Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/xluczuIXFpquuX32PXlM5C2OCzk.mft
File: xluczuIXFpquuX32PXlM5C2OCzk.mft (raw, json)
Hash identifier: FAN6RPKRTWlWLdVQ/iDRcCopzrCEcGTcrKKXHdtO/jo=
Subject key identifier: 2A:49:B3:42:88:9F:40:28:F7:B0:23:EB:3E:BD:71:AF:81:48:42:80
Authority key identifier: C6:5B:9C:CE:E2:17:16:9A:AE:B9:7D:F6:3D:79:4C:E4:2D:8E:0B:39
Certificate issuer: /CN=c65b9ccee217169aaeb97df63d794ce42d8e0b39
Certificate serial: 019EBA347BDD1A40B8705D201BA88EE2CA39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xluczuIXFpquuX32PXlM5C2OCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/xluczuIXFpquuX32PXlM5C2OCzk.mft
Manifest number: 09
Signing time: Fri 12 Jun 2026 05:01:02 +0000
Manifest this update: Fri 12 Jun 2026 05:01:02 +0000
Manifest next update: Sat 13 Jun 2026 05:01:02 +0000
Files and hashes: 1: 5FLfpE4KlwxC7ZvAFArzl5Hc3i4.roa (hash: DbaePoFlnRucuxr0jFGS0oGqHjeI8ypmeMrBFsWmM0M=)
2: xluczuIXFpquuX32PXlM5C2OCzk.crl (hash: 5PYRp+CbKa26H06atQt3Nwd+t83T22BbU0kfJpaa2xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/xluczuIXFpquuX32PXlM5C2OCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/xluczuIXFpquuX32PXlM5C2OCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xluczuIXFpquuX32PXlM5C2OCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ba:34:7b:dd:1a:40:b8:70:5d:20:1b:a8:8e:e2:ca:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65b9ccee217169aaeb97df63d794ce42d8e0b39
Validity
Not Before: Jun 12 05:01:02 2026 GMT
Not After : Jun 13 05:01:02 2026 GMT
Subject: CN=2a49b342889f4028f7b023eb3ebd71af81484280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:93:2b:33:f7:2c:f5:a8:5a:d5:77:fc:98:81:
92:1b:81:f0:3b:c9:6b:cb:f1:25:64:63:bc:fd:12:
f1:60:14:5c:8a:b5:50:ab:0d:6b:02:81:8c:0d:ae:
15:d0:5d:bb:75:68:e9:99:ce:8f:f4:61:43:66:45:
f1:be:9e:a5:3f:80:24:f5:1b:f0:e8:a4:d0:a5:c3:
6a:95:38:ba:16:dd:7c:f5:56:46:08:fc:75:94:bc:
8f:32:ca:05:a1:50:11:12:65:f1:09:b1:1a:2f:66:
5b:ed:14:02:1c:cc:b9:b6:08:88:2a:2f:75:a8:c4:
58:74:35:92:8e:0a:48:4a:67:b0:9e:27:17:67:7f:
3b:18:22:68:dd:0a:bf:52:2c:3e:70:33:c7:73:87:
96:0e:18:4b:80:1b:03:35:e3:47:f7:57:ab:87:7f:
79:1b:25:d5:e5:20:87:64:8f:67:38:af:1e:7a:e1:
d7:e0:95:c4:40:a3:ce:64:02:d6:9d:7e:f9:5b:89:
6d:44:65:9d:c6:36:5c:57:0c:99:6a:a1:77:6e:8a:
80:e1:81:39:45:ca:7d:d6:7d:c2:71:c3:dc:1b:00:
5c:bf:07:c5:96:cb:8d:d6:62:58:03:44:2c:64:9f:
5d:ed:95:71:45:e7:4f:f4:f6:ad:b2:bc:53:6d:a1:
ad:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:49:B3:42:88:9F:40:28:F7:B0:23:EB:3E:BD:71:AF:81:48:42:80
X509v3 Authority Key Identifier:
keyid:C6:5B:9C:CE:E2:17:16:9A:AE:B9:7D:F6:3D:79:4C:E4:2D:8E:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xluczuIXFpquuX32PXlM5C2OCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/xluczuIXFpquuX32PXlM5C2OCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/76d0ea-48ad-4be1-a799-df3796b34856/1/xluczuIXFpquuX32PXlM5C2OCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a6:f9:c2:ca:9f:00:79:fe:a8:e8:27:a8:46:1e:f9:6a:59:
ee:f8:78:69:5c:ed:b1:90:d7:f3:88:0d:55:c4:16:64:64:d6:
d5:88:f4:de:75:47:a3:91:ca:0d:de:35:49:8c:23:d1:31:7a:
15:00:fc:7a:51:ea:23:17:f5:38:20:81:f4:5a:7a:b4:e5:2b:
d0:46:c6:8f:15:9b:8b:80:e3:9d:bf:5d:b3:81:75:5e:da:ae:
41:2c:10:21:0c:26:cb:5e:15:b3:51:e3:9f:99:03:68:a4:56:
91:3b:6e:8c:72:07:98:c7:f6:3d:d3:23:8d:64:31:3a:1b:60:
a0:e9:80:e8:25:73:20:5c:01:41:cc:aa:46:a5:24:49:dc:be:
18:08:9a:6b:6c:ac:4f:91:86:92:5e:74:db:e7:1e:f1:9e:68:
b5:ba:30:7b:1d:2e:8d:cd:40:b7:c5:85:70:48:87:c7:9e:81:
69:df:54:06:98:1a:c7:7d:c2:50:8c:55:4c:a4:3e:7f:92:39:
16:06:2a:af:d2:7c:9d:5d:4d:6f:35:1e:a7:bc:ba:df:44:4e:
be:0e:7c:a5:c0:6f:d7:04:79:d8:bf:7b:3e:11:af:b5:fa:29:
d2:9f:c5:12:21:3a:ef:2d:8f:72:f3:2f:b4:aa:ce:4f:1e:25:
c2:79:26:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 08:42:30 2026 by rpki-client