Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.mft
File: xHC41L-HFAS8pTx3gVME7y6k4co.mft (raw, json)
Hash identifier: BekAj5qs+B4Ti7FWXOIlDzwM56TWUcI2XqBTshimP80=
Subject key identifier: 4B:E6:15:DB:79:44:23:25:19:A4:CE:33:C5:F8:75:73:71:CA:EF:FD
Authority key identifier: C4:70:B8:D4:BF:87:14:04:BC:A5:3C:77:81:53:04:EF:2E:A4:E1:CA
Certificate issuer: /CN=c470b8d4bf871404bca53c77815304ef2ea4e1ca
Certificate serial: 019EC0DB9E13B5B49FF63E0E1D562307877F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xHC41L-HFAS8pTx3gVME7y6k4co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.mft
Manifest number: 0340
Signing time: Sat 13 Jun 2026 12:01:18 +0000
Manifest this update: Sat 13 Jun 2026 12:01:18 +0000
Manifest next update: Sun 14 Jun 2026 12:01:18 +0000
Files and hashes: 1: DnR3n06izuqiF0c6QLmB63bhByA.roa (hash: wXx/mCp3Tb5hj1tTLAH162/y2WEyBpkE4oI2Qluv1II=)
2: xHC41L-HFAS8pTx3gVME7y6k4co.crl (hash: UpzlY+7gHNcRmRB7ZXdeQ8p3AQYRs+jLU9YDus3jnOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.mft
rsync://rpki.ripe.net/repository/DEFAULT/xHC41L-HFAS8pTx3gVME7y6k4co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:9e:13:b5:b4:9f:f6:3e:0e:1d:56:23:07:87:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c470b8d4bf871404bca53c77815304ef2ea4e1ca
Validity
Not Before: Jun 13 12:01:18 2026 GMT
Not After : Jun 14 12:01:18 2026 GMT
Subject: CN=4be615db7944232519a4ce33c5f8757371caeffd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:15:d5:f0:04:2b:85:8c:0b:c5:b9:3b:37:af:
73:86:9c:49:54:09:ef:93:fb:9d:29:b2:58:5c:bd:
4a:69:59:ef:9f:ba:47:51:55:23:c6:54:06:c9:b5:
2a:33:2c:c7:35:70:6c:37:2f:d7:02:dc:f4:b3:68:
db:18:3b:43:cb:80:b4:cf:81:c6:db:3f:56:9f:52:
22:34:3f:e3:0a:0a:77:62:6e:36:17:82:d1:ab:39:
e2:92:13:ef:32:70:c3:42:86:23:00:5e:72:7a:bd:
1f:b8:91:8b:d4:e2:e0:da:8c:d8:3c:62:0f:09:27:
fb:47:05:42:d6:2f:85:dd:18:b0:3a:e9:79:c4:c4:
36:60:9f:43:8e:b6:44:17:c7:c9:17:a7:49:f1:2e:
0f:99:1f:a0:9b:71:4e:cb:56:66:d7:54:58:db:4b:
92:fb:32:1e:c7:82:e8:5d:c2:7a:f5:9d:12:0e:9e:
7f:9e:af:de:00:c0:28:c7:ec:2b:45:b4:c4:d5:53:
cb:b5:2c:5c:56:34:5a:6c:b6:d3:97:c0:b6:52:25:
59:d2:0b:e5:af:70:5c:3b:ca:9a:fd:fc:55:e9:41:
4c:bc:cb:2b:79:8e:2e:1c:f6:3e:bf:e1:cd:c7:e7:
14:a6:ff:4d:ea:8c:7e:ad:3e:63:ba:ab:27:a3:d6:
97:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:E6:15:DB:79:44:23:25:19:A4:CE:33:C5:F8:75:73:71:CA:EF:FD
X509v3 Authority Key Identifier:
keyid:C4:70:B8:D4:BF:87:14:04:BC:A5:3C:77:81:53:04:EF:2E:A4:E1:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xHC41L-HFAS8pTx3gVME7y6k4co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a4ba8f-5e61-4dcc-ba0b-f624ed5f46fe/1/xHC41L-HFAS8pTx3gVME7y6k4co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:9d:d5:f8:6b:ca:d7:f1:a2:2c:cc:f5:54:d7:70:71:ac:4d:
63:65:1b:7d:2b:0a:65:24:cb:50:8c:92:87:2f:08:19:68:24:
0c:65:e4:41:bc:2e:d1:6f:12:05:4d:23:2a:bc:3d:23:3c:49:
5d:6b:88:a1:a6:1e:f4:e0:93:3a:60:e9:b9:f8:49:13:a6:7b:
a4:3d:66:e7:7b:37:28:0b:0a:c0:1b:6f:6b:fe:c9:8a:99:19:
64:80:53:22:f6:e7:d6:e4:9c:39:49:62:3a:db:b9:a4:ad:b9:
5b:69:d3:7d:92:5b:e9:a4:f1:37:54:59:97:c7:dd:97:60:7a:
76:fd:5d:3f:f6:37:c7:52:0d:a7:c9:3a:b2:32:04:06:04:7d:
06:65:a7:37:73:17:85:96:0e:bc:70:9d:12:79:c9:a1:cf:cf:
f0:50:8d:4b:49:80:a9:7f:b6:4a:8c:07:f3:40:53:a6:aa:ce:
d9:d2:22:24:7a:9e:56:24:b4:9f:6a:eb:e9:46:a4:0b:e9:a2:
e0:f6:9e:f8:e5:23:65:6a:e5:63:d4:a3:bd:0f:b0:ac:82:c8:
d4:7a:73:f9:ba:dd:75:a7:69:f4:c6:88:ec:48:5e:b6:38:18:
57:f4:f1:81:79:46:6d:91:42:09:b6:7f:1f:28:27:57:f7:c4:
07:7a:13:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:15:03 2026 by rpki-client