Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier: 3ZAC4bFBG7rG31wY3cbbBOgRpOMCESGcR60EPbO1QoU=
Subject key identifier: 28:5A:1D:12:B8:BF:5F:DF:56:B9:60:14:D9:5D:FF:33:7E:4A:04:09
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 019F122E8EAB8ED28B8BA86C0F1B41CB2B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number: 198B
Signing time: Mon 29 Jun 2026 07:01:08 +0000
Manifest this update: Mon 29 Jun 2026 07:01:08 +0000
Manifest next update: Tue 30 Jun 2026 07:01:08 +0000
Files and hashes: 1: FXTyPwjMGAiU5KxW_Bfbg2AROHw.roa (hash: OnE+aJgFklXNXWETHHDMbnfVlcK0uF/bBVveHl9Em7A=)
2: T3lGsdRYO3Jiv8YeumY1-URxH8k.roa (hash: 2iZU0Zg9KB5iXER8e3UtbINmEwCtWsu/Q8hRWGFKAwI=)
3: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: BAciW4YKpIAWquac4g0pjv4QUZHgTTFdqcQ5aWb6mo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:8e:ab:8e:d2:8b:8b:a8:6c:0f:1b:41:cb:2b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: Jun 29 07:01:08 2026 GMT
Not After : Jun 30 07:01:08 2026 GMT
Subject: CN=285a1d12b8bf5fdf56b96014d95dff337e4a0409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:08:2c:b2:c5:bf:fc:18:bf:ca:b4:9c:6f:3e:
1b:ee:ee:65:93:e6:f1:7b:cb:a3:25:c2:74:37:e0:
2d:15:53:84:52:23:4f:d5:05:74:3c:25:b0:c6:ee:
44:09:4c:7e:bc:f4:cd:d8:66:f9:c4:1c:d8:33:a2:
2e:82:b8:d5:a3:0e:3b:be:c3:ec:ce:6c:33:23:02:
e7:ff:b8:e2:6d:a0:15:ca:3c:87:f5:e8:63:a4:9b:
07:f0:b1:53:66:5f:9a:cc:b8:3d:67:03:94:1e:cd:
f6:18:d7:52:ff:cf:6b:6e:8c:01:26:a5:d8:67:e4:
58:4e:21:4b:9b:36:2d:fd:0d:61:01:0f:e8:7c:1b:
44:aa:93:7f:f5:d6:84:d1:bb:2c:a7:de:08:13:ec:
16:da:ca:ee:cc:be:2c:f6:f2:cc:ff:87:b3:48:3f:
0b:10:7f:6c:7a:82:52:0c:68:52:81:4d:01:0f:dc:
0a:5d:62:4e:0a:26:55:4c:a1:ff:f9:ce:e4:f7:59:
a8:83:dd:dc:2e:0e:43:c4:93:81:68:98:a4:ad:ce:
c3:f4:43:a9:6d:77:5b:f9:85:b0:4f:19:35:b6:d2:
0b:74:d0:2c:a7:29:cd:ae:f9:d5:d9:2b:a0:91:af:
46:53:b5:74:cb:67:56:8c:2e:79:2f:85:a0:d3:3c:
fd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:5A:1D:12:B8:BF:5F:DF:56:B9:60:14:D9:5D:FF:33:7E:4A:04:09
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:59:a4:4f:f0:d9:46:e5:bc:c7:1e:b3:c2:10:bd:91:aa:50:
97:16:87:8e:d8:23:ca:26:d0:cd:8d:1f:d1:33:ff:33:d2:1c:
2f:b4:e9:9c:46:0c:b1:df:f6:9a:a3:0d:dc:13:a9:be:ae:73:
ff:e5:02:06:45:b9:39:1b:19:b7:86:3e:b5:a3:47:52:e6:55:
35:35:f7:f0:fe:0e:f1:ac:a0:6c:fb:e9:af:d0:aa:f4:5e:4c:
31:ee:53:f1:a2:0b:2f:54:b6:6d:b0:a4:94:a3:8b:07:30:c9:
ab:e4:4c:c4:53:0f:91:2b:f4:e1:24:ae:94:40:c1:2c:ef:e6:
48:20:bd:34:05:d6:6d:c6:6b:7d:6e:90:46:c5:f3:8e:71:45:
f8:aa:3a:b2:f1:a4:e4:55:4f:f7:44:2d:6e:38:9c:a5:c1:8b:
91:23:89:25:07:bc:02:25:d0:99:c0:21:11:34:b9:79:25:8d:
1c:93:d3:45:89:db:3a:a9:1e:33:b3:bf:d6:ad:68:25:ca:99:
45:30:c5:ed:01:7b:dc:2b:02:e7:48:01:e7:7a:a5:51:85:f3:
22:61:a6:72:ba:37:da:ea:c6:fa:1c:a8:2a:e6:dd:57:6f:de:
fd:06:75:2c:81:92:4a:4d:a7:c5:5c:89:5e:65:13:ce:cd:f1:
26:45:6f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:43:13 2026 by rpki-client