Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
File: XzpsIZQcHhO__E1E1hvSWV_dj-g.mft (raw, json)
Hash identifier: OXOh2Zw2QXNSNeyZnZTSaGpEu1m7fXhuohK9UF48qlM=
Subject key identifier: 2D:5B:A0:83:CF:B5:25:04:5B:69:CC:13:C2:40:18:F7:B5:9F:6A:86
Authority key identifier: 5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
Certificate issuer: /CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Certificate serial: 019EB845E5C99DD4C502F0D64B1DB24D6174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
Manifest number: 0834
Signing time: Thu 11 Jun 2026 20:00:48 +0000
Manifest this update: Thu 11 Jun 2026 20:00:48 +0000
Manifest next update: Fri 12 Jun 2026 20:00:48 +0000
Files and hashes: 1: TYmQbCMoT4fS2qLD8XTST39V7ao.roa (hash: AGtO8iqNaCFj7ECH8S64l5TD2JUqi3IXF+NQdgnWnfk=)
2: XzpsIZQcHhO__E1E1hvSWV_dj-g.crl (hash: gpd0kCdJaDfrl9LFntZLQL+0s+7nn6Yqz/CHLvmuAvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:e5:c9:9d:d4:c5:02:f0:d6:4b:1d:b2:4d:61:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f3a6c21941c1e13bffc4d44d61bd2595fdd8fe8
Validity
Not Before: Jun 11 20:00:48 2026 GMT
Not After : Jun 12 20:00:48 2026 GMT
Subject: CN=2d5ba083cfb525045b69cc13c24018f7b59f6a86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:05:c9:59:be:f6:03:ed:ff:14:c1:5c:64:39:
9a:ab:b3:0b:be:2f:56:23:58:bf:08:83:ee:91:22:
11:1e:1e:73:30:88:c2:05:e8:f0:85:9c:e1:c5:3a:
ae:13:65:f9:58:09:05:20:97:3a:cf:38:0b:67:1d:
39:67:30:4e:8d:40:da:fe:c5:51:1a:bb:1c:77:28:
da:38:f5:22:55:f1:f1:eb:f5:9d:03:be:6f:21:fc:
4f:3c:e0:8b:ac:34:44:d8:f9:75:d6:83:a5:f5:f1:
07:66:08:20:c5:47:99:6e:81:64:e1:8b:7a:8e:69:
0e:3f:47:92:e0:a2:3f:39:27:ff:62:8d:dc:fd:a7:
71:13:97:01:db:27:2f:41:e7:16:f3:3c:23:8c:23:
24:5b:0d:fc:ba:c4:97:5e:06:ef:a6:b1:c0:0a:df:
17:53:7d:82:fd:9c:36:d4:09:37:ae:0c:dd:e0:e5:
bf:92:b7:b7:3a:d0:c9:ca:b9:61:1c:c2:13:47:64:
03:43:ec:8c:21:c1:4f:7b:31:85:cc:e6:01:f3:87:
d2:43:23:4d:9a:e1:80:e8:32:a3:a1:cb:94:aa:a4:
87:92:92:f1:a6:a3:6f:5b:bb:d7:2a:de:1d:68:83:
d9:85:09:6e:34:87:d0:b9:f9:79:03:a7:d3:3a:5e:
f5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:5B:A0:83:CF:B5:25:04:5B:69:CC:13:C2:40:18:F7:B5:9F:6A:86
X509v3 Authority Key Identifier:
keyid:5F:3A:6C:21:94:1C:1E:13:BF:FC:4D:44:D6:1B:D2:59:5F:DD:8F:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XzpsIZQcHhO__E1E1hvSWV_dj-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/ba30bb-ac0b-45a0-9f0c-cf8698757d37/1/XzpsIZQcHhO__E1E1hvSWV_dj-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3b:4b:2b:46:66:04:29:cd:00:54:d7:b3:cf:86:c0:29:50:
59:30:63:c9:a6:11:20:11:62:9f:d6:fa:c0:74:7f:82:27:67:
05:13:eb:23:99:34:52:89:bd:bf:40:25:b5:29:c5:c7:15:8f:
22:bf:4f:12:17:ec:d5:04:a9:a6:fb:48:50:06:6d:0c:54:0d:
43:81:c6:16:26:63:93:4a:4c:05:62:11:c5:82:55:2b:58:9b:
54:21:57:35:56:43:07:51:a0:17:8e:9d:fa:6a:55:24:bd:77:
57:f6:13:1a:cd:78:52:80:29:1f:37:ef:3b:fd:9c:d6:c2:73:
8c:08:0c:f9:ce:0d:a7:81:48:2a:56:2d:c7:fb:cf:4e:d8:02:
23:32:12:54:94:28:83:13:e0:ff:0e:84:e5:9b:b6:fd:f5:19:
ab:65:9f:ab:eb:95:1c:e7:c7:be:67:94:91:9e:df:c3:c8:6f:
70:7a:cf:64:cf:87:cf:43:03:38:8e:cc:9e:81:dc:cc:95:3f:
a8:21:31:8d:e9:0f:b1:c8:bb:b4:29:f6:b1:c5:d6:39:3f:12:
a1:e9:f7:f9:70:fe:2c:52:00:52:38:42:f1:63:34:5f:88:f4:
36:2a:7f:16:dc:fa:6f:2b:91:7b:ab:7b:cb:e5:4f:da:5e:0f:
8e:bb:65:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:11 2026 by rpki-client