Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
File: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft (raw, json)
Hash identifier: DpLlVlrVJ9Vt9nJ8DLxPn8Qj2gYHqLI6TKCNv8737Ts=
Subject key identifier: 1C:14:44:D6:DA:AD:F5:FC:F5:9D:A9:AD:BF:05:A3:D6:DE:90:57:F6
Authority key identifier: 5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
Certificate issuer: /CN=5f099f49978b960fa31f81acf54671273dc7ff61
Certificate serial: 019E9137C4C37358896513139BBE7C3B854D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
Manifest number: 1940
Signing time: Thu 04 Jun 2026 06:00:11 +0000
Manifest this update: Thu 04 Jun 2026 06:00:11 +0000
Manifest next update: Fri 05 Jun 2026 06:00:11 +0000
Files and hashes: 1: 0ZEt5hO5jk8I5B1ric3lV5QOPjY.roa (hash: 2SzUB4ARPZ7+BuiAiToaYolTUFVyZHL4/odctgbUciE=)
2: PX4jRvV2Is0w59EuWq6-Cko1_qM.roa (hash: o5zSrmvOazS6EGtXXnfbpDTf59xV6PS54zdbjnXbBvw=)
3: XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl (hash: H6F6Om5I0ZAGrReYiHnwL/y+jpOJs5ewtPDnczxO3Qw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 06:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:37:c4:c3:73:58:89:65:13:13:9b:be:7c:3b:85:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f099f49978b960fa31f81acf54671273dc7ff61
Validity
Not Before: Jun 4 06:00:11 2026 GMT
Not After : Jun 5 06:00:11 2026 GMT
Subject: CN=1c1444d6daadf5fcf59da9adbf05a3d6de9057f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:ee:16:b4:47:6f:04:4b:15:c8:18:ea:6c:
72:40:0b:0e:38:f9:23:2b:58:b0:2c:d6:55:81:19:
d6:e2:4f:b1:9f:be:3c:b4:2c:61:8f:dc:5f:8e:b4:
bd:b2:13:39:68:c2:d3:37:5f:a9:66:4f:52:e4:1a:
cf:76:ad:40:f4:7d:2d:45:c3:11:d7:43:f5:04:45:
1d:66:ef:b9:6e:95:21:cc:23:a7:ac:34:b0:c4:d7:
b6:fa:e3:c8:5c:84:8c:a8:f9:b2:4e:76:48:ac:a4:
1d:3b:cf:17:ad:d0:73:b2:e3:22:d0:81:17:79:b1:
08:c5:3c:ff:a1:3d:5a:9f:6b:36:f4:c0:92:6f:5b:
c8:4f:c0:b8:55:e8:6d:b3:25:88:a8:b5:82:32:ea:
e4:4c:16:49:cd:ed:7a:53:f9:90:45:66:a2:c3:ec:
72:9a:71:c4:39:0f:9f:86:08:0e:d7:bf:fa:c4:6a:
bf:bd:a4:52:a9:a3:d7:a7:a7:a3:81:e9:85:e9:69:
38:77:8b:57:4e:23:ad:e2:cb:ff:2c:ac:72:b9:c8:
81:1d:d6:fd:87:59:d1:10:07:d3:a9:95:e0:8b:cb:
64:43:58:89:7b:20:48:48:0e:8e:e4:ba:23:c5:ff:
65:a3:33:84:0c:95:bc:fd:17:05:57:5b:88:5a:75:
21:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:14:44:D6:DA:AD:F5:FC:F5:9D:A9:AD:BF:05:A3:D6:DE:90:57:F6
X509v3 Authority Key Identifier:
keyid:5F:09:9F:49:97:8B:96:0F:A3:1F:81:AC:F5:46:71:27:3D:C7:FF:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ad5bfd-85c7-47b7-997c-f5d2cb79456d/1/XwmfSZeLlg-jH4Gs9UZxJz3H_2E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:86:09:29:64:8a:bf:0d:d2:f8:8a:e0:40:88:6f:14:d3:08:
95:ae:64:97:aa:11:04:89:92:24:d4:75:15:81:cc:78:8d:42:
3d:e6:02:7d:bb:45:c1:32:b8:28:40:d5:a3:c5:6f:f3:ac:fc:
32:6c:2b:0d:29:e0:83:7f:88:f7:85:cb:7c:12:02:62:fb:c8:
38:75:e3:1e:7b:ab:cb:e3:7c:c3:15:52:30:b9:a8:1c:a1:45:
a3:29:46:61:be:60:46:a5:83:59:20:fc:52:35:94:87:f1:e7:
ea:5d:30:74:ba:8d:e5:33:ae:3b:7a:4a:4d:af:c2:e3:a6:ef:
db:58:e5:05:a1:eb:f0:76:f6:5b:37:09:36:b5:bf:dd:01:51:
64:08:ad:69:e4:73:cd:17:d7:d9:4f:68:d7:40:61:2a:78:bc:
1b:d6:17:8c:8c:4e:26:8c:eb:ce:ea:86:db:16:86:39:a8:43:
f9:8d:5a:14:4f:5d:5b:98:24:52:91:3e:31:51:95:66:7d:61:
1b:66:0f:c0:3c:be:5a:3e:0c:c0:61:89:ab:76:54:b4:4c:10:
0f:d7:6a:0c:bf:7d:b5:21:92:7d:c6:62:47:98:e0:ec:66:c1:
83:9e:f9:16:fd:42:45:d5:15:d9:1c:24:0e:37:23:da:e7:fe:
09:17:7d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:22:52 2026 by rpki-client