Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
File: XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json)
Hash identifier: r8d+X8rIWFrGhTOcdJ1+TE1Icq/kLQtMQGuuUmbiw+Y=
Subject key identifier: 38:A9:E4:62:6C:20:9A:0E:32:BD:CA:91:E8:ED:BB:3B:EF:55:C6:34
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 019EB620ACABFC32EBEC0C43905B21C9D991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 10:00:55 +0000
Manifest this update: Thu 11 Jun 2026 10:00:55 +0000
Manifest next update: Fri 12 Jun 2026 10:00:55 +0000
Files and hashes: 1: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: rQeZt83/Bd6kGvjVjsqsWV0XS9emTqVQVVu39EUVaEw=)
2: vOvUH4QL3euA8n5Zs-p3s8pu5OU.roa (hash: qqJCGshMa7lPJa7oCp0UWM6NmrUrD8W4y4uDd4fxLLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:ac:ab:fc:32:eb:ec:0c:43:90:5b:21:c9:d9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: Jun 11 10:00:55 2026 GMT
Not After : Jun 12 10:00:55 2026 GMT
Subject: CN=38a9e4626c209a0e32bdca91e8edbb3bef55c634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:4a:7e:6b:d7:d0:a2:f3:ab:24:5a:85:5f:
2b:47:fb:f7:f0:a5:05:8c:ac:36:ac:85:db:c3:09:
af:0f:45:d8:b0:7f:35:1f:10:e1:c7:07:e3:dd:b4:
8d:41:9f:25:61:f3:39:60:64:bd:ec:58:e8:33:c4:
60:cd:c2:17:a5:f7:7f:4e:f1:56:2f:a9:98:e9:f5:
3e:29:96:c7:a2:71:66:c7:1d:d7:c1:8d:8f:83:ee:
64:46:00:61:64:d3:2d:b9:8f:10:81:10:38:3c:c2:
3a:9e:f6:51:06:b8:d1:b8:aa:8a:8a:e5:e5:18:ad:
4e:c1:98:47:c2:ca:be:45:dd:b9:4d:de:fb:4b:cc:
89:7d:9a:dc:42:5e:89:9b:18:33:df:7a:b1:52:9f:
67:75:65:b2:e2:8c:0d:51:62:12:a9:85:c4:8d:c0:
09:f6:20:0c:d1:cb:55:78:a8:b7:6b:4a:6e:96:91:
4e:a5:22:a7:d6:be:2f:b4:38:e1:71:66:5d:85:c6:
9e:fb:b4:71:f8:ed:12:13:79:dd:64:e2:fe:81:f4:
88:1f:33:45:b4:f3:09:5b:4b:2e:56:54:48:3c:b5:
b5:c7:51:15:5d:ae:31:45:58:92:27:8b:22:93:c6:
a1:37:19:9c:1a:01:73:14:63:37:54:80:8b:d7:48:
ee:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:A9:E4:62:6C:20:9A:0E:32:BD:CA:91:E8:ED:BB:3B:EF:55:C6:34
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ef:35:b9:3e:fd:ee:92:1f:61:d5:b9:a5:f6:78:01:ff:d8:
f2:7e:fe:22:c3:38:c3:d6:24:19:9d:6f:87:a9:46:93:63:f9:
bc:19:40:14:3c:17:14:6a:71:2c:80:7e:99:98:8a:1f:04:0c:
c7:77:c0:a0:46:34:d5:8c:d5:ee:be:60:d1:92:f5:69:1d:f0:
2e:e0:eb:ae:47:f5:cd:b8:22:a7:9e:95:32:53:bd:f6:09:66:
41:47:90:5b:88:12:32:0d:d0:03:e9:a7:63:2c:b5:74:79:2f:
ac:13:78:ab:49:31:ae:f3:81:c1:78:96:8c:9e:46:78:f9:2d:
fe:7c:c5:ab:78:b6:f3:b6:78:de:5f:76:3f:64:4f:b6:e5:3e:
5e:b1:4f:fe:c1:bb:b0:31:2c:05:ad:53:e0:52:ca:e9:f3:b2:
e8:44:09:d3:0b:d6:ed:82:5a:cf:f7:7b:c1:7e:ac:9c:02:ed:
ba:57:9d:7c:17:b2:a1:32:ed:43:f7:00:ec:29:7c:b0:20:5a:
a3:ed:37:0a:a6:f6:75:7d:d2:b2:11:81:d3:a9:e0:2a:12:9c:
85:78:15:d2:f6:69:36:ae:1f:48:15:a9:ee:d4:c1:a9:24:b1:
33:5b:84:54:1a:f1:38:ad:f2:8b:24:f3:f9:e4:42:66:b1:ac:
61:ff:2f:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:00:54 2026 by rpki-client