Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
File: xeFyhy63vvCWXfE7D8XWXnU3Chk.mft (raw, json)
Hash identifier: HtEBmPFRfip6ApIHj8ZP1DWN6tpGLz9ueQ/zC/2/BN0=
Subject key identifier: 14:55:82:49:1D:B7:04:60:04:B6:DE:3F:87:4E:12:55:17:B4:1F:57
Authority key identifier: C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
Certificate issuer: /CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Certificate serial: 019EF9B99F390B18A5B73A6FD7849C173E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
Manifest number: 1979
Signing time: Wed 24 Jun 2026 13:02:32 +0000
Manifest this update: Wed 24 Jun 2026 13:02:32 +0000
Manifest next update: Thu 25 Jun 2026 13:02:32 +0000
Files and hashes: 1: BQKL8EXCPvyOQg1ICU181HzsTLY.roa (hash: MQTZW+TVECgfYFhuLaoeF6hUd6ELHRAnYHxRk4WvfLE=)
2: FxY1RAn7Uc02QNfQHdB91asNvfo.roa (hash: XFxgE3CskWpWNCg7s6TQKuMZYsJq+2wXqoHIuIsrGSk=)
3: mvSatyfuo61e-RTaG2TAjXDZEec.roa (hash: Wd+3k5bQsb75PtYForkA7tIC7S5S2MMNM7YiFG0yOOs=)
4: xeFyhy63vvCWXfE7D8XWXnU3Chk.crl (hash: w99ky5OTtcKp5Q9S+4LIj58WZL3e7eZqfhW3YLUXcVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:b9:9f:39:0b:18:a5:b7:3a:6f:d7:84:9c:17:3e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e172872eb7bef0965df13b0fc5d65e75370a19
Validity
Not Before: Jun 24 13:02:32 2026 GMT
Not After : Jun 25 13:02:32 2026 GMT
Subject: CN=145582491db7046004b6de3f874e125517b41f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3d:28:34:8c:b8:81:3d:f5:24:93:38:70:2d:
82:bd:05:21:16:c6:63:f0:d2:8e:a4:7b:89:af:e8:
c9:67:1c:da:d9:dc:95:10:ae:12:f1:4d:67:bd:b5:
5d:39:85:df:5a:7b:62:6e:2c:7d:18:d7:5f:b4:28:
a9:a5:7f:26:aa:23:f9:a5:f8:e0:a0:f6:37:ef:1d:
5a:82:1c:69:ad:a8:17:32:66:ff:bb:12:aa:63:8c:
27:05:76:68:a9:cd:26:be:db:90:70:12:02:60:b5:
89:14:3d:40:c8:ed:70:7d:d1:08:3f:bd:75:13:ce:
7f:55:1a:b8:4c:cb:7e:fb:d3:09:c2:2c:b3:2e:e2:
fc:91:98:65:bf:0d:ed:41:12:62:a6:04:b3:cb:75:
3f:9d:04:3f:02:72:cd:0c:d0:6d:28:3e:44:6b:c6:
44:ff:ee:b4:4d:30:7d:a2:99:3a:49:83:39:b3:a2:
ae:cf:62:df:cf:b6:45:fe:a3:7a:91:f8:df:b7:4c:
a1:fc:99:cb:25:1b:08:97:3b:c4:b5:af:89:bb:28:
70:62:e1:a4:2a:6a:5c:50:e0:81:e2:74:08:a8:1a:
06:83:15:d0:1d:2b:59:74:76:00:98:bb:d0:7a:c7:
a3:5a:8b:d4:03:84:4f:b4:f5:ed:54:b2:2b:c2:20:
f4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:55:82:49:1D:B7:04:60:04:B6:DE:3F:87:4E:12:55:17:B4:1F:57
X509v3 Authority Key Identifier:
keyid:C5:E1:72:87:2E:B7:BE:F0:96:5D:F1:3B:0F:C5:D6:5E:75:37:0A:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFyhy63vvCWXfE7D8XWXnU3Chk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/7f0d3c-bbd9-4fee-b60b-c465d8902c1b/1/xeFyhy63vvCWXfE7D8XWXnU3Chk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:33:53:a0:33:fd:d2:70:61:74:2a:50:a6:98:21:46:03:85:
ab:de:71:6b:64:d2:77:cf:77:b8:b4:a1:ea:41:f1:91:28:3b:
b5:b2:b2:45:c4:c9:99:c8:e9:8f:fd:c4:43:6e:9e:d4:ad:d0:
f0:31:7b:52:90:8b:41:e6:8b:bd:42:97:f2:04:84:1e:9b:ce:
8b:25:c7:42:c9:c0:5a:8b:56:2d:97:dc:45:86:98:cd:20:b5:
6e:4d:60:32:71:2a:6f:b2:6d:e4:81:b5:20:6f:bf:8f:2c:9f:
ab:21:0e:b4:19:bc:78:9c:ca:89:e6:30:39:f0:ac:b8:37:77:
4d:bc:d4:e2:65:da:c9:f0:12:91:c7:37:9f:7e:48:b5:b9:58:
25:82:69:82:96:4f:4b:f7:fc:56:2e:3f:a9:48:45:1f:c2:d4:
94:63:34:e6:42:77:f5:0b:ab:a6:dc:cd:0a:50:ff:e1:b0:48:
91:b8:a1:97:75:98:df:3e:74:74:f8:8a:d5:14:cf:c0:73:9c:
81:de:87:4a:8b:a1:66:ef:50:a5:91:ba:75:84:4e:8a:f8:6c:
e4:26:58:98:33:b0:46:43:30:d6:f1:22:52:94:35:44:8c:f8:
16:18:3f:d0:b1:00:f3:b9:a5:0a:e2:f4:99:e2:8a:fc:db:fc:
79:81:0e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:16:42 2026 by rpki-client