Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
File: xFIGsdbzkSqG62KPYZxaVSxVNQE.mft (raw, json)
Hash identifier: Kx7er7hw5XMtBhWJVMWk+H5mZleI40kL5kTOKF4xRIU=
Subject key identifier: 4B:95:46:F5:8C:51:C0:D8:F4:8D:09:F7:5F:8B:57:E9:33:51:6E:3D
Authority key identifier: C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
Certificate issuer: /CN=c45206b1d6f3912a86eb628f619c5a552c553501
Certificate serial: 019EC1B73CC656E9958CC111331BD54F9379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
Manifest number: 0520
Signing time: Sat 13 Jun 2026 16:01:11 +0000
Manifest this update: Sat 13 Jun 2026 16:01:11 +0000
Manifest next update: Sun 14 Jun 2026 16:01:11 +0000
Files and hashes: 1: MBR4X9txb_DAPbAumwTsJqubBTw.roa (hash: 3GXUKqS4uNcGQw91JnWr+7X42phsItesfGJzuOIsuBE=)
2: xFIGsdbzkSqG62KPYZxaVSxVNQE.crl (hash: ud1ZCI6hxyxpDCRJ3A6sEctWgyiUBZ+FpX3DMdgqtW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:b7:3c:c6:56:e9:95:8c:c1:11:33:1b:d5:4f:93:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45206b1d6f3912a86eb628f619c5a552c553501
Validity
Not Before: Jun 13 16:01:11 2026 GMT
Not After : Jun 14 16:01:11 2026 GMT
Subject: CN=4b9546f58c51c0d8f48d09f75f8b57e933516e3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:62:de:87:d8:85:42:07:81:d8:7a:10:5e:96:
75:7a:a4:f7:ee:a6:b9:e4:bc:ed:c2:96:09:6b:0b:
12:79:c3:b0:2a:3b:6a:b0:4e:54:d6:58:9f:fc:ea:
2a:f6:e5:00:cd:81:e3:4c:12:04:ea:5b:24:3b:fb:
c4:93:30:57:b0:dc:2e:aa:b6:f5:8a:27:47:df:cb:
2a:59:60:dd:6e:6b:df:af:fe:db:75:44:5b:86:d8:
aa:36:e2:5c:55:95:6d:5b:97:77:c0:d3:8d:b2:31:
a4:45:11:99:72:e3:0f:14:62:95:7f:c7:8b:90:b0:
01:39:5f:87:dc:dd:c7:e0:a9:cc:c7:cc:95:af:fb:
53:70:cd:19:f5:7a:80:37:ba:bb:87:bb:57:ee:43:
84:65:78:51:ca:bb:48:c3:07:27:1d:33:24:6e:11:
1c:0d:42:75:4a:6b:24:ee:66:b3:d4:f7:10:ed:52:
f2:b3:5c:b4:49:85:7a:7e:b5:be:a3:2e:b1:0f:a6:
ec:f9:39:d4:96:1a:b1:96:9c:16:17:79:f6:92:d9:
b9:38:9f:2b:cf:b3:46:d7:7d:5b:ab:48:6a:ab:16:
a9:8b:56:b7:97:3e:97:e2:6d:bf:53:1b:59:cf:5c:
9a:2c:63:05:b4:c6:d1:aa:de:ab:80:a6:19:44:b8:
d9:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:95:46:F5:8C:51:C0:D8:F4:8D:09:F7:5F:8B:57:E9:33:51:6E:3D
X509v3 Authority Key Identifier:
keyid:C4:52:06:B1:D6:F3:91:2A:86:EB:62:8F:61:9C:5A:55:2C:55:35:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFIGsdbzkSqG62KPYZxaVSxVNQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cc835f-4906-4c95-b8e5-5be40b14f8df/1/xFIGsdbzkSqG62KPYZxaVSxVNQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:f1:55:30:d1:1c:8a:bc:ff:09:d3:f8:0c:1f:77:b1:db:89:
3d:23:a2:9c:74:47:a3:f6:c4:b8:09:20:eb:ba:73:87:61:b9:
fb:d1:d4:db:af:93:cf:be:44:dd:d5:13:8b:b4:80:da:95:d8:
e1:53:a9:d3:df:f0:49:66:a4:08:76:24:8c:28:a5:c2:68:d0:
8d:0a:6e:05:77:05:b5:11:47:15:35:fe:fa:dc:80:b0:77:c2:
6d:89:e7:c3:ed:ed:70:c4:9d:fa:62:e9:bb:0d:61:d9:e4:f8:
b2:90:e8:0e:ab:7d:aa:da:57:07:1e:e8:cb:3d:0f:e9:0e:5d:
45:d9:41:84:37:7c:f3:af:b6:e4:68:fb:be:47:52:95:90:94:
1a:df:23:c5:d6:bc:16:46:d4:dd:e5:45:19:0a:57:e2:d5:0a:
3f:6b:86:1e:7d:bf:a7:a6:9e:1b:08:5f:da:6d:24:17:99:95:
bb:56:42:e3:7b:04:d8:50:e8:92:93:ef:c1:ef:4c:94:cd:f4:
f5:7f:57:e0:41:c6:2d:b9:5e:6e:83:f0:72:65:e0:89:e7:30:
48:6e:4e:89:22:d7:ef:4b:00:0e:cc:f0:43:11:ee:b4:f8:f6:
11:27:95:78:78:69:4b:8f:d9:78:9f:d6:25:23:be:05:d2:19:
6e:4c:75:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:16:33 2026 by rpki-client