Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
File: XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft (raw, json)
Hash identifier: wSoz9K+tAWo76wybmmE6b4njDDP/CQstlT1EG79qsUs=
Subject key identifier: 82:C8:1E:E0:9F:1D:E4:16:FD:FD:92:71:7F:26:4E:EF:7E:25:F1:18
Authority key identifier: 5E:E5:DF:38:60:B2:4D:DB:BA:57:3E:D0:48:D4:A7:23:0B:F5:B1:A2
Certificate issuer: /CN=5ee5df3860b24ddbba573ed048d4a7230bf5b1a2
Certificate serial: 019EFC4B24F57E9BB98EFC8FC149BB0FF1CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
Manifest number: 5C
Signing time: Thu 25 Jun 2026 01:00:43 +0000
Manifest this update: Thu 25 Jun 2026 01:00:43 +0000
Manifest next update: Fri 26 Jun 2026 01:00:43 +0000
Files and hashes: 1: 5AArOA0LkskA5tw5SWJx3j9Dv6g.asa (hash: g3ncVbCPorzKexZkECV8nZNdPxcAqa14QO98wuTocr8=)
2: XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl (hash: ZAXJI5wXdg7O7ogSnx4cI4YqBnPnBTl/jhsG9baBAgk=)
3: sZcKQ6cgnSFOArUoubXO-7UtF2w.roa (hash: i70yL5ZQtlkXeA37PkWypyq+6GqmS0P1o3XFiLGyrFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:4b:24:f5:7e:9b:b9:8e:fc:8f:c1:49:bb:0f:f1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee5df3860b24ddbba573ed048d4a7230bf5b1a2
Validity
Not Before: Jun 25 01:00:43 2026 GMT
Not After : Jun 26 01:00:43 2026 GMT
Subject: CN=82c81ee09f1de416fdfd92717f264eef7e25f118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:df:87:88:7a:ef:44:af:18:5b:b1:e4:12:ff:
70:b2:bf:3d:10:af:d1:98:eb:93:e2:20:66:66:c7:
32:8b:63:33:ef:69:6f:2f:f0:f0:c3:1e:e2:f1:03:
de:68:25:9b:0b:de:f3:84:58:ec:29:6f:21:e2:2a:
9b:30:3c:d8:ae:89:d7:d5:60:d0:81:e9:ba:72:01:
a3:bd:22:67:58:b7:a0:48:64:73:ec:20:36:fd:eb:
dc:03:67:2a:0b:c2:df:7c:5a:40:7c:be:26:4e:90:
80:da:50:2a:41:4f:ba:55:02:d9:b8:45:c0:08:9e:
aa:9d:d0:c7:c2:f1:01:dd:04:d0:75:19:6f:7b:b0:
72:b1:ec:dd:63:b6:a7:4e:b5:ac:5d:ca:fd:61:ce:
42:49:33:9c:6c:57:f5:4b:5c:26:e5:99:c8:df:f3:
39:c2:c0:c4:30:39:2c:5e:f5:71:9f:d7:1c:d0:33:
31:4a:06:ca:62:ac:3c:50:6d:b6:ba:59:c1:7d:06:
8c:08:79:44:01:e9:55:bc:f7:f4:45:b5:cd:ff:cd:
c9:38:58:97:f9:1a:e5:f9:ea:05:e7:ed:49:4e:ff:
84:90:cc:a2:41:01:02:18:93:1a:f3:3c:a8:0e:3e:
4d:b2:7a:aa:5f:d3:bb:14:65:11:dc:52:f1:1d:cf:
f8:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C8:1E:E0:9F:1D:E4:16:FD:FD:92:71:7F:26:4E:EF:7E:25:F1:18
X509v3 Authority Key Identifier:
keyid:5E:E5:DF:38:60:B2:4D:DB:BA:57:3E:D0:48:D4:A7:23:0B:F5:B1:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuXfOGCyTdu6Vz7QSNSnIwv1saI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/7e4dca-1832-47f5-a0d0-5b25f7ba705c/1/XuXfOGCyTdu6Vz7QSNSnIwv1saI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:6a:1a:48:fe:82:d9:b0:c0:29:4c:5a:ad:40:fb:13:95:56:
92:24:40:76:d3:f3:19:81:3d:40:4e:4a:a3:e7:75:c9:b2:c3:
1d:05:33:93:ff:5d:22:57:6c:4f:99:62:ba:f4:65:e3:60:c6:
a4:1e:53:bf:3b:cd:38:35:8a:6b:f8:b8:08:a7:51:5d:95:c4:
81:0d:b5:b5:1c:13:2e:17:cf:ea:5d:c6:fd:dd:d8:40:59:49:
14:ba:bc:1c:68:52:13:b5:39:42:0f:c4:a2:b5:f8:99:01:64:
6b:bc:4b:66:e2:e8:4f:6f:f4:f2:0f:98:c6:2d:18:b4:09:f5:
b0:17:cd:8c:ff:a8:75:62:92:ea:6e:52:3f:5c:12:76:ca:fd:
01:a8:ac:f8:11:3a:95:19:59:e9:04:8e:f4:63:5c:40:03:34:
c1:81:a6:95:c3:4b:25:70:71:f4:20:8f:b2:a6:0b:47:f9:27:
30:25:70:19:14:de:c8:52:4b:9e:2c:fe:d9:56:3c:3a:6c:e2:
a5:d4:36:8f:84:6d:3c:ca:22:dc:5a:31:83:d2:66:40:1c:c2:
95:c1:7a:9d:91:89:34:14:14:16:aa:52:d1:b1:1f:f7:d6:02:
73:8e:96:67:5a:bc:a6:89:ee:9d:2f:ea:74:a6:ed:1a:0f:af:
a4:91:91:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:34:34 2026 by rpki-client