Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
File: XAAsRHm7TJbiI0OZznH1YDRSmdA.mft (raw, json)
Hash identifier: EN2w9oVwngeViI+z4M3BY0y7iPHvNiWg6uiOQKzU5ag=
Subject key identifier: A3:38:56:20:A2:DB:D4:A9:03:F7:27:C8:4F:6C:D2:0F:52:0F:59:A2
Authority key identifier: 5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
Certificate issuer: /CN=5c002c4479bb4c96e2234399ce71f560345299d0
Certificate serial: 019EC1126B935F0FA3C781D8DD240E0ED6B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
Manifest number: 0BEF
Signing time: Sat 13 Jun 2026 13:01:10 +0000
Manifest this update: Sat 13 Jun 2026 13:01:10 +0000
Manifest next update: Sun 14 Jun 2026 13:01:10 +0000
Files and hashes: 1: TxbDZ92_D1JcE6gFaCzsdbEg8Dw.roa (hash: w4shAAAl4BC6mnnYlahv1hVwM6Z+ODkO+q4aaMk3Of8=)
2: XAAsRHm7TJbiI0OZznH1YDRSmdA.crl (hash: 8FegJXiWPQaLYKOsrH0GdVOVOZXN/0zZRuHpwxA3BC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:6b:93:5f:0f:a3:c7:81:d8:dd:24:0e:0e:d6:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c002c4479bb4c96e2234399ce71f560345299d0
Validity
Not Before: Jun 13 13:01:10 2026 GMT
Not After : Jun 14 13:01:10 2026 GMT
Subject: CN=a3385620a2dbd4a903f727c84f6cd20f520f59a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:87:6a:3e:8d:78:90:82:b5:80:17:78:a8:f5:
dd:d0:4a:25:b0:8a:16:85:98:0b:3b:12:09:8b:33:
35:b4:b6:b6:c5:fc:9b:05:10:dd:04:a3:8a:48:d0:
0f:96:47:9f:14:5b:26:4e:ad:ae:2a:a1:fe:f6:77:
5d:e0:01:c2:7f:3b:e6:c0:5f:96:e7:d2:67:6b:16:
3a:93:89:4f:4f:85:07:d2:3a:c4:96:2a:d3:2e:11:
d9:8e:b0:13:46:38:a5:49:10:c3:b6:dd:70:2f:02:
15:5f:e2:b5:ba:54:a4:78:fe:fe:77:80:75:c7:1d:
fe:5c:52:58:e0:d6:f4:ab:9e:d2:b7:92:71:21:2c:
47:4e:be:f8:ed:c9:dd:cd:32:bc:5d:4e:eb:84:3b:
0e:38:17:3a:60:a3:f9:32:2b:8c:22:54:e0:9a:87:
0b:89:56:a3:92:9b:6c:2a:9f:82:f6:e0:7a:5a:c0:
e6:61:0d:50:ef:95:03:d9:ee:02:0c:bd:58:a1:a7:
ad:33:7b:0d:36:5d:c0:f8:95:ed:3b:53:4e:f5:e3:
e3:85:50:7c:c8:06:18:1c:6a:9e:a0:b8:2c:0c:d2:
6d:48:61:fb:bb:80:4b:01:18:fc:b6:58:fc:78:65:
e5:32:39:9f:db:19:16:b5:42:9c:09:17:91:94:cf:
b9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:38:56:20:A2:DB:D4:A9:03:F7:27:C8:4F:6C:D2:0F:52:0F:59:A2
X509v3 Authority Key Identifier:
keyid:5C:00:2C:44:79:BB:4C:96:E2:23:43:99:CE:71:F5:60:34:52:99:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XAAsRHm7TJbiI0OZznH1YDRSmdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/c503d6-b6e4-43e2-91e6-71c570dcb0a4/1/XAAsRHm7TJbiI0OZznH1YDRSmdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:49:fd:86:02:98:88:06:ee:cd:66:b7:d1:a5:51:71:92:38:
ce:fa:b4:44:0a:10:ca:d8:a8:b0:f3:53:3f:c0:01:80:f4:78:
8c:ca:65:60:75:8e:ba:14:d5:cf:2c:22:20:70:23:58:74:4b:
68:88:b8:6d:e4:42:ac:f5:9b:9f:9a:7e:34:bd:8c:b8:3c:52:
95:33:59:69:73:1b:ea:6c:cb:d9:77:a3:de:1b:fa:6b:cc:92:
a4:e4:4c:8c:9e:41:7a:cc:0f:56:8a:e8:80:e5:41:6d:9e:5b:
fe:b3:96:86:dc:8e:05:7c:0f:0b:e3:8f:62:7b:0f:b0:97:da:
df:3c:8d:f6:2f:5d:83:a5:6a:6b:c0:24:a0:46:d2:26:9f:39:
ee:08:b6:41:a9:fa:93:48:1c:da:07:fd:14:b4:76:86:7a:84:
b6:2e:64:24:f7:b4:a4:b8:07:db:20:e9:b2:94:93:5c:a0:df:
52:3d:91:0c:42:54:fb:02:f2:df:2d:6d:8e:22:d9:a2:0c:f8:
c9:2d:90:fd:16:da:0b:74:11:8b:10:c7:0d:7f:53:53:0e:a6:
d6:48:d5:97:27:e5:44:70:20:99:e1:f5:de:f1:9f:79:ce:91:
97:e8:97:8a:cf:b5:1f:a9:8f:4a:72:53:52:81:ca:dd:7e:d8:
d3:f0:c4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:45:05 2026 by rpki-client