Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
File: x-2m5S-HeWCp4PvJPmg_5khKawQ.mft (raw, json)
Hash identifier: mw/qexIDDKMs9fXL1cXAsHpnYPdL8Ix4tuEOM9orT6A=
Subject key identifier: 2D:46:9C:62:FE:91:28:92:85:B2:B0:C5:38:48:C0:DC:7B:15:5B:85
Authority key identifier: C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
Certificate issuer: /CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Certificate serial: 019EC4130563DC69DAD6A97A732C0FBA7C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
Manifest number: 195C
Signing time: Sun 14 Jun 2026 03:00:41 +0000
Manifest this update: Sun 14 Jun 2026 03:00:41 +0000
Manifest next update: Mon 15 Jun 2026 03:00:41 +0000
Files and hashes: 1: XZNXCKIqVDgpPc7kS3zYiOP2yVE.roa (hash: rxN9jO9dfAmhC4tVQzEusEgOoOYY+A90wdSvN0MmV5g=)
2: x-2m5S-HeWCp4PvJPmg_5khKawQ.crl (hash: DAN+rlsSv8E8NDfksFj5PN6ZBAsuZdgBpVPQBjSZzfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 03:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:13:05:63:dc:69:da:d6:a9:7a:73:2c:0f:ba:7c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7eda6e52f877960a9e0fbc93e683fe6484a6b04
Validity
Not Before: Jun 14 03:00:41 2026 GMT
Not After : Jun 15 03:00:41 2026 GMT
Subject: CN=2d469c62fe91289285b2b0c53848c0dc7b155b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:f2:c0:5a:1a:7b:0f:16:19:90:4c:76:c3:
bd:82:89:e0:6a:a2:d4:ae:44:db:85:9f:49:d5:cb:
3f:26:0f:5c:b7:a2:b4:97:f7:fb:09:5b:50:0a:47:
43:8b:a6:3c:72:cc:92:39:42:9f:85:c2:f3:c1:b0:
75:8f:af:17:81:18:bd:9f:df:90:66:de:31:f2:8c:
2b:93:92:57:bd:9a:57:07:84:0c:26:05:3f:57:80:
8c:07:23:09:12:c2:fd:d9:91:17:0b:c5:2d:15:45:
f9:d1:0d:4c:bd:e6:1f:03:ed:78:ef:30:6c:71:b5:
9f:d0:de:16:ed:ee:7c:e8:e1:88:94:cb:49:b7:44:
80:1f:4e:5d:09:31:26:bc:81:23:42:0a:f1:ef:10:
62:25:6e:9c:af:98:3b:b7:74:13:74:53:ea:b6:a4:
10:b8:d3:4c:bb:27:a1:59:d6:3e:39:57:e5:f6:17:
c0:08:2f:4a:67:7b:89:38:15:ea:6c:85:cd:fb:0c:
14:7c:11:f8:73:60:be:d6:e5:b3:f2:1c:d0:95:3a:
ef:5b:e1:3b:7e:52:35:fc:b5:e7:97:e1:6a:08:b6:
c0:71:c1:41:b8:4f:79:b5:09:39:ea:45:8c:53:88:
67:9d:5d:58:78:40:c6:42:b8:62:be:86:95:f4:50:
dd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:46:9C:62:FE:91:28:92:85:B2:B0:C5:38:48:C0:DC:7B:15:5B:85
X509v3 Authority Key Identifier:
keyid:C7:ED:A6:E5:2F:87:79:60:A9:E0:FB:C9:3E:68:3F:E6:48:4A:6B:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-2m5S-HeWCp4PvJPmg_5khKawQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/b6db36-cf86-4172-8dd2-e5fd91d13950/1/x-2m5S-HeWCp4PvJPmg_5khKawQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:8d:57:be:c0:2e:81:a9:09:c3:95:81:22:c2:84:ed:e0:f9:
fa:ff:70:d2:d3:32:73:84:3f:ec:e4:3e:52:79:ed:9b:7a:5f:
96:e8:c6:ed:3c:cb:b7:c0:8e:c7:fb:31:1a:04:40:f7:30:05:
3b:de:ee:92:5d:e8:66:3d:90:70:48:d9:dc:1b:8c:96:37:b6:
c1:1f:3b:ba:d4:11:10:26:85:9a:0d:e8:a5:40:31:d2:75:f2:
81:0d:e7:ff:74:1f:25:6a:15:e1:8e:57:10:67:ce:68:57:f0:
9b:46:0d:8a:1a:bd:18:dd:93:17:47:89:f0:c9:d3:47:ba:94:
fa:7e:73:95:d5:bc:75:bc:ea:8c:fa:cb:3e:46:8e:11:08:d3:
95:0a:61:8e:c4:a2:05:01:b7:26:08:8f:20:cb:a8:2e:ea:70:
da:d4:80:f7:f2:d5:ef:68:51:d2:54:1d:39:ca:44:de:8c:9d:
8b:df:e7:0f:8e:03:f2:a8:0b:88:66:b3:f1:32:81:d7:03:06:
87:89:3e:ae:eb:db:4c:b7:89:26:5c:06:df:af:7f:23:50:3f:
2d:36:a4:9e:81:17:78:db:8f:e6:0d:17:3a:2b:b5:63:4d:b3:
e3:ac:67:c1:bb:c7:4b:13:f4:50:d7:60:3f:f8:79:f3:cf:32:
b9:ad:97:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:55:17 2026 by rpki-client