Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
File: XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft (raw, json)
Hash identifier: 29Ih8OcWz5OEzBAmOifwjlPARM4SFvld6dclaO98m6k=
Subject key identifier: D0:FE:53:45:DC:3B:BD:05:87:BA:3B:DC:E6:88:F6:C2:E1:F1:47:0A
Authority key identifier: 5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
Certificate issuer: /CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Certificate serial: 019F0E1B6BB6F5768F8BBC4EA1C6C41EC613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
Manifest number: 099F
Signing time: Sun 28 Jun 2026 12:01:45 +0000
Manifest this update: Sun 28 Jun 2026 12:01:45 +0000
Manifest next update: Mon 29 Jun 2026 12:01:45 +0000
Files and hashes: 1: XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl (hash: mGXWk00HmFcGvYGOnA8kJSCHA/LLJ5ojbHIArItYVa8=)
2: i5WP_AihTIXhPy_BVXYv71HxOto.roa (hash: VJGbYlBp9HGyGJZxGUnm0bEpFbqRPbJagnJqTdbqGUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:1b:6b:b6:f5:76:8f:8b:bc:4e:a1:c6:c4:1e:c6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e67660af7523c61b7f95d08488d583e9d514f6b
Validity
Not Before: Jun 28 12:01:45 2026 GMT
Not After : Jun 29 12:01:45 2026 GMT
Subject: CN=d0fe5345dc3bbd0587ba3bdce688f6c2e1f1470a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:fe:00:1a:cb:53:76:74:1c:9c:51:f5:e6:b5:
25:3a:ed:d9:0e:1f:92:9f:3a:9d:5b:c2:bf:2f:a2:
ec:7f:c3:04:4c:7b:af:e0:08:cf:30:b8:3f:da:4c:
6c:5b:8d:34:6e:8a:a0:36:81:3a:ba:73:fa:0e:7b:
09:db:49:e3:5f:2e:6f:42:6b:35:c1:9b:ed:97:f0:
fb:d7:c6:d4:44:e8:21:d1:22:5c:08:18:9c:bd:0a:
29:ff:e5:61:ed:28:d0:63:14:0e:4d:81:97:3a:64:
0c:42:d9:c1:8f:48:ef:cd:7e:3c:ad:b1:79:e5:92:
25:b0:17:4a:f7:a1:07:96:56:69:ea:ce:74:c9:2b:
af:19:4b:90:5b:68:9a:c0:84:18:3e:c6:7c:af:16:
2b:c5:25:30:09:4b:70:06:48:ac:b5:90:05:2b:db:
ab:42:b1:ec:71:2f:d1:16:c1:c5:bb:af:28:2f:a2:
e3:83:7f:e7:6b:fb:2b:4d:93:6b:c1:bb:c5:e1:13:
b5:9b:c8:f5:a5:77:49:84:22:a0:6f:ec:c5:e3:5a:
f0:2c:9e:88:08:fc:b1:5c:c5:da:f6:b9:e8:d4:5a:
3f:f6:7b:bc:8a:0a:ce:74:2e:cf:97:1a:24:77:ff:
c5:c1:85:6f:72:89:ba:75:da:ef:4a:d9:70:0d:20:
2a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:FE:53:45:DC:3B:BD:05:87:BA:3B:DC:E6:88:F6:C2:E1:F1:47:0A
X509v3 Authority Key Identifier:
keyid:5E:67:66:0A:F7:52:3C:61:B7:F9:5D:08:48:8D:58:3E:9D:51:4F:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmdmCvdSPGG3-V0ISI1YPp1RT2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9786da-1f4c-408c-b202-00d2fac5f010/1/XmdmCvdSPGG3-V0ISI1YPp1RT2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:51:cf:d1:5d:80:03:f6:d8:f2:cb:d0:8d:e4:29:e4:75:19:
4d:d9:18:5f:03:3d:f6:85:d4:f1:58:b7:f6:fc:67:56:f8:d9:
34:35:e4:4f:65:a2:0c:67:98:e5:59:5a:aa:34:0a:77:37:ce:
88:40:71:93:5a:d6:64:72:70:cd:fd:53:dc:68:92:0e:af:77:
c5:12:b6:95:14:ec:ed:ca:f3:f7:02:10:26:19:84:99:d7:cb:
f9:bb:38:d9:ae:da:81:fc:ea:7e:07:c7:f7:b2:00:f9:2c:f2:
e1:1f:10:a9:9b:a7:aa:77:40:41:53:4c:c7:87:38:58:a4:40:
a5:d4:ca:b2:7e:9f:41:d1:75:06:e2:4e:3b:e6:00:16:5d:58:
1d:17:7f:26:5d:a3:6f:5b:08:7c:98:bf:92:ed:b4:0b:9c:6b:
e1:35:b3:b0:5d:89:2e:e2:61:23:44:9e:ab:00:2b:c7:4d:75:
7c:81:c1:4a:e3:50:8b:3d:e3:c7:9e:69:2f:d6:f5:09:8c:c0:
15:cf:87:49:c3:e9:45:43:04:2f:42:b4:3d:d4:a9:b9:a0:b2:
54:1f:1e:87:7c:88:01:2a:0d:5e:1d:e6:31:5e:9e:07:10:f6:
0a:e8:3d:6e:7c:60:6b:3b:aa:9c:92:06:89:6d:ed:fd:db:ed:
1d:96:b5:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 16:20:43 2026 by rpki-client