Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
File: xcgmUInL3eamxXnNd2tfgMD4rdQ.mft (raw, json)
Hash identifier: peBtpnGumwiSXe75KTsBcAhLfk5jsly88eLJHck0rBM=
Subject key identifier: 8E:4B:82:FA:BB:2D:B2:C4:23:1B:96:10:E8:BE:40:56:CF:FD:BD:7D
Authority key identifier: C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
Certificate issuer: /CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Certificate serial: 019E92821B0393CBF8901B370F1A410A0A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
Manifest number: 045A
Signing time: Thu 04 Jun 2026 12:01:00 +0000
Manifest this update: Thu 04 Jun 2026 12:01:00 +0000
Manifest next update: Fri 05 Jun 2026 12:01:00 +0000
Files and hashes: 1: m7FhPhHs11a2vSve5xnlsfFohsw.roa (hash: hMpM0IenW1hqeUpQGO4ux70XpFaz54EzPiQ0jMGVOds=)
2: xcgmUInL3eamxXnNd2tfgMD4rdQ.crl (hash: 266sSKFlbG9bJLf1XeG4E0Jo5MhVltsREk8BgBiZaEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:82:1b:03:93:cb:f8:90:1b:37:0f:1a:41:0a:0a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Validity
Not Before: Jun 4 12:01:00 2026 GMT
Not After : Jun 5 12:01:00 2026 GMT
Subject: CN=8e4b82fabb2db2c4231b9610e8be4056cffdbd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f3:3a:41:36:b7:f5:8d:e0:16:d7:d5:08:97:
2d:dc:b1:b9:e1:4c:b7:76:87:49:c9:33:97:5b:f0:
bc:52:d0:86:9e:f3:93:77:7f:10:32:ad:8b:38:f1:
bb:5d:6f:e3:98:0c:43:cc:b5:0c:af:dc:1a:e8:2d:
df:10:16:6a:15:41:d2:52:e4:37:39:22:ce:93:4f:
3c:a9:a5:a9:cd:8e:f3:f0:9e:80:2d:87:fe:ba:1e:
c9:60:f9:91:82:f5:a1:9f:dd:c3:f2:65:94:e4:df:
3c:af:dc:58:ea:3f:4a:c5:3d:84:64:26:ac:7b:a8:
74:66:72:f2:de:2e:1a:46:09:0e:17:a8:cc:c8:72:
1a:98:76:22:b1:82:90:2f:7e:71:7a:e4:90:84:51:
02:ed:aa:da:51:45:41:2f:fe:cd:f3:1b:14:53:2b:
36:0c:37:00:f4:30:29:76:5e:46:6b:63:a5:50:71:
55:c8:cd:9a:94:b9:9e:fc:5c:b1:a6:75:b2:2b:52:
d0:2a:ef:b7:2d:e3:5c:58:0f:ef:18:62:9b:48:cc:
ec:2c:15:91:d0:f9:42:ed:3e:09:79:53:73:03:6a:
2d:54:4b:1b:df:7d:66:a9:10:30:47:18:0a:22:1e:
71:d9:88:9d:ee:ee:73:bf:92:6c:1e:84:38:6d:ed:
b5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4B:82:FA:BB:2D:B2:C4:23:1B:96:10:E8:BE:40:56:CF:FD:BD:7D
X509v3 Authority Key Identifier:
keyid:C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:4b:3f:d0:51:20:9d:eb:11:14:9c:5d:be:0b:92:cd:4c:25:
ad:ee:e2:86:1f:7f:46:5c:7b:b0:8c:a2:44:63:a2:31:8d:06:
7b:93:6d:d8:80:66:7f:b5:c1:67:ca:19:1a:f7:5a:c8:38:fb:
b4:cd:09:cd:ad:65:af:55:10:0b:4b:32:f5:9c:de:1d:19:e4:
5e:7e:96:a5:1f:d2:57:bb:e6:58:ad:56:cf:d8:ad:b1:ea:89:
08:41:3d:6c:8e:56:70:f6:e2:c9:fa:33:dc:63:bf:fc:b1:fd:
6a:d1:a5:98:ce:4d:67:61:3d:ea:c8:3b:23:ec:4d:19:91:a3:
b0:c3:18:c2:e1:1d:ef:db:b0:ed:28:31:99:c3:9f:c7:41:11:
3a:69:b4:cd:bd:ce:26:14:43:9c:54:2a:c4:61:2c:9d:3b:3f:
28:b1:b9:d3:dd:e1:19:4a:45:c4:cd:64:a4:36:7a:e9:83:56:
dd:ac:fa:21:14:fa:f3:fc:ef:79:67:f0:5d:93:0f:b3:8c:2b:
dc:fb:4c:c9:8e:15:31:ba:5d:c8:5d:43:e4:e3:32:7c:64:a8:
f5:8e:bb:d0:34:45:4a:39:9e:ae:48:0c:42:46:12:a8:74:2a:
d8:7e:25:5f:29:82:ab:e4:72:75:49:8c:fe:cc:05:a7:1f:bb:
e6:b5:96:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:23 2026 by rpki-client