Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: T71yJasgBLY1QCZwfsZQe7hHsGgHFrsAeyBSwxPYtvY=
Subject key identifier: 92:D4:C2:46:D2:62:63:69:D1:F4:4F:DE:BC:DF:31:28:1E:65:A0:1B
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 019EC2CA18B5B6D2F07D8D414EFA7A3473DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 21:01:24 +0000
Manifest this update: Sat 13 Jun 2026 21:01:24 +0000
Manifest next update: Sun 14 Jun 2026 21:01:24 +0000
Files and hashes: 1: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: DDXNIyEUWWmaEo0Zj0djrjid3ZTTWjSdOsFUYGsM1sk=)
2: YboTsZW5E_LquEoNeH4f-DKai2A.roa (hash: rVnU6oaQsX3x5ymp+Ryvp8mswyZTbG+O1Im+gcRa5NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:ca:18:b5:b6:d2:f0:7d:8d:41:4e:fa:7a:34:73:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Jun 13 21:01:24 2026 GMT
Not After : Jun 14 21:01:24 2026 GMT
Subject: CN=92d4c246d2626369d1f44fdebcdf31281e65a01b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:91:10:2a:ce:b3:80:b4:c9:13:5d:26:c8:75:
c6:e5:be:ec:94:99:52:66:e8:82:93:bc:53:0b:3c:
e9:6e:25:93:5a:54:44:5b:ee:2b:92:fc:0b:bf:9d:
5e:a6:2e:f1:7d:9c:0e:a4:98:6c:8e:8e:39:43:67:
5a:43:cb:34:d5:34:62:39:d5:68:13:d2:34:d5:0a:
2f:a7:87:d4:9a:e2:0b:ae:fb:92:17:1b:f3:a9:6a:
52:3f:42:bb:9d:c9:51:e1:d4:f3:bf:ef:7e:c6:77:
3e:23:a5:67:14:b4:f4:1c:31:e4:a1:85:72:88:0d:
00:72:81:23:3b:f0:95:45:e3:9d:03:c6:18:10:47:
a1:5e:a6:d1:2f:d1:da:d9:aa:2a:25:ca:c9:a4:90:
35:1e:9a:ef:29:76:1e:d7:7e:01:29:73:57:8c:92:
eb:ef:19:9b:f9:08:b2:85:a9:2c:fd:57:f7:67:9a:
63:f9:4e:91:21:36:f2:a1:1f:66:20:72:21:ab:63:
b8:9b:87:bb:57:0b:9d:d9:9a:68:76:45:38:54:3f:
42:e6:e4:fb:e1:5c:5c:b1:e5:fd:e1:8e:6b:bb:7a:
72:cf:01:be:57:fe:e1:e1:ec:76:a8:84:d1:b4:9a:
e0:f7:a4:ea:c5:4e:5f:32:47:1c:68:44:45:34:c6:
ff:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:D4:C2:46:D2:62:63:69:D1:F4:4F:DE:BC:DF:31:28:1E:65:A0:1B
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:34:31:a8:1c:99:45:fc:33:6d:be:26:83:92:98:69:45:88:
05:bf:82:d4:37:02:0e:99:68:13:d1:20:d9:b4:eb:09:38:29:
56:1c:2b:aa:1f:6c:cf:55:54:8b:28:40:27:0a:ed:bd:42:1f:
1b:a8:89:18:ed:d8:55:d0:fb:31:d5:5d:40:8f:4a:b5:ae:27:
15:e2:e5:78:e0:cb:e1:0b:56:b2:23:1d:01:80:97:d8:42:50:
1f:33:95:a8:87:6c:75:31:d6:d4:5f:87:be:d7:8f:4c:1c:c5:
9f:e4:92:47:f7:d7:35:49:77:9e:bb:c1:50:bb:84:36:d8:9b:
22:c3:7c:de:96:c7:64:40:6a:9f:0d:d2:2b:2e:95:dc:2c:16:
97:9b:26:1e:fe:63:ad:2f:93:80:44:c9:86:b0:83:8d:66:b1:
d5:db:c0:0a:17:39:b2:d5:3f:4d:54:a9:72:4f:e7:d0:9d:3d:
58:9c:d7:19:93:13:5d:d3:91:60:4a:92:28:c3:45:08:82:83:
1b:44:88:54:14:d8:00:e9:df:ff:e8:09:47:85:cc:b3:a2:4e:
6a:24:a5:e2:33:d9:49:66:d1:25:fd:17:cb:9a:5f:ff:df:85:
c6:ab:4a:34:e9:6d:4e:59:db:8c:64:b4:e5:ef:b5:99:9a:4e:
ed:b2:0c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:28:33 2026 by rpki-client