Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
File: XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json)
Hash identifier: 6inUlwC0k7cm9YysUffLHio5HrYRmPA0XaezeRRNBeA=
Subject key identifier: E3:85:AC:8C:FA:BA:39:58:B8:CB:07:E4:03:05:AD:1F:14:4C:D6:00
Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
Certificate issuer: /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Certificate serial: 019EB620B6CE6343F3B91A270B2C95FAF8D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
Manifest number: 0280
Signing time: Thu 11 Jun 2026 10:00:57 +0000
Manifest this update: Thu 11 Jun 2026 10:00:57 +0000
Manifest next update: Fri 12 Jun 2026 10:00:57 +0000
Files and hashes: 1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: BJWOwhvVpIYp4MkVYhrHDY1OIVXiPqulTBsQxeizdR8=)
2: _a7gNZLlQxgHn1SWkyljxM4Vp8E.roa (hash: riqb9ZgtO6K145lOcaQYpYRovN3sqPG5Tn86hViYkIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:b6:ce:63:43:f3:b9:1a:27:0b:2c:95:fa:f8:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Validity
Not Before: Jun 11 10:00:57 2026 GMT
Not After : Jun 12 10:00:57 2026 GMT
Subject: CN=e385ac8cfaba3958b8cb07e40305ad1f144cd600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:de:f4:49:f9:aa:fd:b9:a2:c1:31:85:54:54:
ac:e4:c6:fd:09:e1:3c:7c:f4:41:d0:30:a0:99:2c:
33:da:a2:d1:c8:6c:d9:ca:78:e1:43:83:9c:84:e2:
33:f8:00:74:8d:38:ef:1f:4c:0c:64:ca:67:1a:26:
c7:e3:5f:f4:3a:24:66:61:54:8d:25:f9:b8:f9:c9:
7c:33:ac:00:08:67:f8:17:82:84:d3:9e:ab:3d:af:
e0:16:95:2e:82:fd:0b:78:cb:cf:8b:03:88:05:6a:
49:16:e7:0c:99:6c:3d:0b:d3:c4:20:16:cb:a7:05:
1c:0d:00:28:24:6a:0f:26:ac:3d:98:26:4f:9d:5c:
f1:eb:92:6c:0d:89:6e:88:51:a8:50:dd:7d:4d:ea:
b7:2f:35:d7:07:ab:37:fb:ba:70:a2:c3:44:c8:f8:
5a:40:cf:ac:54:ab:6e:fd:18:50:c0:76:d1:d8:c7:
a2:8e:5d:f6:37:3c:6b:4c:a4:27:d0:c8:59:26:56:
eb:0b:d1:da:dc:7c:3a:32:bb:4e:9f:fa:f2:02:22:
29:73:78:7a:02:43:5e:c2:f1:26:83:84:27:1c:52:
7c:86:cb:72:a6:63:91:ca:ef:e2:73:5b:25:f6:c3:
ea:a0:cd:f6:6c:51:59:07:a8:26:e2:53:ac:b2:8f:
4f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:85:AC:8C:FA:BA:39:58:B8:CB:07:E4:03:05:AD:1F:14:4C:D6:00
X509v3 Authority Key Identifier:
keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e7:50:00:59:ed:ab:55:50:38:19:fe:c8:f5:1b:6a:de:cf:
b0:0a:2c:cf:01:6c:8c:22:88:ce:cf:93:a6:07:84:33:d5:57:
6b:2f:83:e5:2b:40:f9:84:76:9a:02:07:a8:14:31:09:45:77:
76:0d:60:a4:0b:5b:8e:98:a0:07:81:b0:8f:a2:31:7c:04:53:
a5:40:34:ae:88:8c:4b:7a:55:f4:33:47:dd:cf:bb:1d:34:ca:
4c:a8:4b:67:0d:37:43:49:b9:0e:97:df:0b:af:dd:d1:f5:a0:
7a:eb:ef:ab:4d:45:f0:88:39:d5:ca:dc:e9:ea:a0:51:97:9b:
0d:a1:cf:fc:0a:3c:e2:06:cb:40:cc:24:18:53:0e:75:a2:f1:
80:ff:fe:3a:fc:d6:45:de:a0:66:c8:ac:65:d5:fd:f3:b0:c5:
b0:6a:e6:96:b5:fd:92:1d:91:4e:76:08:36:3f:59:6d:45:29:
03:c3:1c:45:09:2d:15:e9:91:f6:02:00:ca:42:83:67:5a:f1:
c8:ee:1f:87:4e:82:86:a4:a4:34:6d:01:2c:c0:d3:f5:22:02:
7a:f8:ce:56:53:6b:0d:6a:ab:40:cb:37:60:e8:6e:7e:fa:f4:
51:06:69:0d:04:45:2f:19:1b:f2:8b:60:a9:3f:36:02:fe:72:
04:ee:6e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 17:53:41 2026 by rpki-client