Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
File: xN_w4VI3gFUHr10Dq-3riDK0uMs.mft (raw, json)
Hash identifier: QIgX8HOAWkbZN6uhvLqIKpRj5VbDsixVsfI/sdUWuR4=
Subject key identifier: 8A:67:8B:CE:91:12:3B:0F:26:19:76:43:0B:00:34:6C:E6:0A:17:84
Authority key identifier: C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
Certificate issuer: /CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Certificate serial: 019EB76A004062E2B37E237216EF719DC784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 16:00:37 +0000
Manifest this update: Thu 11 Jun 2026 16:00:37 +0000
Manifest next update: Fri 12 Jun 2026 16:00:37 +0000
Files and hashes: 1: EEs8_2SQ9wdEKnETnYAXwnbvPvI.roa (hash: CFxGxtKRpFSwMaRFJt3q5WoVWboKnoyoeoco0rArRao=)
2: xN_w4VI3gFUHr10Dq-3riDK0uMs.crl (hash: qrmFwsaJOqly3n+ZbiBZWHzaRvRaJxlcVP7MPsLDNoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:00:40:62:e2:b3:7e:23:72:16:ef:71:9d:c7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4dff0e15237805507af5d03abedeb8832b4b8cb
Validity
Not Before: Jun 11 16:00:37 2026 GMT
Not After : Jun 12 16:00:37 2026 GMT
Subject: CN=8a678bce91123b0f261976430b00346ce60a1784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3d:f7:d5:bb:03:a5:7e:ae:0e:a5:6a:87:4d:
17:d6:b0:8e:7a:47:5d:6d:db:52:0c:cc:da:93:6f:
d8:1f:16:0c:a4:d5:ce:8d:a1:43:61:99:7a:35:25:
b8:01:e4:0b:f4:82:b9:02:a7:56:f7:91:58:86:fc:
99:64:7e:78:7b:19:d1:e4:ee:dc:e4:dc:f0:74:66:
d2:8b:e9:c4:6e:bb:54:2e:4f:02:87:21:d2:0a:53:
56:06:7e:ac:60:6a:9e:fe:d9:4b:6c:66:6e:60:1c:
d6:24:f9:65:07:78:71:86:95:f3:64:2e:48:27:7b:
fc:a9:ce:2c:f5:78:e4:6a:53:64:ba:60:74:69:60:
3e:05:15:ba:08:cd:05:86:42:02:2e:eb:ae:79:66:
82:f6:a7:b8:2a:c6:09:ae:89:24:04:36:d3:d9:e9:
7b:2c:e3:b4:bb:c5:73:d8:de:88:53:4a:39:41:f0:
f0:59:39:3b:da:4c:ca:0a:ae:97:93:14:f4:f0:4a:
2f:9b:ed:54:1b:37:04:26:08:78:c5:9f:e4:96:4e:
49:e2:26:5a:31:11:56:c7:58:ed:97:12:98:da:ce:
81:3d:17:9b:2e:5c:b1:94:5e:63:c1:1a:54:13:82:
e6:d9:f8:83:73:6e:97:d1:4d:e2:0a:3d:d4:f7:b7:
95:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:67:8B:CE:91:12:3B:0F:26:19:76:43:0B:00:34:6C:E6:0A:17:84
X509v3 Authority Key Identifier:
keyid:C4:DF:F0:E1:52:37:80:55:07:AF:5D:03:AB:ED:EB:88:32:B4:B8:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xN_w4VI3gFUHr10Dq-3riDK0uMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/15bd53-994a-46f2-9e6e-71887d0a83be/1/xN_w4VI3gFUHr10Dq-3riDK0uMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fd:6d:6c:8e:fb:18:3d:6d:30:47:6d:31:88:50:36:eb:db:
b3:77:6f:a2:3f:cf:60:0a:08:47:25:3f:54:ee:51:dd:17:6b:
50:2f:a2:61:ed:85:b5:aa:4f:ac:84:07:1b:e9:b5:ab:a5:3d:
46:37:d3:e7:bd:2e:79:0e:18:98:71:25:68:5d:e8:05:e5:8d:
3d:9b:51:51:5f:6b:5f:58:f8:c4:1b:8c:8b:af:bb:5e:d9:2c:
0d:56:31:4b:33:e7:8d:66:5a:5f:73:79:e4:ed:af:af:79:c9:
96:c4:c2:71:b8:3d:58:4b:f6:4b:57:a5:dc:4b:7d:c0:c8:fa:
83:68:0a:e2:a3:50:ad:fb:91:30:67:c7:e9:d4:21:20:0c:a2:
b1:60:47:15:69:6c:95:1d:40:c6:38:ce:c8:91:36:94:14:d9:
b4:04:8c:46:05:fc:f5:09:6f:18:23:29:23:b9:4e:88:c6:0c:
85:b8:12:50:19:84:74:fb:60:14:df:6e:28:c9:4f:af:e2:86:
44:29:cc:29:7c:31:01:ab:c5:23:c5:bf:42:04:07:9d:da:f3:
7d:a8:a8:af:15:c1:d2:9c:95:d0:c3:d7:d7:96:ad:62:81:5c:
6d:02:d1:48:54:38:76:5a:2d:10:c6:31:44:aa:c5:a0:10:05:
6f:cc:bd:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:00:03 2026 by rpki-client