:
0f:2d:b8:ad:a4:e0:c8:ec:f2:3b:b9:b6:e2:c9:6e:a4:32:b6:
64:09:67:4c:a1:22:84:70:ac:75:45:d5:aa:40:2d:c2:8d:5c:
23:5d:79:5f:db:46:d8:81:c0:d5:57:34:96:8c:4c:96:ad:f7:
18:57:6a:47:bc:62:66:e4:a0:ce:e2:4a:29:d6:a0:df:c8:d1:
05:fb:98:6d:85:58:5d:13:6e:d0:19:77:c9:03:bb:18:71:77:
40:63:27:79:4e:cb:b2:7c:eb:5c:65:b7:58:7b:dc:b9:8e:03:
95:84:b1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:52:07 2026 by rpki-client