Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/907f3e-75a0-48fc-972d-f8dcc805a84c/1/xGW8dSWUyRpA2KdKd7FFApzWMkc.mft
File: xGW8dSWUyRpA2KdKd7FFApzWMkc.mft (raw, json)
Hash identifier: TtHsgOwsjSoxmnHlU29b7iIe20epyyD2GZCUkPUJWVE=
Subject key identifier: 4B:68:95:8A:CD:47:B6:0B:69:C8:07:D4:B1:D6:F3:B6:2F:81:BD:FF
Authority key identifier: C4:65:BC:75:25:94:C9:1A:40:D8:A7:4A:77:B1:45:02:9C:D6:32:47
Certificate issuer: /CN=c465bc752594c91a40d8a74a77b145029cd63247
Certificate serial: 019F10ADC596990091F5883E50CBA4C68E06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGW8dSWUyRpA2KdKd7FFApzWMkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/907f3e-75a0-48fc-972d-f8dcc805a84c/1/xGW8dSWUyRpA2KdKd7FFApzWMkc.mft
Manifest number: 06
Signing time: Mon 29 Jun 2026 00:00:51 +0000
Manifest this update: Mon 29 Jun 2026 00:00:51 +0000
Manifest next update: Tue 30 Jun 2026 00:00:51 +0000
Files and hashes: 1: MmJX4RZpFVcPEPzykdVPHmvY04g.asa (hash: KIVj+A/Yxl9vwJ4fMz++PbowJSUgB0JKlK5mdCVSQac=)
2: xGW8dSWUyRpA2KdKd7FFApzWMkc.crl (hash: wshzbBVfy1E6T/pEJWLpwYLWuGJzdTyHVf1UJ5aNnUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/907f3e-75a0-48fc-972d-f8dcc805a84c/1/xGW8dSWUyRpA2KdKd7FFApzWMkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/907f3e-75a0-48fc-972d-f8dcc805a84c/1/xGW8dSWUyRpA2KdKd7FFApzWMkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xGW8dSWUyRpA2KdKd7FFApzWMkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 00:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:ad:c5:96:99:00:91:f5:88:3e:50:cb:a4:c6:8e:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c465bc752594c91a40d8a74a77b145029cd63247
Validity
Not Before: Jun 29 00:00:51 2026 GMT
Not After : Jun 30 00:00:51 2026 GMT
Subject: CN=4b68958acd47b60b69c807d4b1d6f3b62f81bdff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:08:ae:2e:aa:74:ff:44:3b:83:31:98:85:48:
a1:82:b3:d8:99:00:0f:b1:93:2f:19:75:bb:ef:5e:
b6:79:a2:c0:9f:15:a6:06:36:9f:2e:a9:42:b4:d8:
b1:e2:f6:e8:05:69:0d:9f:e6:8d:80:fe:3b:f2:b9:
f1:52:a9:da:ca:f0:c6:28:34:96:9f:89:cd:5e:c3:
8d:c4:15:b6:8e:f0:6e:bc:87:b3:a4:03:1d:e8:7a:
05:1b:f0:f7:ae:30:58:2c:c7:41:f7:ec:84:b3:41:
00:05:eb:71:a1:1b:66:cc:0c:0a:aa:d6:92:f9:8b:
fa:cc:c3:82:c2:3a:52:46:dd:c1:50:66:59:9c:91:
19:48:d2:d6:ce:38:74:91:11:cb:dc:e7:f3:e8:62:
04:f2:e3:69:56:b8:fa:be:58:1d:d7:5c:68:52:44:
f2:29:c9:f9:6e:90:3b:e1:17:7a:d2:57:85:48:53:
a1:c9:31:2c:da:a0:f1:7a:8a:68:cc:bf:5c:88:e2:
16:8f:ee:5e:ea:94:a9:d0:ed:90:f6:2f:51:4a:48:
4e:0c:03:48:78:01:9e:8c:ed:aa:ca:bc:d1:3c:7d:
44:f0:0d:c5:13:26:29:63:71:24:d7:cc:72:b5:17:
68:f1:70:f4:88:80:2e:e7:e1:b8:75:61:2e:51:ba:
41:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:68:95:8A:CD:47:B6:0B:69:C8:07:D4:B1:D6:F3:B6:2F:81:BD:FF
X509v3 Authority Key Identifier:
keyid:C4:65:BC:75:25:94:C9:1A:40:D8:A7:4A:77:B1:45:02:9C:D6:32:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGW8dSWUyRpA2KdKd7FFApzWMkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/907f3e-75a0-48fc-972d-f8dcc805a84c/1/xGW8dSWUyRpA2KdKd7FFApzWMkc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/907f3e-75a0-48fc-972d-f8dcc805a84c/1/xGW8dSWUyRpA2KdKd7FFApzWMkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:69:f5:44:e5:9f:3f:cf:63:90:71:9d:05:77:7d:97:38:e9:
a1:3c:15:c4:55:97:dd:38:48:de:7e:57:2e:19:70:21:57:ba:
51:d6:b8:da:08:f2:df:db:46:c3:ec:35:6a:e6:8d:6e:56:38:
99:32:c9:c2:12:3f:ab:a8:b3:67:11:a1:58:f8:e2:f3:4b:ec:
b1:19:ac:a0:7c:d5:b1:d7:23:36:0e:58:fc:cb:06:6c:97:82:
67:d0:d1:7a:1d:39:f9:05:7f:bf:64:9a:90:b1:26:37:e9:39:
4f:f9:9b:53:8f:2b:e1:be:63:a0:fd:dc:ef:a4:db:d2:6c:49:
dc:0b:ff:b0:6d:82:67:7c:68:77:5c:52:7b:9d:d8:5a:01:86:
42:53:54:7c:83:22:44:0c:05:1c:8b:7f:50:2c:47:2d:ea:09:
4b:a5:6d:62:dd:ac:26:18:bb:8b:63:3e:0b:73:a2:51:b0:50:
5c:92:8c:32:c6:da:46:dc:15:af:6f:65:79:f8:7f:c9:c8:b0:
5e:df:df:94:d6:cb:ed:de:d0:94:d5:82:3b:31:67:2a:f3:5d:
b9:0b:e6:8b:14:a8:20:d1:ec:bf:27:ba:ec:8d:56:d8:d1:a6:
a5:5e:f8:19:b7:77:a2:51:f2:48:db:09:e2:06:bb:8d:fe:f5:
01:21:55:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:30:26 2026 by rpki-client