Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: rsaoDINtR/URl2+DE8BgmkUXYhvblHZpxBV2e24RmcE=
Subject key identifier: 28:83:B5:B1:BC:72:CA:DE:3D:EF:11:AA:0B:CF:05:7F:03:E5:03:C9
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 019EB6FBE62D840034CBDCC2B04C6D0CE01D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 195B
Signing time: Thu 11 Jun 2026 14:00:22 +0000
Manifest this update: Thu 11 Jun 2026 14:00:22 +0000
Manifest next update: Fri 12 Jun 2026 14:00:22 +0000
Files and hashes: 1: BVjAALpJvxuQy2GyePspuTkr6KE.roa (hash: n2Oqqyn+P3DE0EdI3BsAkGnYPcIXpRm9D9/3qqS3Klw=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: b7Z18U/9lW8zVLyh1kQpZeWwAmbOsRu2SN78Eaa/B7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:fb:e6:2d:84:00:34:cb:dc:c2:b0:4c:6d:0c:e0:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: Jun 11 14:00:22 2026 GMT
Not After : Jun 12 14:00:22 2026 GMT
Subject: CN=2883b5b1bc72cade3def11aa0bcf057f03e503c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:33:68:bb:0b:f5:e9:59:16:e4:1d:87:af:33:
89:99:af:83:36:55:bf:8d:96:03:60:1c:f6:12:7f:
29:68:09:2c:d3:f4:cb:9e:12:f0:30:1d:8c:fb:fb:
18:d1:eb:1c:ab:65:94:dc:f4:9a:34:99:ec:5e:09:
ee:33:29:87:d2:74:76:38:87:6f:06:e7:d6:60:33:
ba:e2:7e:6b:92:a8:27:fb:2c:f4:e7:49:cc:a4:d8:
db:dc:e5:be:ff:f9:51:04:9b:e3:61:f1:fa:61:11:
eb:5f:af:1d:9c:b9:84:28:fd:0e:f1:42:3b:6c:db:
70:6c:9e:b9:eb:4e:e6:c3:0a:f7:26:a9:97:cc:08:
56:07:32:ce:86:fe:7e:60:22:59:73:1f:46:f9:5f:
f0:fe:96:3b:28:5f:56:07:0f:e2:a5:1f:67:8f:0e:
4b:00:3f:fa:18:7b:86:6b:91:ad:99:92:c2:71:94:
ae:53:b8:f9:a4:30:a1:c9:e3:a7:d0:3c:5b:23:2e:
ef:12:2c:20:76:fb:64:01:cc:a4:69:9e:ea:3d:fb:
6a:70:80:aa:0b:36:78:5c:5f:26:ca:be:25:ed:44:
6d:c5:ee:72:03:ba:2d:e8:74:24:31:ec:5b:10:2c:
81:94:27:ad:ef:10:57:67:50:21:73:8d:ff:e6:fd:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:83:B5:B1:BC:72:CA:DE:3D:EF:11:AA:0B:CF:05:7F:03:E5:03:C9
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a7:a0:50:4b:86:6d:0d:fc:bf:72:ee:9f:71:9c:24:74:0c:
96:4f:f1:d4:ac:9a:41:ff:d8:e1:94:e6:6f:71:4b:2a:21:dd:
d7:b3:ea:6f:83:9c:b0:fd:e2:61:2b:71:66:bc:10:8e:01:fd:
52:d8:14:dc:41:29:fb:d1:ef:42:36:6f:d1:92:20:73:6f:2e:
bd:74:be:56:66:2f:26:6e:e6:c3:2c:04:67:f7:59:35:f2:a4:
75:97:0a:26:f0:fe:e5:b4:28:93:9b:00:0f:ee:dc:05:a3:a4:
75:1a:3f:e0:22:19:ab:69:1f:11:b6:fd:37:8b:b5:c6:63:46:
12:58:d4:d6:8a:9b:77:c2:d8:f3:a4:27:32:78:bb:ff:cf:e7:
9c:4e:c6:b3:ab:0d:b4:9f:30:0e:c9:bc:3c:2e:a5:7d:f0:8a:
49:1c:81:a0:2f:b4:fb:61:e7:73:11:fa:61:7f:69:4c:bc:17:
b2:e9:ba:bf:ae:df:91:c2:c6:b1:54:ad:cf:51:6e:7a:ee:63:
2d:82:a6:66:19:a8:1e:99:c7:49:73:65:02:34:cd:c0:67:81:
8f:c1:0b:27:eb:71:c8:63:6f:9c:91:d2:c3:a1:37:53:bd:53:
00:45:d9:de:52:7c:0b:10:6c:69:2d:51:83:c6:04:71:94:51:
9e:9b:e7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:15:52 2026 by rpki-client