Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
File: XtmdScSw5GsnhoQnMeFTSFyKxIs.mft (raw, json)
Hash identifier: cjrHdq2pL63LauFdXryWuqYp0Fnlw7DhI41aIwjRPdk=
Subject key identifier: 71:D7:96:9A:EE:15:88:4D:9A:D0:6A:BD:7A:EA:7D:BD:C7:43:80:E6
Authority key identifier: 5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
Certificate issuer: /CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Certificate serial: 019EB76A6DDDC635C9C275948A8E486B66AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
Manifest number: 1037
Signing time: Thu 11 Jun 2026 16:01:05 +0000
Manifest this update: Thu 11 Jun 2026 16:01:05 +0000
Manifest next update: Fri 12 Jun 2026 16:01:05 +0000
Files and hashes: 1: 1-nsaGOYJDQs8nE83JBsjbwYRoPA.roa (hash: ZorqeuTKQ8BzMES+IbO5PhiAMx62C25+2z4OV8xpzBs=)
2: XtmdScSw5GsnhoQnMeFTSFyKxIs.crl (hash: oxcoGqUw4oEx0yfVoTkFUpbgYNz9C1RQMoISLzQ9ep4=)
3: fYv6u6ZqsaaVuf2RxvvaolhNBjk.roa (hash: jVk92j+q/o1dRJaAKw+eFCSe6j9s2E6quPaItwZl0/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:6d:dd:c6:35:c9:c2:75:94:8a:8e:48:6b:66:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ed99d49c4b0e46b2786842731e153485c8ac48b
Validity
Not Before: Jun 11 16:01:05 2026 GMT
Not After : Jun 12 16:01:05 2026 GMT
Subject: CN=71d7969aee15884d9ad06abd7aea7dbdc74380e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e4:ae:67:85:73:6c:d4:cd:ac:85:64:8e:34:
04:d7:bc:8c:05:73:f4:99:61:e6:2a:ea:7a:82:1e:
6c:5b:96:b1:4a:13:2c:32:86:3d:b2:ef:c6:fc:c2:
23:70:d4:88:4b:38:fc:5f:d5:e6:ef:1e:48:f0:07:
25:1c:ff:83:c7:89:bb:fe:fd:dc:c7:28:85:fd:9a:
49:8a:06:f3:eb:52:fa:93:fe:65:42:9b:95:b6:53:
87:d7:79:bb:0a:a4:3f:04:5a:cd:3e:93:df:c8:5f:
f8:5e:2f:32:14:0f:4a:e1:07:a4:ae:b4:b3:14:13:
d8:1d:eb:70:31:2f:b4:c8:f1:53:33:67:4e:1a:15:
77:a7:9b:33:84:36:10:c3:9b:91:e1:87:20:5f:5a:
9c:4e:df:1a:85:0b:6a:ce:d4:08:61:6f:12:7d:ab:
02:eb:fa:d9:c7:0d:c0:d1:3c:e4:03:42:84:25:e6:
47:c3:1c:10:62:b4:32:e1:c2:3f:5a:96:ed:38:2b:
78:d2:fb:1f:f8:33:1e:ea:5d:ae:c2:25:f4:55:d5:
cf:d2:78:a0:fd:5e:ad:b8:6f:a0:a5:9c:fc:d9:23:
c8:3d:58:db:cb:21:fe:ec:73:75:5a:67:6a:8f:f4:
10:ab:da:17:4a:fc:3c:d4:52:e8:bd:d2:01:ce:a6:
ae:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D7:96:9A:EE:15:88:4D:9A:D0:6A:BD:7A:EA:7D:BD:C7:43:80:E6
X509v3 Authority Key Identifier:
keyid:5E:D9:9D:49:C4:B0:E4:6B:27:86:84:27:31:E1:53:48:5C:8A:C4:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XtmdScSw5GsnhoQnMeFTSFyKxIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/9b893e-7b0c-41aa-a951-90c3afc7c947/1/XtmdScSw5GsnhoQnMeFTSFyKxIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:21:bd:3d:05:1a:93:4b:7c:ec:c1:98:ac:4b:67:fe:2c:f6:
01:88:49:83:76:b6:98:f8:60:3b:8c:f3:15:fe:ae:8c:0b:35:
da:3c:f0:5b:e8:67:d8:09:4c:0a:85:59:63:8a:6f:e2:31:f9:
af:b0:bd:b0:de:e4:8e:9d:5a:86:dc:1e:82:fe:06:a9:11:9c:
ad:39:72:d0:69:be:a2:b1:e2:6b:49:e2:56:b5:d6:21:55:c2:
6a:3b:a9:69:72:51:3d:eb:69:f1:3f:42:9a:47:dd:67:60:0b:
6a:f7:be:aa:8c:21:4d:72:a6:5a:27:b0:4c:d2:03:c0:3a:32:
0a:cd:3c:4b:39:08:eb:d8:c0:8f:2d:21:c0:2a:ee:de:c9:15:
84:59:34:f1:16:67:44:63:8a:9e:f5:8a:5d:b3:26:0c:53:7d:
7d:ea:9a:6c:3e:90:fd:18:28:07:28:b9:24:78:54:56:83:58:
33:97:b2:01:2a:19:f9:c0:97:3a:ee:08:0c:72:aa:38:32:0f:
e1:95:e3:54:77:74:7a:4e:64:d9:b7:5c:53:86:56:c6:ef:3d:
e9:80:91:f5:bd:77:9e:19:e1:56:ac:9a:ea:a4:5f:e4:b4:07:
a0:85:bc:7e:6e:37:fe:b7:aa:65:88:30:69:6f:ee:98:2e:0c:
04:73:f9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:58:38 2026 by rpki-client