Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
File: xYigeeTOtrskwjxSceRYPhzy-ak.mft (raw, json)
Hash identifier: syuo7+QkMX3qC6umb2Zp4NE1PC+vI/kTVf+DM2iN/8w=
Subject key identifier: 20:61:63:8B:D1:D9:85:5E:F0:97:B0:04:B0:B0:0D:F9:63:73:16:02
Authority key identifier: C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
Certificate issuer: /CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Certificate serial: 019F13AF04C4D0378E1DD14B4B37FB2CA8C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
Manifest number: 198D
Signing time: Mon 29 Jun 2026 14:01:04 +0000
Manifest this update: Mon 29 Jun 2026 14:01:04 +0000
Manifest next update: Tue 30 Jun 2026 14:01:04 +0000
Files and hashes: 1: Pt1Psw1-lXzUqfn0X0LMWdzipP0.roa (hash: 15BXKGLsn5CILBGoCHvyltyRe1OA4GGdr684IX7Rfck=)
2: xYigeeTOtrskwjxSceRYPhzy-ak.crl (hash: w4u0gUgSiCxtj1lSIvTmNv4yhiLUIgnHIEck+smYILA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:af:04:c4:d0:37:8e:1d:d1:4b:4b:37:fb:2c:a8:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c588a079e4ceb6bb24c23c5271e4583e1cf2f9a9
Validity
Not Before: Jun 29 14:01:04 2026 GMT
Not After : Jun 30 14:01:04 2026 GMT
Subject: CN=2061638bd1d9855ef097b004b0b00df963731602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e6:b7:11:d4:b9:cc:dc:c2:19:13:b9:fa:a3:
08:b1:95:3a:71:36:41:bc:8b:70:79:5e:45:50:6d:
0e:95:9e:ef:d5:c9:c0:28:62:9e:c3:1f:dd:21:44:
49:59:8a:1d:8b:0f:79:bd:ce:39:de:e9:42:03:fd:
ab:ef:ec:5d:4b:af:36:52:33:fc:c7:ad:c3:97:0a:
9c:5f:10:58:1b:ef:1f:75:39:75:25:d8:b6:e3:e1:
39:02:9e:c5:49:4e:e8:51:16:d7:8e:24:89:65:9d:
3e:b5:fc:87:9e:60:2b:42:7e:81:0d:40:42:eb:25:
07:65:74:9f:b7:15:d0:29:05:a2:38:69:f8:59:9c:
5c:2f:c4:ad:37:ae:5c:a3:ab:49:c9:3b:08:36:17:
02:44:c9:4e:83:e4:9c:a1:44:a3:5a:e1:c1:8f:0c:
bd:eb:11:12:24:c9:84:4f:64:29:01:e9:b9:06:39:
a3:de:33:fc:2a:40:d7:44:0b:cf:ee:29:86:d0:b6:
17:54:e4:d4:0b:48:98:ac:84:ac:92:d5:c1:ad:ea:
ee:31:7a:fa:61:42:08:76:05:3b:a4:21:7b:cb:78:
0f:89:62:31:6e:36:54:6e:2c:c1:2d:4a:f7:5f:1d:
77:41:18:73:d3:63:19:86:bf:ef:e6:3c:7d:87:74:
3d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:61:63:8B:D1:D9:85:5E:F0:97:B0:04:B0:B0:0D:F9:63:73:16:02
X509v3 Authority Key Identifier:
keyid:C5:88:A0:79:E4:CE:B6:BB:24:C2:3C:52:71:E4:58:3E:1C:F2:F9:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYigeeTOtrskwjxSceRYPhzy-ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/bb4b8f-b6a2-4d00-9612-17edb98bbb08/1/xYigeeTOtrskwjxSceRYPhzy-ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:95:5b:11:62:41:ad:a0:59:9c:f4:e3:c6:03:28:6d:61:73:
7b:5c:1f:3f:e0:6d:d9:bd:45:f3:77:6c:37:3c:91:d5:bc:3b:
d1:c9:ea:98:03:30:8b:e5:f8:cc:c3:77:04:6d:97:8b:18:3a:
61:63:ef:e7:a4:43:60:49:a1:1b:74:35:32:bc:a9:bf:ed:e6:
fd:2e:bf:cb:1f:a2:38:16:ea:af:dc:ce:f2:61:bf:1d:9c:5b:
ce:3e:25:16:2f:f7:3e:2c:d1:86:ab:b2:00:ef:86:13:4a:10:
23:2b:54:4e:58:e8:74:3c:fc:75:69:a8:81:c5:ba:87:40:85:
04:fc:a3:6b:45:11:5d:e1:55:b3:40:9b:05:f3:2e:a2:36:69:
0a:65:4f:c4:8f:5c:f3:91:01:3d:90:bf:7c:e3:69:d3:aa:1d:
b3:84:fb:b8:ae:f4:c9:f1:26:ff:52:81:47:07:43:58:8a:fe:
de:cb:74:d7:94:0f:c5:ac:e1:54:73:b2:70:8c:eb:2c:96:40:
8f:a7:0c:8e:a3:dd:bd:eb:d4:04:b8:61:0a:ad:4c:ff:cd:27:
92:b3:26:d6:ce:69:f0:5d:d5:f4:60:13:bc:b7:4c:2a:eb:c3:
65:fb:76:7f:e5:67:26:d7:16:fa:cd:4d:a5:68:9c:9c:6f:8a:
7d:cb:f2:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 20:23:36 2026 by rpki-client