Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: 2VDJb2RChBKBb7HCh+X2Db4lO5ysEh8iohKTqg4fBe8=
Subject key identifier: 50:01:A7:4D:D1:C0:BA:13:15:96:18:C6:1B:2F:22:55:0D:B6:FC:91
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 019F122EF4949DB19EBD6A91F9D24248EC3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 07:01:34 +0000
Manifest this update: Mon 29 Jun 2026 07:01:34 +0000
Manifest next update: Tue 30 Jun 2026 07:01:34 +0000
Files and hashes: 1: RB5D86Eez18oD-QABqEilaFp2nQ.roa (hash: cNT5vI1+Epdr8/RiwTV50sHhN6dBP41X/USYdNru1kM=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: TnyYOvhMURUgeMG3zg2oL4p6xUI689829+eIPFF3iJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:f4:94:9d:b1:9e:bd:6a:91:f9:d2:42:48:ec:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: Jun 29 07:01:34 2026 GMT
Not After : Jun 30 07:01:34 2026 GMT
Subject: CN=5001a74dd1c0ba13159618c61b2f22550db6fc91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:d0:da:5b:a3:27:9e:fb:33:e8:21:07:c9:
df:f1:7b:1d:22:e5:72:7c:b2:13:34:0c:5d:6e:9f:
24:1a:9e:54:01:e6:69:89:e3:1c:03:62:dc:2d:19:
c8:20:3a:ce:f7:c0:2d:44:1d:f0:e7:23:fe:cc:13:
be:15:ee:3f:90:88:07:6c:b5:81:9e:bf:5d:8a:c9:
02:ba:ba:fb:ad:f5:d2:95:87:3c:9f:40:4d:39:ff:
75:0f:8e:a6:d7:bb:0f:20:97:46:dc:35:60:22:ee:
fa:a5:57:2e:49:30:2f:35:6b:47:b3:0c:9f:f0:d2:
38:64:33:e2:75:d4:69:2e:0a:ea:d6:0a:75:f2:c5:
c1:2d:ab:98:3b:0e:17:4b:dd:10:9a:a0:38:3f:f1:
13:8a:55:47:81:14:0d:12:a1:ed:e0:22:bd:91:74:
19:73:56:ae:d4:a8:fe:ca:5a:34:58:d2:c4:ee:15:
44:d8:16:ea:28:0b:b3:d3:a2:91:7d:5a:a9:19:a0:
12:a3:5e:71:3f:86:92:5e:92:1f:93:6f:55:e6:f2:
b3:0a:ad:cc:c8:c2:87:6b:92:ac:6d:70:f2:0b:ab:
c5:00:05:14:8c:2a:37:87:67:1a:86:c0:44:09:4b:
24:89:f7:f0:69:a7:04:74:f2:4e:d6:1b:8c:1d:d2:
82:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:01:A7:4D:D1:C0:BA:13:15:96:18:C6:1B:2F:22:55:0D:B6:FC:91
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e9:a0:05:b0:6a:39:1b:e8:2f:af:97:29:bb:d6:62:d1:ab:
a9:73:e6:60:0d:e7:dd:db:33:a6:ed:fd:61:c6:64:3f:54:0d:
1c:18:ee:c9:05:88:96:c0:24:fc:2d:b9:72:56:89:66:d2:58:
b5:35:74:b2:f3:b7:f0:9b:5a:e7:e5:bc:25:82:71:27:29:2a:
a5:0f:e4:57:1b:f1:a1:e4:f6:a1:8c:9a:55:db:93:1d:6f:f3:
9b:05:29:98:60:06:1e:9b:d7:9d:d9:73:96:1c:19:92:27:47:
24:79:f2:03:c2:45:3e:90:ca:8f:95:f7:47:04:e4:80:51:10:
1c:cc:11:a0:f5:de:e3:9a:ad:8a:ea:2d:ad:16:c1:e9:ff:d9:
55:22:37:9f:a7:cd:70:67:2e:8e:68:34:84:b9:a6:de:7f:72:
f3:a7:0b:cb:a2:d4:e3:26:bc:3d:12:52:5d:43:a6:d1:52:c0:
2d:11:21:1b:78:90:92:46:dc:76:a8:3e:5f:59:3a:29:a9:56:
ca:69:dc:ea:1c:8f:35:18:14:40:fb:64:3d:6c:cc:1c:16:e1:
aa:62:cf:42:fb:b3:c2:26:fc:ee:3d:24:05:3c:dc:ef:c5:8c:
61:cf:62:98:51:af:55:64:e2:7d:14:fe:9f:2f:93:22:b2:5a:
39:5c:48:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 14:52:40 2026 by rpki-client