Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: TZ4nMhdXKXAA9SOCiQUDXd8UuACzajSbozQ/hazri+M=
Subject key identifier: 39:25:95:8A:F8:6B:53:C7:9D:2C:58:B5:72:46:74:8A:9B:2A:62:6D
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 019F1265FE1692E6A72958D82FEB65DDCB16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 0976
Signing time: Mon 29 Jun 2026 08:01:41 +0000
Manifest this update: Mon 29 Jun 2026 08:01:41 +0000
Manifest next update: Tue 30 Jun 2026 08:01:41 +0000
Files and hashes: 1: 2jQx973K_WHIEDeBwoceaInwrVk.asa (hash: Xu/Sv3zfgccGu+NaMsUgY/a+THDNzPx1jfH33fWcIQ0=)
2: 4N_n1cCDT7wj_iB4XrMTAQ9PivM.roa (hash: MxvavFzCXv3bNh/z3UJzQ6ZzRkLADzDg48/vugWD+cE=)
3: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: jIYXI6XzAWSeszfrXBA5u0HIvU/rVQFoCGJQuCy/KeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:fe:16:92:e6:a7:29:58:d8:2f:eb:65:dd:cb:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: Jun 29 08:01:41 2026 GMT
Not After : Jun 30 08:01:41 2026 GMT
Subject: CN=3925958af86b53c79d2c58b57246748a9b2a626d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:50:a3:fa:80:c0:88:81:c1:4f:27:82:ca:eb:
a6:68:99:7f:dc:04:e2:ce:c2:aa:1c:b4:9c:49:23:
10:29:97:8a:9f:fc:24:1e:b6:5f:f2:08:c6:07:fa:
ef:3d:ef:2b:a7:e5:73:a6:93:94:66:84:57:de:90:
01:98:4f:f3:81:21:98:2e:6f:29:1d:04:ab:1b:5e:
97:48:8c:1f:b2:7f:61:f2:0a:b6:d4:ad:a5:fe:01:
e8:a3:8f:41:b5:19:75:a5:f2:fc:d2:b6:08:35:f0:
c9:35:b0:e0:27:a9:ac:0e:77:bd:47:08:5c:3d:c2:
10:a7:bb:c9:54:7f:1d:c1:10:c1:93:c8:1a:0e:ae:
2a:8a:b4:b8:c7:9d:2b:5a:0a:7e:e8:13:6a:02:3e:
c0:af:c2:13:b5:aa:9b:84:cf:3f:c0:5e:68:4c:2e:
dc:1b:63:13:6b:26:a4:60:b4:a4:cd:ff:55:91:97:
14:e7:ea:ff:60:11:01:19:51:a6:cb:f0:fc:5c:5a:
63:32:30:a7:c2:7d:2e:c5:25:7a:97:4c:93:57:98:
c5:c5:c8:20:0b:b7:2c:69:38:a7:35:ad:a5:61:e5:
b9:71:bc:95:ca:1d:75:0d:3b:b9:22:ab:ef:42:75:
e1:3a:56:bc:c7:4a:b9:29:82:79:ef:d0:79:f5:98:
7e:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:25:95:8A:F8:6B:53:C7:9D:2C:58:B5:72:46:74:8A:9B:2A:62:6D
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7a:c6:f7:86:8d:c7:58:0d:ed:6a:1f:fa:dd:34:74:3e:64:
5f:f0:ad:3d:88:8c:d4:3c:ef:50:95:ac:ba:5b:c9:ca:eb:32:
79:43:42:e1:73:6e:50:7e:4e:15:a6:94:75:d0:45:d4:f2:e1:
6f:47:d5:9e:2e:d4:3c:b0:c7:af:52:e3:d3:c2:79:f3:e1:cf:
17:a4:d2:2b:4f:ad:88:39:20:4f:26:ae:87:a7:7c:84:75:0b:
35:23:8b:e2:b9:48:17:b9:f4:a7:51:fe:c0:17:e7:ad:a2:61:
13:a4:e8:83:ce:80:6e:de:5e:46:9c:cf:36:c2:db:5a:be:b2:
47:dd:10:52:ac:a3:fc:08:24:fe:22:1c:68:ea:2f:1d:b2:45:
ec:fc:41:9f:4d:d7:7d:a3:fe:09:4a:86:ed:ab:9d:4a:71:95:
97:8a:3e:27:3c:d0:93:6c:03:fa:53:91:f8:b0:09:4a:15:d6:
e3:19:2a:1c:74:1d:97:85:fb:3c:c3:3a:40:a2:44:d7:c4:66:
b4:77:95:d3:f0:67:8f:1b:aa:29:1d:13:e4:29:2b:49:3a:33:
df:1e:77:b4:9f:a0:ea:66:59:61:a9:59:df:c1:06:0a:38:7e:
02:c0:ca:fa:69:92:bf:d7:c5:ad:0d:57:1d:a8:1c:37:27:b3:
f0:68:5c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:48 2026 by rpki-client