Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
File: XyxxJryPOQVnRN4hOyzia3a8mSM.mft (raw, json)
Hash identifier: wBTMuwkn832KMcTcZADVVxOND740GcBATbhyJo0AUYk=
Subject key identifier: B2:6D:EE:CC:84:F2:E7:2E:0F:F7:E8:38:76:7D:0A:77:B2:EE:14:FF
Authority key identifier: 5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
Certificate issuer: /CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Certificate serial: 019EB6FC2AD95DF2510A9179FD22AF11274E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
Manifest number: 1956
Signing time: Thu 11 Jun 2026 14:00:39 +0000
Manifest this update: Thu 11 Jun 2026 14:00:39 +0000
Manifest next update: Fri 12 Jun 2026 14:00:39 +0000
Files and hashes: 1: XyxxJryPOQVnRN4hOyzia3a8mSM.crl (hash: 0mUbXLBBljtrGCrKtPKmyUAvfnyn0ilXxURcBe+WyS0=)
2: rUpXn5OLFWI8Nb4opFx-ZMazNF4.roa (hash: CyKHZsof9BroFMJ4kJHFaNGpd7KJ3UUKrH85vt5M3yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fc:2a:d9:5d:f2:51:0a:91:79:fd:22:af:11:27:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f2c7126bc8f39056744de213b2ce26b76bc9923
Validity
Not Before: Jun 11 14:00:39 2026 GMT
Not After : Jun 12 14:00:39 2026 GMT
Subject: CN=b26deecc84f2e72e0ff7e838767d0a77b2ee14ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2d:cd:85:37:5a:da:17:df:62:d6:58:a0:ce:
05:1e:6a:53:22:c1:6d:06:a3:e6:93:2c:33:02:d5:
99:88:40:f7:05:2b:05:40:17:0d:41:65:0e:de:cf:
7a:c2:a0:94:da:22:f2:e6:a7:5a:19:9b:98:6d:49:
7b:1d:96:5c:37:51:c3:d0:87:94:7e:09:ab:93:d6:
e4:f6:96:f6:96:2d:7a:02:7f:0b:f1:95:96:33:58:
8b:77:c3:2a:87:44:04:05:14:c6:aa:fc:e4:b3:b8:
4c:54:54:bd:58:8f:b7:c6:0c:bb:10:34:2d:d6:72:
d0:91:28:57:53:f2:dd:d5:6a:0a:2b:db:b5:ea:1b:
f6:9f:25:fb:8f:6c:dc:c3:cd:4d:27:db:6b:4b:6c:
d5:70:f8:89:7b:e8:44:14:8e:5a:30:c4:bd:5e:58:
64:de:cd:ae:df:49:f8:23:72:f7:a3:df:55:69:39:
f6:4a:b5:a1:a9:67:c2:6a:00:f4:66:b0:3b:6d:b7:
f5:03:4d:ab:f9:79:fe:7b:d4:e8:92:8c:16:55:d2:
ca:2a:48:d0:10:6f:45:b1:3c:da:1a:3e:7b:3b:ee:
e0:e6:c5:ca:e0:1f:12:68:b7:c2:32:80:0a:a7:d6:
8a:f6:70:91:47:9d:d1:e1:32:2d:1d:c0:e5:72:81:
bd:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:6D:EE:CC:84:F2:E7:2E:0F:F7:E8:38:76:7D:0A:77:B2:EE:14:FF
X509v3 Authority Key Identifier:
keyid:5F:2C:71:26:BC:8F:39:05:67:44:DE:21:3B:2C:E2:6B:76:BC:99:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XyxxJryPOQVnRN4hOyzia3a8mSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/f76b1d-48cb-4ab1-90ec-e615f56f78b1/1/XyxxJryPOQVnRN4hOyzia3a8mSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:27:40:02:ad:9d:28:80:4d:e9:f6:58:e3:38:dd:df:0d:cb:
e7:d4:24:17:5b:62:f3:af:0e:86:e8:19:a9:82:09:0d:45:c8:
57:2d:3a:e9:c3:ef:e4:58:e4:da:26:a3:ca:58:dc:c0:31:bc:
e6:fb:98:ba:04:93:95:b7:4d:26:71:86:1e:ec:aa:38:44:d8:
dc:60:ea:77:ea:62:4a:bf:be:e5:de:7c:b6:28:49:47:e0:fe:
03:03:e6:b2:bd:bc:83:93:a4:40:58:c7:68:ff:d6:53:ef:58:
2f:15:8a:a4:0d:ac:8b:b7:84:d7:9a:5a:03:db:51:48:70:da:
77:81:2a:81:50:15:3e:29:ce:07:01:01:2c:e1:86:81:72:78:
c9:f6:9a:1b:d7:ce:fd:35:71:74:ad:2b:2f:39:37:6c:c7:f1:
b0:64:34:71:2e:0a:0f:02:4b:a8:73:d6:fe:91:7f:05:50:7b:
a8:ca:18:45:76:69:cd:2f:c4:3e:5a:32:dd:2d:1c:59:5d:db:
54:1e:e8:af:73:8c:e6:d0:3f:68:8e:27:b4:ef:9a:4c:00:bb:
94:f9:c3:a4:bb:e4:4d:1c:47:10:97:04:8a:32:f0:44:d8:17:
2a:e6:23:63:9a:46:e9:d6:bf:9d:bf:19:2d:2e:e4:c3:33:cc:
4d:1f:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:59:53 2026 by rpki-client