Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: /zExm1JEDAq5DUHO/62rVRIVnV3Q570s4vPwh1ynPGc=
Subject key identifier: B7:28:C6:6C:1D:F2:23:44:33:92:44:B0:4E:5A:6D:4C:6D:76:9F:20
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 019EB921162C0E5F6C598925293F242549F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 1973
Signing time: Fri 12 Jun 2026 00:00:13 +0000
Manifest this update: Fri 12 Jun 2026 00:00:13 +0000
Manifest next update: Sat 13 Jun 2026 00:00:13 +0000
Files and hashes: 1: vvOgIMkDpg0381NKvOJ6xEsVrhU.roa (hash: Ilfe2d/82ILTFX47xfIYllXXNOO6y9+T+nkxBpSb/2g=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: oqUYVaVotaTGWqZmM52t4NrrdwJmeLk12CphwotR+iU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:16:2c:0e:5f:6c:59:89:25:29:3f:24:25:49:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: Jun 12 00:00:13 2026 GMT
Not After : Jun 13 00:00:13 2026 GMT
Subject: CN=b728c66c1df22344339244b04e5a6d4c6d769f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c9:a8:5d:53:63:3d:53:42:37:50:7f:41:dc:
b2:06:86:0c:67:c1:55:85:74:87:7f:eb:ea:92:9f:
ad:29:bb:38:eb:43:63:08:4a:17:a0:0d:35:bf:38:
31:cd:91:b1:96:67:02:f6:cf:21:c2:5e:58:27:67:
9c:71:b5:b2:4d:d8:ec:b4:2f:c8:f3:fb:09:58:07:
7e:d8:6a:b2:50:7d:4b:6d:fa:10:82:e5:36:da:55:
4c:d0:b6:0b:50:ab:2d:bd:cc:69:8e:b9:66:b1:82:
a6:60:b8:f9:ef:58:43:79:7e:24:1f:85:a3:ac:0b:
23:7a:b6:09:37:33:4e:e7:ac:e1:fa:04:81:78:20:
67:9b:e7:e7:da:42:99:2b:9a:72:fd:0e:2a:52:05:
18:06:53:7e:10:6d:12:c4:02:79:59:46:15:d5:f9:
e5:bc:2f:9e:42:3f:ce:30:f9:0a:b7:33:8c:d9:25:
44:9b:28:6c:9c:c7:9a:14:28:5a:d6:53:57:11:29:
a9:57:ba:50:2c:52:5f:31:65:54:5f:06:6e:f9:b5:
56:a6:4c:0b:1e:f6:09:91:e3:eb:74:5c:76:30:70:
86:ca:19:09:a3:15:a8:72:d9:2c:7d:5a:4e:45:f4:
6e:47:d9:60:69:0a:d7:05:ac:45:31:2d:87:90:8e:
bf:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:28:C6:6C:1D:F2:23:44:33:92:44:B0:4E:5A:6D:4C:6D:76:9F:20
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:fb:dd:fb:f8:26:cd:42:be:08:34:75:87:93:64:ec:58:ce:
5d:4d:b9:62:19:0b:f4:ba:6b:7a:0e:81:09:09:7f:20:1d:e8:
c7:2c:eb:be:6b:8e:84:19:67:f0:32:d7:4d:3b:39:9a:f7:41:
ea:cc:9f:1d:a8:6d:cf:d4:2e:4c:64:27:1b:67:d6:98:4b:e6:
cf:52:39:37:7f:da:0a:c2:e5:1c:58:36:cc:4e:55:6a:fb:f1:
94:54:1d:a1:6b:d2:16:c8:a8:33:8d:64:8b:b6:c5:ba:68:e8:
ee:64:e4:fc:87:c8:a6:8b:78:24:33:88:55:ee:31:fd:0f:ba:
da:f5:cb:78:a1:0f:21:57:a9:c5:1c:bd:01:6d:cd:9c:5a:11:
b4:37:d6:52:b6:4c:16:a8:b7:ce:98:7f:ba:e6:bb:6a:69:90:
6a:c3:cb:4b:78:c7:6e:86:85:5c:4e:44:d4:56:48:f7:92:72:
15:8e:3b:14:0f:05:4f:37:c8:5b:50:43:66:ac:c5:a8:23:37:
a8:0e:0b:70:ea:11:68:46:ef:55:1b:4d:ad:b0:b7:8b:4e:59:
a1:c6:b0:c6:83:4f:aa:f0:31:5b:da:60:c1:1a:d5:b7:3d:2d:
90:49:9e:06:4e:f2:5e:9e:ed:8d:1c:92:04:c5:15:73:dd:5a:
a3:9b:ee:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:28:33 2026 by rpki-client