Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: uJ3aqJkhCma9BvhVJPFc6BZ2i5YDc8KFZxqQIWg3fhQ=
Subject key identifier: A1:67:99:88:91:C0:82:97:40:20:4C:EA:DA:53:61:67:3C:59:AF:AE
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 019E995FDE56ABBA5481C88B1E2B2201D70B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 073B
Signing time: Fri 05 Jun 2026 20:00:57 +0000
Manifest this update: Fri 05 Jun 2026 20:00:57 +0000
Manifest next update: Sat 06 Jun 2026 20:00:57 +0000
Files and hashes: 1: Gkzr8cmq5l-SJW535VAbg6PLMB0.roa (hash: Y4hmK6YPKNo9n40cQMscOcZSxtVZskzUJfJT11sn8vQ=)
2: OpYOp0A5IPKJ7jbcXskpSxQGlaQ.roa (hash: rADmm3meTWoAJpb+yfOPFFjI2xZfTZaGcVmBPuOR9B8=)
3: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: rjUYg2chjQQ0qU/ANd5lK4xmIVPAUW3OmuMTj+z8Uvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:99:5f:de:56:ab:ba:54:81:c8:8b:1e:2b:22:01:d7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: Jun 5 20:00:57 2026 GMT
Not After : Jun 6 20:00:57 2026 GMT
Subject: CN=a167998891c0829740204ceada5361673c59afae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5e:d3:6f:33:49:3e:88:67:f0:0e:78:50:be:
2c:13:27:a8:45:e6:4d:34:48:d5:37:69:51:0f:49:
1f:8b:d5:88:ba:e4:8e:06:c8:ed:0c:05:a2:cb:81:
7f:19:d0:cb:c6:07:47:5b:72:3a:f7:09:c2:b1:72:
1c:3e:0e:34:bf:27:f3:85:11:6e:b1:44:2b:0d:bd:
65:7e:d0:e1:13:95:b5:9b:8a:4b:06:d1:b6:19:fb:
52:0e:a8:b3:69:da:51:df:f1:14:0f:0f:fd:a7:3e:
96:52:6d:9b:ab:a5:19:84:61:a7:10:20:40:4b:7b:
17:3a:51:ec:42:07:b2:45:00:1b:34:ea:89:42:49:
3e:f8:d9:2b:7e:dc:de:bf:74:df:e2:4c:da:d5:d9:
ab:a5:2b:1e:e8:f6:96:ee:20:10:3b:65:74:6b:13:
1b:8a:56:cd:6a:64:b8:07:bd:1e:98:47:2a:43:9e:
f7:7e:2c:6d:d0:27:b7:9b:5d:29:93:26:2b:b1:ad:
5f:53:da:e9:bb:27:75:88:75:27:24:05:bc:fd:cf:
28:20:4c:e9:39:cc:ba:cd:cb:55:f5:ec:db:6d:4c:
61:27:32:a0:4b:6e:f7:ac:94:09:8e:07:2c:bd:71:
00:23:30:c7:c2:dd:64:bf:04:c6:da:c6:a6:65:8a:
12:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:67:99:88:91:C0:82:97:40:20:4C:EA:DA:53:61:67:3C:59:AF:AE
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:5b:14:47:e8:8e:a5:6e:c1:52:b6:6e:f8:cd:85:a5:6c:dc:
3c:3e:78:94:ff:f8:ad:b9:f2:1f:1d:64:1a:11:21:be:a2:1a:
c6:69:23:43:9d:19:85:3d:1c:96:65:c2:1e:6f:e0:01:3a:c3:
a5:e1:de:05:82:17:3a:00:fe:2e:9c:e1:80:5b:ec:b1:d1:c2:
b2:db:e3:5e:c8:ee:53:e8:d8:23:3e:97:0e:e4:70:b3:11:e9:
33:45:15:06:f6:9a:de:6a:a3:b9:7e:4d:40:ae:68:fd:8a:52:
54:72:c7:2d:b7:20:c6:58:ad:7b:61:66:3c:47:73:95:40:1a:
89:4f:80:4b:a7:01:0d:a0:7d:87:21:6e:06:8a:52:0b:94:cc:
17:52:34:ec:bf:3e:92:36:c5:93:b2:c1:38:6b:ae:d8:35:2c:
24:b6:65:42:89:53:e1:49:d2:94:eb:48:85:bc:80:86:f9:52:
8d:32:3d:b4:ee:07:29:ea:15:8f:20:a7:f8:c8:dd:87:59:80:
ec:fc:d7:0b:04:37:51:4a:40:f3:e1:62:d6:1c:ed:15:77:62:
11:cd:10:06:c4:d2:32:eb:ac:a2:be:7c:d2:00:56:cb:24:f8:
b6:f2:d6:db:64:6f:ad:3b:cf:cd:dc:11:2d:27:bb:d2:c3:12:
9b:51:b7:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 06:59:06 2026 by rpki-client