Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: p85pLvE4bAsQu9RlYo68Vjn8IO4/WnlwVbipNyXXPsU=
Subject key identifier: 1D:3D:00:15:1A:0F:0F:F3:D4:67:B4:9E:B1:D7:20:BC:7F:11:09:50
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 019EC44A967E67D5E30BD4653A3F121CDA59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 195E
Signing time: Sun 14 Jun 2026 04:01:22 +0000
Manifest this update: Sun 14 Jun 2026 04:01:22 +0000
Manifest next update: Mon 15 Jun 2026 04:01:22 +0000
Files and hashes: 1: Z4BDlr57O_FweazPHma0rDQN-Eg.roa (hash: RRUvm/U5FkAyaYrRTEjgZo8457PWupRX0eiUbSuUq0U=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: 2CB9C650pT9PZSnlUWYaIfwY77R299k7LNgCTa1f2dY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 02:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c4:4a:96:7e:67:d5:e3:0b:d4:65:3a:3f:12:1c:da:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Jun 14 04:01:22 2026 GMT
Not After : Jun 15 04:01:22 2026 GMT
Subject: CN=1d3d00151a0f0ff3d467b49eb1d720bc7f110950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:08:12:43:bb:66:22:c2:81:40:6b:2d:a3:3f:
c8:30:39:ff:b8:a9:b6:de:c2:a3:bf:d1:60:85:ee:
6b:7d:cd:6f:da:6c:21:f1:fb:e5:77:5a:7d:2c:26:
b0:75:80:da:20:7d:9c:66:a3:58:91:24:ba:58:fd:
b3:33:ff:af:4d:44:a3:82:0f:fe:02:be:6e:06:76:
2d:06:69:b0:0f:11:53:77:f3:5b:f8:77:1a:a4:2a:
de:10:27:6a:66:90:54:d2:09:84:25:7b:51:49:be:
85:ed:48:56:3d:bf:b0:ae:fc:5d:22:67:12:12:3e:
e1:ea:6f:18:2a:c1:f2:c1:4b:b9:52:eb:c5:7d:23:
1f:0f:36:6e:e3:3c:ec:74:0f:35:18:c8:27:fd:08:
0d:1f:ab:84:7e:8e:bf:2f:eb:a2:06:a9:55:66:c4:
7b:c4:0b:d0:7c:ab:ac:17:73:59:9d:5a:ff:7e:42:
4a:e9:11:19:2c:f5:8e:68:be:99:95:c9:30:0b:a6:
a0:7f:f6:bb:41:05:d4:e5:f2:79:ac:45:9c:04:c0:
29:c6:c2:f9:6b:f9:9a:86:12:8f:35:3a:11:d0:c0:
e4:d9:b1:21:ff:db:1c:d8:03:85:ff:78:65:56:36:
04:19:e3:31:16:44:44:0e:ec:9c:41:dd:7c:df:1f:
b6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3D:00:15:1A:0F:0F:F3:D4:67:B4:9E:B1:D7:20:BC:7F:11:09:50
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:5a:07:e1:df:d6:d6:1d:0c:0a:8b:b2:f9:6b:39:a3:d7:e0:
ac:0a:8c:0c:cd:dc:21:de:f7:9d:f2:0c:c5:81:a2:46:41:47:
a1:93:6b:ed:cf:54:b1:4b:3c:4f:d6:ec:5a:d5:8f:60:c0:d1:
7d:38:f1:92:9b:d5:ae:5e:13:b7:90:bf:91:42:1e:46:15:30:
70:99:b8:67:84:c4:db:39:5a:4d:de:73:54:b1:68:6d:8a:d9:
1a:7e:ba:eb:32:c4:96:00:ed:c9:a6:b0:88:9f:33:df:44:0f:
a2:6b:5a:5c:ce:89:af:8d:b1:5b:b5:39:12:24:9a:4f:17:a1:
28:ef:a4:b4:e3:b0:a1:fa:45:85:f3:ed:3a:a9:8e:31:87:a3:
de:b4:90:83:26:b4:f3:e3:bf:38:cc:1c:8f:15:8c:91:2b:ac:
9d:58:44:84:fd:c3:95:4f:4d:c2:06:b1:f8:4a:8c:9c:59:45:
4e:11:e5:6b:c4:a1:50:41:6c:44:fd:1a:e5:9c:73:a5:09:93:
d9:7f:18:18:ea:34:b6:bf:ae:88:dd:a8:74:a2:3a:bd:e1:b9:
5a:16:9b:95:d4:21:b2:26:82:fa:3d:dd:db:b8:c1:a6:14:71:
08:52:77:ae:cf:44:14:25:3d:80:d5:bc:ce:bb:32:06:47:53:
5d:93:00:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:09:06 2026 by rpki-client