Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
File: XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft (raw, json)
Hash identifier: sX59vOGSYcMeLlB+qaMA0OcdH6xflcGVraan/m14Qk0=
Subject key identifier: 38:1E:AE:6D:D2:E3:45:F1:F2:CB:69:9E:73:93:F4:1D:C9:00:45:50
Authority key identifier: 5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
Certificate issuer: /CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Certificate serial: 019EB80F3C2C4E073C454A3B9695AA8B9C45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
Manifest number: 08CF
Signing time: Thu 11 Jun 2026 19:01:06 +0000
Manifest this update: Thu 11 Jun 2026 19:01:06 +0000
Manifest next update: Fri 12 Jun 2026 19:01:06 +0000
Files and hashes: 1: ENw1C_RnXFX5u68Lf1yCGRU2j50.roa (hash: laVhxtiGuU9nq7LPNeyNYQb/Cwi24PMNAEi+kdkehFA=)
2: Kbt9j-hZnb94eOsmvK6LAdCimdc.roa (hash: zOiNq48c0XiT+FhoSdc64iXKcIuYpw4NIVOhVG30e1o=)
3: XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl (hash: lILiM5fNvHmIp01UFm4Waait4V+v7QGGknREjnk0x4M=)
4: avfWH99nPoOW7DLQE0x7Si_KvhQ.roa (hash: UCgXZAxPXfRssHeFoFTyFUIT22WDj1cAxQIAYxr8z30=)
5: mojZXrTMzMI8tc-sxL8WkZQtlqo.roa (hash: wx0Tu3b7R9CBy6GDWRL/5bfDjRmZvV07Hgorhjb5M58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:0f:3c:2c:4e:07:3c:45:4a:3b:96:95:aa:8b:9c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e95fdfd28cdc03d89d214e4ad3a6c5fb3ebacbf
Validity
Not Before: Jun 11 19:01:06 2026 GMT
Not After : Jun 12 19:01:06 2026 GMT
Subject: CN=381eae6dd2e345f1f2cb699e7393f41dc9004550
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:d5:bb:ce:28:09:43:2f:76:2a:2c:a2:bd:
e7:e8:10:86:6d:22:fc:1e:25:64:48:a8:18:69:c0:
b6:ef:48:1c:b1:16:8a:54:0e:af:62:91:4d:9f:e5:
a0:3d:b0:23:c0:62:85:7b:28:f1:fa:2a:fd:e3:d9:
f1:e1:58:98:ae:c6:9e:30:f9:06:d5:04:e9:8e:df:
47:d4:e8:27:81:0b:d5:dc:f5:76:e3:09:54:b7:60:
b1:5c:e1:fb:f8:89:27:f1:0f:27:31:18:05:3a:f7:
12:1f:f3:ed:4f:2b:e2:da:ab:81:bd:82:bb:61:92:
3a:0b:e6:3b:db:98:32:73:9a:05:39:59:6b:ec:61:
92:e6:b2:49:2e:06:0a:f1:b0:5e:94:a7:ad:5a:78:
6c:b7:19:f7:52:a6:d6:91:c1:18:5c:35:00:b0:1d:
54:15:75:99:97:97:9c:d1:ca:75:f5:f3:5a:31:c7:
77:06:bd:2a:89:4e:c3:5d:f1:af:07:20:a8:a2:82:
3f:7a:77:97:a3:07:4a:25:13:46:79:5f:71:57:1d:
2d:88:63:8b:e7:54:ce:f2:fb:a3:fb:26:4e:af:e9:
be:3e:b4:14:7e:26:0f:a0:2a:d5:89:cb:45:03:15:
91:37:ed:cc:59:67:9e:dc:e9:b3:6f:ea:10:80:91:
fd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:1E:AE:6D:D2:E3:45:F1:F2:CB:69:9E:73:93:F4:1D:C9:00:45:50
X509v3 Authority Key Identifier:
keyid:5E:95:FD:FD:28:CD:C0:3D:89:D2:14:E4:AD:3A:6C:5F:B3:EB:AC:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XpX9_SjNwD2J0hTkrTpsX7PrrL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bff3e-03aa-4e0a-b2fc-4a7ddf2d86bd/1/XpX9_SjNwD2J0hTkrTpsX7PrrL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:89:9d:04:1d:f9:12:d1:8f:f4:60:13:92:c0:3f:5f:97:29:
b3:b8:13:27:40:6e:72:40:1c:9b:ae:99:34:e5:c9:7c:25:53:
93:d1:11:28:41:f5:7f:24:03:59:d2:4d:5f:d6:a9:cd:46:d6:
47:5d:b6:79:28:9f:dc:8e:92:18:6f:3e:ba:09:bc:7b:98:c7:
5e:dd:bd:79:8c:81:95:3b:63:b9:a6:3a:5f:de:43:ad:d9:92:
bb:14:92:25:0c:61:33:05:cc:63:14:0c:8c:f7:a4:77:a9:3f:
74:00:2f:92:ad:67:64:76:8d:70:d7:0c:69:66:73:05:bf:b9:
8e:9a:ab:8b:12:e1:6c:91:75:f1:0c:60:96:1e:ca:71:88:3a:
e8:06:d9:e2:bb:b8:35:ba:10:9d:c3:48:e5:4b:1c:ac:9c:32:
2b:c8:3f:3c:ba:49:76:d8:86:03:05:44:7f:f8:fe:40:cf:d9:
4c:64:30:4d:3b:03:a7:80:a7:25:fa:1f:9e:ff:e2:97:6f:95:
55:f6:c1:ae:f3:8b:4d:d6:79:13:a2:4d:4f:d6:47:86:f8:bb:
42:71:fe:0b:01:7e:4e:e9:7e:63:ac:0b:db:e1:6d:38:4d:01:
9b:14:23:99:7c:e0:d5:cd:47:27:29:16:4a:6d:62:5d:b4:26:
e7:1b:6b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:38:48 2026 by rpki-client