Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier: AJidyr0+daDoDPvGEg4MbyRCWmkKh/rJ3xIaJsASdnM=
Subject key identifier: B9:EB:F5:64:4E:27:2B:F4:2A:1F:94:69:7C:1E:E1:43:4C:38:DE:CD
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 019E2881AFF4325DAE4B54E06BCC5B81CA74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number: 1912
Signing time: Thu 14 May 2026 22:00:48 +0000
Manifest this update: Thu 14 May 2026 22:00:48 +0000
Manifest next update: Fri 15 May 2026 22:00:48 +0000
Files and hashes: 1: FXTyPwjMGAiU5KxW_Bfbg2AROHw.roa (hash: OnE+aJgFklXNXWETHHDMbnfVlcK0uF/bBVveHl9Em7A=)
2: T3lGsdRYO3Jiv8YeumY1-URxH8k.roa (hash: 2iZU0Zg9KB5iXER8e3UtbINmEwCtWsu/Q8hRWGFKAwI=)
3: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: CLias+u9HTMCxaM8syBbjNui8GKxSTWZ7Jaa8WxuWSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:81:af:f4:32:5d:ae:4b:54:e0:6b:cc:5b:81:ca:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: May 14 22:00:48 2026 GMT
Not After : May 15 22:00:48 2026 GMT
Subject: CN=b9ebf5644e272bf42a1f94697c1ee1434c38decd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4c:2b:1b:29:39:1e:b1:93:84:a5:b8:3d:d6:
fe:2b:47:10:d8:8c:71:42:3a:54:19:45:b3:bf:f5:
71:a6:a3:60:68:dd:cb:48:08:f0:94:90:ab:13:f9:
e2:a3:1d:ec:f2:10:82:25:bb:2b:4b:26:29:c3:05:
50:48:60:63:0b:66:a8:7a:7b:d7:b3:51:6d:23:b1:
05:a9:64:d2:32:41:ef:17:d3:07:7a:37:de:be:13:
4d:59:b7:91:d8:cd:02:47:d3:6c:53:31:fb:9b:86:
03:5b:05:1d:34:f5:62:03:55:0c:8f:bc:70:cf:cf:
a5:80:bd:24:42:5c:b5:ba:0c:59:3d:f2:46:c9:9a:
b4:b6:31:2a:68:a3:78:07:ef:b9:a1:e4:52:3f:87:
34:97:4a:26:a8:24:d8:07:af:4d:a4:47:2c:31:47:
0c:04:ab:ed:b9:78:21:ea:76:45:fb:40:63:a8:93:
2f:6d:70:83:ef:b7:10:15:8c:a8:38:33:62:c3:05:
d9:5a:61:98:a0:e1:85:33:10:6b:2d:fb:d1:e5:bd:
91:b3:5c:e2:13:74:21:06:f8:8e:fe:bc:45:9d:7a:
c4:55:85:9a:44:db:18:d7:15:af:8d:46:0a:29:e0:
b8:d4:4b:ce:cb:26:bb:d5:e0:ac:7f:4d:e5:60:54:
85:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EB:F5:64:4E:27:2B:F4:2A:1F:94:69:7C:1E:E1:43:4C:38:DE:CD
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e4:75:c5:95:00:62:a5:56:29:e0:09:37:91:12:b0:52:a0:
fc:4a:50:5d:9f:df:45:7f:64:5f:e8:ac:4e:d2:02:1b:2b:73:
3d:ed:15:0b:91:e4:e7:f2:3f:7b:87:7c:4b:7a:26:62:d0:48:
f5:e2:f4:46:eb:9b:f3:f4:83:8b:97:fb:c4:6f:44:71:d5:4e:
7d:5d:24:a2:19:88:49:2f:76:28:4c:dc:dc:0a:ff:3b:0d:e6:
25:43:76:7f:20:7d:40:f0:c7:02:4e:f0:e2:67:4a:ce:d2:d9:
22:14:06:64:b2:52:1f:1e:e0:f3:68:55:d7:4c:ae:7f:7c:3e:
40:33:f0:9c:ab:d9:73:d9:8e:ac:58:4f:b0:f5:ed:80:d9:66:
a5:d6:c8:5e:27:26:65:17:1f:00:08:95:31:d3:4f:eb:72:94:
18:57:2f:9a:68:ed:bb:62:02:fb:c4:65:1e:27:78:f3:42:31:
a2:fb:0c:37:ae:ae:7b:c2:da:0c:ee:d6:15:80:e5:af:b8:b4:
c5:94:6b:51:9f:46:2a:93:8e:96:a2:9c:84:06:16:58:aa:ad:
20:a3:b9:da:3b:f5:86:41:f7:33:08:8a:48:b4:e7:dc:68:62:
23:f0:22:7e:54:3d:4c:06:2a:2d:d8:14:1d:e7:aa:90:78:39:
49:fc:35:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:02:26 2026 by rpki-client