Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: uTPWm327k4iDc+UeqehewUtRhEVJPZyUUa8CO6J+c+g=
Subject key identifier: C4:8B:57:79:45:37:BC:CC:98:8D:C6:A8:6E:23:15:3B:10:32:73:FC
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 019EBFC8CEAECD0C73CEF1DAE862B14731D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 1960
Signing time: Sat 13 Jun 2026 07:01:08 +0000
Manifest this update: Sat 13 Jun 2026 07:01:08 +0000
Manifest next update: Sun 14 Jun 2026 07:01:08 +0000
Files and hashes: 1: 2oiBg97yJfcku7AZ1xtBGexIP9I.roa (hash: ZkJc6vel+43QcyypXskCAIYVCyw1+ndC8Q1LjIoI34g=)
2: GWcwAEGL8dWNpctIdaHLmJt2F-M.roa (hash: icoIbE+7HxZrn6cToVlzjrHBi9MeFRezSthDAS8pPcs=)
3: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: 3AtG6tDbvWyzQhu39hAew0XrOEPq1lgq4ejuc0nKjy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:ce:ae:cd:0c:73:ce:f1:da:e8:62:b1:47:31:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Jun 13 07:01:08 2026 GMT
Not After : Jun 14 07:01:08 2026 GMT
Subject: CN=c48b57794537bccc988dc6a86e23153b103273fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:1a:51:da:2f:e6:0c:28:8c:8d:f0:9a:22:d5:
fe:14:8b:90:5f:d7:a3:88:e8:9b:c4:29:d7:0f:8f:
de:55:ff:fc:f0:b6:66:77:8d:ef:db:7e:61:91:44:
fd:70:14:6d:5d:ce:9a:09:74:1e:a2:79:33:c1:28:
bb:91:da:ed:06:40:2b:18:22:e0:28:9f:8b:5a:9a:
80:71:6a:96:bf:ec:b8:a7:16:f5:8f:a2:cb:61:8f:
43:2f:12:2e:d6:7d:06:d3:bc:fb:5a:70:ca:22:ab:
76:9a:6b:ba:34:62:9a:92:24:39:ce:81:e9:02:80:
83:ef:00:e6:12:2b:41:3b:6d:80:ff:05:ef:da:c1:
a1:bf:27:5a:4e:58:0d:fc:6d:66:69:40:10:a8:88:
31:01:9a:96:73:d7:fd:1d:8b:64:84:01:4d:75:a7:
b9:bb:63:05:10:38:d2:86:bb:ec:99:a1:ef:37:8d:
d2:71:36:ba:45:3f:7d:60:1b:ad:b3:e8:fe:1b:9c:
fb:21:6a:b2:3a:ee:60:0d:cf:95:cd:0e:01:c8:f5:
8a:47:35:95:5d:07:db:9b:4c:0f:08:0b:4d:36:75:
db:66:34:f9:43:c1:e8:0b:83:53:2e:cb:c7:61:38:
05:82:9b:0a:60:81:52:81:de:34:08:ad:d6:a8:8f:
d4:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8B:57:79:45:37:BC:CC:98:8D:C6:A8:6E:23:15:3B:10:32:73:FC
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:56:86:e0:e3:47:15:e6:a9:17:ba:af:04:15:90:1d:d1:ea:
1a:0e:95:40:86:54:5e:45:8e:32:93:26:eb:92:66:38:f1:65:
be:da:54:09:1e:55:5a:6d:f2:56:a5:8d:6c:dd:b0:ce:87:2d:
52:14:3b:d0:3c:e5:81:b9:e1:73:05:ca:1f:ec:9d:74:dd:f8:
d2:b5:57:69:f5:05:22:04:68:d4:c0:31:be:72:06:5d:3d:70:
03:1b:23:56:2a:1d:46:9f:2a:54:ac:16:da:e2:f8:d9:44:c8:
d1:a4:47:5d:85:0e:a2:0d:8f:c4:94:dc:e0:11:62:7e:b5:55:
cf:af:a9:92:d0:f7:4d:38:71:ee:2e:bb:0f:54:0c:9d:8b:10:
a3:83:f4:91:53:f1:8b:b3:bc:ac:6e:89:82:2d:ac:5c:a7:11:
35:04:6f:f0:01:e5:0a:3d:ca:9b:91:68:06:a3:39:7e:f1:10:
99:3c:a1:ec:5e:5d:e4:5b:40:38:f4:ae:ec:f4:1d:b0:5d:fc:
90:ec:8c:79:9a:2f:07:36:54:fe:f4:a8:f3:40:1b:65:df:d1:
7a:4c:53:ac:6c:40:ac:ed:3e:26:d1:c0:1e:97:ad:54:e4:37:
be:9a:a6:56:e2:57:fe:1b:0a:c5:c0:48:4b:0a:4a:72:4f:47:
76:cb:29:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:51:18 2026 by rpki-client