Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: JLIFPH1a8vlKqPx3SnSk+EAjjiAY8ujMlP0oNxvFpFg=
Subject key identifier: 36:77:5C:65:40:3D:87:F9:95:76:A3:9A:82:69:26:86:6F:7F:97:08
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 019F1152DD67E5BA246FF673102EDAF8995A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 1438
Signing time: Mon 29 Jun 2026 03:01:10 +0000
Manifest this update: Mon 29 Jun 2026 03:01:10 +0000
Manifest next update: Tue 30 Jun 2026 03:01:10 +0000
Files and hashes: 1: 02JNfVWYOVA2OBy17TDgR9y7do8.roa (hash: x5I0ROnfJh237cohKlOyZemzpgBQnX/4IqZy8ejhw3c=)
2: 5VBhehblaiOfuUShpivHuAhNqvU.roa (hash: SLWl0V7yJEtG44gZ1JVp2uNJOky4M2j+U4CHDGRdNIM=)
3: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: doH7nWEnN8dy1/Bvr3gFUe1sueF76cxj5jztw9Cizwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:52:dd:67:e5:ba:24:6f:f6:73:10:2e:da:f8:99:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: Jun 29 03:01:10 2026 GMT
Not After : Jun 30 03:01:10 2026 GMT
Subject: CN=36775c65403d87f99576a39a826926866f7f9708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:59:1a:90:44:d0:b6:94:12:c2:7e:32:8a:05:
8a:bf:b0:e6:68:2f:73:38:19:50:1e:45:05:52:03:
47:9e:e3:80:c5:8c:e6:e5:3d:f7:0d:9a:b0:2f:17:
06:e1:74:7d:bd:76:0f:24:76:5b:b3:ab:82:6f:40:
d6:f6:8c:bf:79:5b:d9:85:b3:03:fa:4a:ec:be:44:
26:da:8f:83:a9:e7:3e:1b:22:b4:92:6a:01:d9:88:
df:1a:e6:26:e3:09:fa:0b:5b:eb:7b:49:a3:37:1f:
55:c5:a7:d9:4c:61:0a:87:12:80:83:3d:67:75:73:
9d:88:8e:cd:f1:a2:3a:fe:b0:54:c5:b5:5f:00:7b:
b2:e0:a5:ef:a1:75:ef:f6:ce:b5:11:ac:7a:c4:54:
15:a2:66:2c:ed:b1:a4:92:f9:5b:9e:f2:31:c3:39:
e2:65:2c:a0:c4:93:bb:de:8a:e1:b5:2b:c8:db:7d:
f7:30:d0:fd:86:61:30:d3:a2:e4:eb:49:43:ee:d3:
8c:26:db:59:51:f4:ef:59:68:51:a2:46:c4:0a:58:
2c:6a:ea:66:39:6e:57:45:03:fd:24:ef:f4:83:90:
f7:57:25:24:c8:24:db:bd:6c:4a:0e:67:48:40:04:
25:62:b6:85:88:a9:9c:ab:a0:be:7f:48:3f:73:79:
8f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:77:5C:65:40:3D:87:F9:95:76:A3:9A:82:69:26:86:6F:7F:97:08
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:be:68:82:b8:99:19:b0:12:a7:49:10:dc:61:f3:06:d6:d4:
9c:ca:cf:f5:64:79:60:2d:f5:0c:5a:45:cb:26:78:ac:4b:41:
20:c1:ef:c0:1a:82:d9:64:c0:5d:7c:17:ae:3a:98:fb:7a:9a:
7a:49:d3:cd:21:b9:75:b7:be:25:e7:36:24:7f:5a:0f:17:c9:
3d:fc:cc:32:98:44:f7:ae:bd:80:ac:80:bb:52:3a:7c:5b:e6:
2d:c8:38:7e:10:b3:04:00:91:0f:07:c1:7c:97:c9:d4:f6:68:
f8:67:de:7c:48:95:75:81:44:52:dd:32:c5:98:0b:65:93:1c:
e8:4d:b4:06:9d:87:29:27:11:66:0d:5d:11:a3:11:7e:c2:94:
ba:95:11:7a:e5:0c:71:68:e8:89:67:40:00:fc:b9:e3:f0:60:
5d:ab:40:b5:00:8a:1b:23:41:e6:1a:51:e2:10:46:6a:22:e3:
c7:48:3a:a5:f4:e9:1e:aa:ce:98:a4:25:a5:bc:c7:60:cc:7f:
d5:1f:09:1b:37:28:58:7a:23:25:26:a5:42:eb:9e:cc:86:24:
85:f0:55:0a:1a:54:c2:74:93:a5:54:bb:f4:95:be:c3:8f:fc:
87:9b:d1:c2:c7:20:1b:f9:f0:a3:e3:7e:8f:49:1f:36:ec:4a:
43:93:df:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:09:54 2026 by rpki-client