Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
File: xX4MBpirwZpWiv7OaxkM7QM6coU.mft (raw, json)
Hash identifier: VH1FgLlNO3XyKWlMe7wNWfNk0+m8A7+U12+snG/EEhM=
Subject key identifier: 75:D9:18:84:B9:DC:F9:A2:5E:C0:26:AC:D4:B9:B4:6A:A8:46:53:66
Authority key identifier: C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
Certificate issuer: /CN=c57e0c0698abc19a568afece6b190ced033a7285
Certificate serial: 019EFC164ECB37EBC9549309F6F427B3602A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
Manifest number: 1878
Signing time: Thu 25 Jun 2026 00:03:00 +0000
Manifest this update: Thu 25 Jun 2026 00:03:00 +0000
Manifest next update: Fri 26 Jun 2026 00:03:00 +0000
Files and hashes: 1: hvm-1sw6yKhG-M4wHJ1S06-4bQ8.roa (hash: tKs3IGxy6JfH17/EICz+WfGgz3jmWl7OeQzPl058cdo=)
2: rHb_iz-JiMdt3RDI2-qf4obfFyQ.asa (hash: PB1OmdbHMMh/Gs2lwxTkfdhg+R2oRe0ZvKNcBWEoM4Q=)
3: xX4MBpirwZpWiv7OaxkM7QM6coU.crl (hash: 8r9/qWVvU3fjAdrpURDiepXsj8k2+tVuJsiwldA3HNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:16:4e:cb:37:eb:c9:54:93:09:f6:f4:27:b3:60:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c57e0c0698abc19a568afece6b190ced033a7285
Validity
Not Before: Jun 25 00:03:00 2026 GMT
Not After : Jun 26 00:03:00 2026 GMT
Subject: CN=75d91884b9dcf9a25ec026acd4b9b46aa8465366
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f9:fb:54:d9:90:27:a2:19:ac:21:2f:04:73:
e1:3b:7d:c5:5c:0f:35:58:4a:10:8f:d4:e4:12:ec:
00:43:46:43:6e:0b:0d:14:b3:56:39:74:11:46:78:
39:25:67:ae:56:b1:c2:6e:e3:2e:74:b2:8d:e1:41:
71:c7:26:e0:c8:77:8b:69:9a:41:9f:0d:c0:32:7d:
8d:bc:37:e8:e8:c8:ee:9b:5f:c3:f6:22:a7:38:b4:
e5:5b:be:53:7c:12:33:3f:53:b5:fb:ad:29:c0:e6:
fe:13:5d:4c:1b:ee:19:82:f9:0e:65:a9:35:e0:84:
65:c7:20:7b:af:3a:d6:bd:73:04:ad:51:82:b7:68:
7b:6c:ea:b7:83:79:f1:cd:af:b4:f4:cb:2d:35:9b:
d5:e0:05:04:0b:9c:eb:b3:f3:96:bd:43:80:13:b0:
d4:e6:a8:43:f1:09:cd:b9:4f:34:4f:27:18:d7:b1:
75:ff:22:c6:77:d2:34:c7:3c:ba:07:ba:68:8f:69:
3a:56:41:32:39:77:90:32:8f:2d:57:7c:16:54:fc:
d0:13:f8:5c:de:ac:cf:44:2c:80:51:be:ca:79:e5:
44:c9:3d:60:04:97:25:f5:ad:3d:8c:f4:de:45:62:
2d:59:2a:35:87:b7:06:04:7c:ba:31:0c:e6:03:c9:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:D9:18:84:B9:DC:F9:A2:5E:C0:26:AC:D4:B9:B4:6A:A8:46:53:66
X509v3 Authority Key Identifier:
keyid:C5:7E:0C:06:98:AB:C1:9A:56:8A:FE:CE:6B:19:0C:ED:03:3A:72:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xX4MBpirwZpWiv7OaxkM7QM6coU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/4a8d2a-664b-4464-a4e9-1709f7c7d5e8/1/xX4MBpirwZpWiv7OaxkM7QM6coU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:e3:c7:9f:77:e6:5e:d7:ab:e2:d1:68:4e:ce:e3:c9:47:15:
77:bd:0c:75:54:76:be:88:97:67:33:27:23:d5:e5:fc:69:33:
1f:a0:f8:72:84:83:3f:b8:ce:56:37:56:14:ec:73:ea:32:a3:
7b:31:cd:b9:0d:6f:62:b1:30:bf:87:72:2e:53:1a:e7:7a:90:
08:70:11:f4:1c:da:aa:1a:ae:ca:6e:91:d2:34:f7:65:17:dd:
4f:03:19:66:66:a1:dd:59:f7:14:01:3a:17:fb:63:f2:3d:7b:
8d:69:b8:8d:b6:3d:45:2d:40:b0:67:0f:a3:47:1d:0c:9d:f2:
ec:c4:6b:73:f8:ad:ee:2e:e4:f7:aa:58:0e:84:9b:75:ab:2e:
27:33:b7:63:f6:5b:4d:97:c8:7a:20:05:f9:81:07:f5:cb:db:
23:09:a5:75:7a:e7:0b:0d:40:7c:06:3b:df:06:3f:6a:2d:bb:
41:37:e7:18:9a:f1:69:4e:dd:3e:ae:a4:82:f1:97:45:14:86:
6b:38:c7:9b:1b:60:03:d5:aa:49:3e:f2:de:48:8a:1a:8b:3e:
47:74:63:c5:1b:99:d2:0e:e5:38:d8:4a:07:66:56:3e:76:dc:
ac:99:48:d7:4b:f6:4c:02:a7:e2:b4:ca:a2:38:41:6b:9d:4d:
60:0c:0e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:29:33 2026 by rpki-client