Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
File: XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft (raw, json)
Hash identifier: 1diTq/9twQqQv5df/c6YdGugUer9bIavzQi/TlqTeUo=
Subject key identifier: 14:77:3C:43:8E:65:B7:81:8A:E1:85:B4:86:A9:24:AE:CC:75:5B:84
Authority key identifier: 5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
Certificate issuer: /CN=5d41d330dc8c7293e729451db2646383838e3f8c
Certificate serial: 019F11F818B677A2DB4D67F14BE4452A60A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
Manifest number: 0177
Signing time: Mon 29 Jun 2026 06:01:39 +0000
Manifest this update: Mon 29 Jun 2026 06:01:39 +0000
Manifest next update: Tue 30 Jun 2026 06:01:39 +0000
Files and hashes: 1: XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl (hash: mfItqryKJZB3rBpC00Zte7m6YpyXDIHq0Q6Hfbh1Hgw=)
2: hFrzrATwthoWhcz0MUU5me2hxsI.asa (hash: qasjw1PBGin1L+tvp/txSHK72tERURo1h0R6cieBtNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:18:b6:77:a2:db:4d:67:f1:4b:e4:45:2a:60:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d41d330dc8c7293e729451db2646383838e3f8c
Validity
Not Before: Jun 29 06:01:39 2026 GMT
Not After : Jun 30 06:01:39 2026 GMT
Subject: CN=14773c438e65b7818ae185b486a924aecc755b84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:1e:ce:6c:f0:12:f2:ec:a5:a5:c9:83:89:
b4:6c:90:01:6f:76:33:1f:7f:3e:94:c1:c8:0c:03:
7a:46:d9:65:d1:fc:6b:3c:2f:80:50:97:f7:4c:dc:
9b:a7:80:22:31:1c:66:ea:dd:1e:42:be:f8:54:ac:
1d:dd:bc:03:ff:f9:81:3b:c8:84:6a:3d:32:72:71:
9d:41:f0:d0:72:f9:d7:a4:d4:66:2c:a5:b7:2c:67:
a4:03:08:9e:9c:e0:f8:9d:d6:ba:bc:35:f0:33:95:
3d:d1:bd:32:e7:a7:14:fd:87:d7:53:39:84:17:24:
f7:79:0a:e3:8c:ba:49:97:2e:b5:2c:f1:b4:cd:aa:
9b:0a:19:b2:24:84:6a:43:f6:f0:00:59:8d:19:55:
54:90:c2:79:19:58:8c:67:a6:81:e8:c1:98:12:e2:
36:85:e2:44:76:19:1b:d2:76:69:e0:38:96:7f:63:
e6:70:54:20:7c:68:8c:3a:fb:be:4f:e5:d3:18:e4:
7c:33:35:e6:7d:7f:0f:84:6e:15:87:4e:65:de:2a:
3a:e8:26:aa:18:e6:ea:7d:8d:43:7d:65:34:c2:6a:
1b:4d:a2:37:55:da:ea:49:68:f3:c2:11:b2:bb:4e:
0e:cd:fb:2d:a6:82:e2:46:d1:6d:13:81:f0:65:bf:
74:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:77:3C:43:8E:65:B7:81:8A:E1:85:B4:86:A9:24:AE:CC:75:5B:84
X509v3 Authority Key Identifier:
keyid:5D:41:D3:30:DC:8C:72:93:E7:29:45:1D:B2:64:63:83:83:8E:3F:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XUHTMNyMcpPnKUUdsmRjg4OOP4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/695cf2-2bfa-4628-943b-5c7a8fd5b2df/1/XUHTMNyMcpPnKUUdsmRjg4OOP4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:db:dc:5e:54:c4:e0:be:27:d5:f1:31:b8:60:43:9e:88:ae:
df:e5:ec:84:69:b4:d5:0c:94:c6:86:f3:be:8a:71:5f:bf:f9:
de:5c:ae:9e:73:64:a0:80:7b:eb:70:e6:bd:c9:a7:f5:2b:8c:
1a:ab:53:62:20:d1:86:4e:d7:66:fe:fe:e0:7e:c7:47:e4:22:
8e:5b:e1:9a:b0:41:93:53:8f:0c:58:59:33:a4:40:27:3b:87:
58:1e:1f:b7:94:85:47:6c:b8:8e:8f:ef:9c:10:4a:40:30:76:
8e:4d:2e:82:9e:be:a7:fd:25:2c:ea:60:8f:07:9f:72:af:9d:
87:58:5a:84:cb:5a:30:54:fe:ae:ed:e2:d3:d7:cc:85:48:b4:
cc:00:cb:94:9a:e3:7a:6b:d0:fc:66:2d:84:0a:8f:03:3d:2a:
97:cb:01:ce:87:c9:ab:7a:4d:24:46:23:e9:2e:c8:54:2d:e2:
56:93:42:b5:91:52:4d:73:c5:42:67:6c:45:3c:48:3a:4b:0f:
24:02:6c:c8:ca:9c:1d:a0:8e:a4:10:31:40:e9:69:b0:59:f4:
fe:ca:cc:60:51:28:2f:9f:7d:fe:60:ae:7e:9e:be:0b:46:44:
8c:75:04:4b:67:30:40:66:07:c4:ab:0b:c4:ff:3b:4a:3a:95:
8f:c1:4d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:49 2026 by rpki-client