Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
File: XU1jEWbo7t54curYq5qBrch31NE.mft (raw, json)
Hash identifier: NrpcyloDh1YQdAQHNPyos6ItK9pSaD90Qv2fuc4yvlU=
Subject key identifier: 4B:7C:F6:29:76:D9:46:ED:83:05:FE:9E:74:66:4A:8B:FE:A3:5E:B4
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 019F1A1FAE939575F2A3D80C1E7B8F069199
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
Manifest number: 0CAB
Signing time: Tue 30 Jun 2026 20:01:51 +0000
Manifest this update: Tue 30 Jun 2026 20:01:51 +0000
Manifest next update: Wed 01 Jul 2026 20:01:51 +0000
Files and hashes: 1: 6KBg76wO49ZTNeUZLEQvdfuAEnc.roa (hash: C78F4tRrcjaUZ0tkRMKZ6DDDl8hmlq6D1hHs1hdNls0=)
2: XU1jEWbo7t54curYq5qBrch31NE.crl (hash: LPioMQric7395E1Z/TqQcY6//oNIorbsKiC0Vwhh1Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:ae:93:95:75:f2:a3:d8:0c:1e:7b:8f:06:91:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Jun 30 20:01:51 2026 GMT
Not After : Jul 1 20:01:51 2026 GMT
Subject: CN=4b7cf62976d946ed8305fe9e74664a8bfea35eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:2a:3e:b7:c3:26:11:9a:a9:ef:6a:e0:ae:
e6:64:d1:6c:1e:a8:2f:0e:68:ed:b0:bb:ce:57:5f:
a6:63:eb:d9:4a:c9:a1:25:63:ea:88:e5:7d:5a:25:
78:b3:56:03:ee:83:81:0d:b9:81:77:67:f6:87:62:
d1:4f:ac:6d:a9:09:99:ce:31:6a:cb:31:6b:08:b1:
c8:06:2c:38:b7:d7:60:83:97:2c:ff:0c:ab:56:82:
87:95:0e:cb:0f:ed:ad:51:3a:0e:76:d0:61:2a:fb:
a8:ee:72:25:37:3c:da:02:86:9f:0e:bc:4e:00:a0:
d8:11:2c:b9:0c:7c:c1:ef:fd:6b:69:6f:5e:d4:1e:
a6:d9:a7:e6:a7:37:ab:3c:e6:68:72:88:cf:c6:43:
8b:e3:cb:5b:bb:12:41:42:fd:90:08:f7:47:ff:0d:
5a:f3:01:01:44:54:87:8d:6c:a3:ed:6c:71:9c:dc:
2b:e3:86:c9:0d:c4:25:a7:44:e5:19:1f:ba:27:58:
d1:be:32:34:7f:10:5e:af:10:89:4f:92:79:08:76:
85:6c:a9:4e:b0:ab:69:06:0a:0a:e5:a9:70:d5:f4:
f1:cb:53:12:2b:ce:da:66:d0:c6:1d:34:0e:de:b4:
21:4f:db:17:44:5d:98:02:27:1f:86:61:ca:db:94:
ef:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:7C:F6:29:76:D9:46:ED:83:05:FE:9E:74:66:4A:8B:FE:A3:5E:B4
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:6f:b2:b6:6a:bb:f4:1b:a5:dd:4e:02:6d:59:a0:39:09:c0:
1e:80:ca:05:fd:40:02:07:be:7f:34:55:24:7a:4e:7e:80:af:
21:e3:89:30:c9:7a:5a:de:db:60:e7:6a:2d:8e:99:2f:78:84:
b1:35:73:cf:87:8b:c7:ce:d3:ba:db:f5:2a:a2:a7:4b:58:62:
04:0b:43:f9:a5:c4:0a:35:65:d8:7f:bc:0e:d1:d6:e8:5b:9f:
fc:24:94:16:4d:ac:46:0f:a7:64:70:a4:86:7c:11:f9:ee:e6:
02:26:19:ca:85:45:b4:66:02:2a:6a:d5:43:f6:07:d9:03:84:
38:ac:f1:d9:86:68:35:e1:e7:d6:28:6f:c4:38:6a:05:94:f6:
42:89:dd:5c:cd:d4:95:d3:a4:7b:1b:a0:e6:3c:44:a0:8c:6a:
7f:9b:4e:62:ab:a1:89:b3:50:ea:7b:19:9b:ec:4f:bf:70:63:
5e:2f:2e:eb:64:ff:50:00:58:70:29:f0:5f:a1:d7:9d:8c:d3:
4b:9c:56:c7:58:11:86:6a:1b:b0:11:23:6d:73:ec:e4:43:aa:
15:dc:f1:de:9f:27:e1:b2:40:ab:e5:b6:cb:4d:ef:70:f3:bd:
05:8b:fa:83:f2:bc:60:a0:f9:6e:4b:ba:c9:5f:4f:7a:50:79:
f0:6a:71:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:45:10 2026 by rpki-client