Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier: Lul70DPa86v4NnMhcbIDFpVluR26cnzciXm5bbJbGsY=
Subject key identifier: 1B:88:F2:F7:0F:59:31:28:65:E6:09:A4:F7:4F:19:9D:10:CA:A5:EC
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 019F15660B41E735DF1B1B79C8CC7A9293A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number: 17D3
Signing time: Mon 29 Jun 2026 22:00:36 +0000
Manifest this update: Mon 29 Jun 2026 22:00:36 +0000
Manifest next update: Tue 30 Jun 2026 22:00:36 +0000
Files and hashes: 1: vAqm-n6lOJmboBYQxwCWXscToCI.roa (hash: eddQmjFbutaY0t3+KjyZXIhwzLmKmB/bUbWp/1/h8vE=)
2: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: 1chEValNbPDL9bYzkla1HA/Zf0iT0KnR+KGLTUxmn44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:15:66:0b:41:e7:35:df:1b:1b:79:c8:cc:7a:92:93:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Jun 29 22:00:36 2026 GMT
Not After : Jun 30 22:00:36 2026 GMT
Subject: CN=1b88f2f70f59312865e609a4f74f199d10caa5ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:9c:ae:58:0f:69:45:81:cc:8f:e8:c0:39:
4c:e2:25:2d:cc:ca:0f:1f:b1:d7:11:90:42:87:34:
01:1f:9c:bd:a5:a2:5d:d5:60:15:8b:3f:a8:45:a8:
27:7f:27:f1:8f:1b:f2:07:4c:56:76:e0:41:7a:b2:
d4:c9:e5:a5:dd:cb:43:a6:39:6d:4f:90:a8:0c:f8:
1e:41:39:bc:5c:85:04:1a:eb:cb:8f:c5:b2:69:3b:
89:77:59:72:7d:c6:ff:76:57:fb:9c:15:6c:84:2d:
f6:c7:d0:fd:83:49:9d:ec:f0:7f:ee:ca:33:99:36:
93:c6:44:50:23:07:b2:64:c7:d8:96:0c:fb:8d:56:
17:99:2c:9e:8f:a5:6d:54:1a:3d:55:75:2b:b1:bc:
d1:ff:12:d2:eb:f0:05:11:58:17:a3:ad:d1:66:9c:
04:36:34:fc:ae:e5:b3:e3:f0:77:18:ef:f8:93:8d:
99:b3:2e:a7:80:2d:ef:e2:82:e7:6a:1b:1e:91:e5:
65:03:88:db:d3:2b:75:f5:60:47:7b:90:2c:b2:a5:
3c:c0:0d:9d:f0:ac:f3:eb:17:9a:f7:8d:36:d3:8a:
24:8b:8f:7c:49:99:b4:42:ad:59:a4:6c:11:a0:61:
7f:48:37:6b:7d:cc:35:5e:73:95:d0:89:d4:3e:f7:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:88:F2:F7:0F:59:31:28:65:E6:09:A4:F7:4F:19:9D:10:CA:A5:EC
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:60:d1:9b:ac:08:bb:21:16:62:be:32:8c:5e:a8:42:7c:10:
1a:10:4e:bf:5c:9c:00:f4:92:53:c0:1f:c9:7d:4e:6d:9a:9b:
4e:cd:1f:83:15:a0:e3:6d:26:2d:a8:78:d4:8c:f0:76:38:0d:
d0:56:90:20:00:1c:f3:8b:59:b2:64:39:a9:03:fb:1e:03:63:
f6:02:25:6c:fc:bf:f5:a7:24:9d:ab:96:ff:ac:65:62:00:75:
d8:d9:bc:fc:c0:6a:b1:b8:96:99:7c:fd:12:70:48:40:d9:af:
05:79:84:6a:85:8b:04:0a:fb:4a:d7:55:54:9a:c0:75:60:07:
2c:3b:74:62:0f:ed:62:de:be:27:9e:fd:b5:d6:54:75:4f:8d:
3c:7d:7c:50:e1:ba:70:0a:0a:96:45:31:6f:2c:0b:cd:1b:4b:
0c:96:cc:c3:a0:64:07:bd:85:60:b6:56:19:57:11:14:ce:82:
59:85:29:9d:53:b6:6e:4e:96:d4:38:93:3e:1a:89:ba:52:0e:
91:66:c1:24:b2:5c:b6:4c:5a:47:90:31:1b:90:db:a8:cb:6f:
23:1c:43:e6:dd:9b:42:c8:17:0b:f2:86:46:2d:99:c7:a5:1a:
c3:03:f6:e8:50:a2:e9:5b:2d:52:02:70:5d:bd:55:50:29:87:
cf:5c:7c:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 00:28:16 2026 by rpki-client