Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
File: xWYvmAINpON9UO07swICd08pLXo.mft (raw, json)
Hash identifier: A3J7WfZM1z184Fl2Mdpt7YXqhKNM85RwMBqd9c3sR9g=
Subject key identifier: BE:2D:87:AA:4D:22:19:FC:C1:E9:FA:F5:74:50:DD:0C:41:FA:00:29
Authority key identifier: C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
Certificate issuer: /CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Certificate serial: 019ED3192A77DCB90C00F39C27F38A57CAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
Manifest number: 05B8
Signing time: Wed 17 Jun 2026 01:01:42 +0000
Manifest this update: Wed 17 Jun 2026 01:01:42 +0000
Manifest next update: Thu 18 Jun 2026 01:01:42 +0000
Files and hashes: 1: dqdPAo7SoYs1tK19l-YVixClG2U.roa (hash: msWagJ6KNBCbsXUgdn8kKfPT/03Z4H19UfDca0jlshc=)
2: xWYvmAINpON9UO07swICd08pLXo.crl (hash: YbBp4tZ2pZit80HWuuo4ybVfQbZg045RRezavkvn+N0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 01:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:19:2a:77:dc:b9:0c:00:f3:9c:27:f3:8a:57:ca:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5662f98020da4e37d50ed3bb30202774f292d7a
Validity
Not Before: Jun 17 01:01:42 2026 GMT
Not After : Jun 18 01:01:42 2026 GMT
Subject: CN=be2d87aa4d2219fcc1e9faf57450dd0c41fa0029
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:92:ab:df:69:c3:f5:17:67:ef:43:27:3d:5a:
da:41:16:0c:fa:73:b1:79:fe:96:35:e5:29:49:20:
fc:1c:a6:17:67:33:14:9a:41:83:fe:08:88:eb:b8:
ca:27:ef:3f:b3:c5:12:f7:10:c2:93:44:41:5c:46:
43:44:0c:8e:70:82:04:51:b3:53:21:4f:44:b6:62:
01:1e:cc:86:49:43:29:21:10:90:9b:4c:cb:58:db:
77:89:be:71:85:c4:3e:fd:6f:78:ea:cd:bb:c9:80:
e6:75:79:01:c4:d8:71:2b:74:df:52:08:93:41:1c:
71:69:3d:91:dc:9c:8e:dc:ee:06:b8:30:23:57:f9:
ae:17:0e:54:78:f7:42:45:34:85:2a:ad:c6:b3:e9:
35:3c:ff:b5:c8:d8:6f:cd:88:0a:90:c5:43:c3:ed:
17:3b:f7:71:34:93:ad:54:34:bc:e8:31:07:db:32:
60:bf:02:9d:52:35:f1:0d:e5:c7:b3:03:95:d0:f8:
fb:bc:34:44:59:63:39:5e:27:70:89:a1:6f:54:a4:
e0:85:1e:3e:83:6d:46:de:ad:b1:e7:17:45:bf:a9:
ea:74:40:e8:e0:ab:13:41:35:c5:97:86:6f:5d:47:
63:15:f3:7b:eb:f1:4f:b0:b7:9e:81:a6:bc:fa:03:
ea:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:2D:87:AA:4D:22:19:FC:C1:E9:FA:F5:74:50:DD:0C:41:FA:00:29
X509v3 Authority Key Identifier:
keyid:C5:66:2F:98:02:0D:A4:E3:7D:50:ED:3B:B3:02:02:77:4F:29:2D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWYvmAINpON9UO07swICd08pLXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5d6c15-a588-41dc-a6a2-f89977a45b60/1/xWYvmAINpON9UO07swICd08pLXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:1a:d1:fa:cc:0f:ad:4a:5c:76:ae:1b:c2:7c:01:92:4d:9a:
75:9a:b1:89:e4:7a:05:bf:2e:1a:ab:4b:be:d4:7f:fc:b6:8a:
59:3b:bd:84:8c:16:f1:38:7c:a5:11:81:4c:d9:de:70:fd:f1:
3d:e3:b7:81:2f:3b:3b:32:ee:ae:bb:e8:61:1d:d5:ce:e9:09:
3b:17:69:c3:73:4a:9f:31:6d:f9:02:1d:01:ec:aa:7c:8f:c8:
e6:e8:9a:d8:4f:56:50:e6:8f:f9:44:82:ca:47:20:6b:4c:e6:
97:42:da:47:80:c5:f0:7a:24:15:aa:38:80:30:3a:e7:c4:fc:
38:5d:ab:b4:e8:21:e3:a6:6c:d4:80:ab:c3:31:94:fc:14:69:
e3:ca:bf:53:c2:64:4b:f1:31:3f:88:2c:78:21:74:ce:01:49:
c3:df:6a:f0:7e:89:95:d6:68:4c:e8:6c:a5:61:a9:4d:43:a4:
a9:68:83:47:2c:a7:b3:8d:7e:a7:1c:21:7a:d3:c5:51:9f:07:
ff:2b:f3:16:e1:c2:d1:90:53:5c:3d:79:e9:9d:14:0b:54:64:
3c:50:90:b6:de:1d:e4:da:c9:6b:30:9a:c2:c3:81:ad:b5:ba:
c2:b6:99:dd:98:c4:2f:6e:6b:82:d2:d4:33:e8:16:ec:aa:38:
0b:0b:47:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:02:20 2026 by rpki-client