Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
File: XNaRDPHi4rHKNHPEt9CSAg57fGE.mft (raw, json)
Hash identifier: aSvvtwnGJ/6q6zwNhG0MWgP7tOus5Fcpl4FPOXkXtnE=
Subject key identifier: 1E:60:AD:B8:2D:42:BC:D1:F7:47:59:FE:0B:C0:7E:E4:8E:43:B3:B1
Authority key identifier: 5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
Certificate issuer: /CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Certificate serial: 019EB87C86D270A01D56F601758EB3686E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
Manifest number: 18E7
Signing time: Thu 11 Jun 2026 21:00:28 +0000
Manifest this update: Thu 11 Jun 2026 21:00:28 +0000
Manifest next update: Fri 12 Jun 2026 21:00:28 +0000
Files and hashes: 1: 1-JQqdOgGI5A2jgfNA9GBznLZL4o.roa (hash: 8aD9D5dY520w/e92POgprpQwJQRjt7y1yNeMs6zlp6Y=)
2: XNaRDPHi4rHKNHPEt9CSAg57fGE.crl (hash: hFLCFYCXEQfBXzf2227Khbp+eihvUp9buemEEc4pgsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:86:d2:70:a0:1d:56:f6:01:75:8e:b3:68:6e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd6910cf1e2e2b1ca3473c4b7d092020e7b7c61
Validity
Not Before: Jun 11 21:00:28 2026 GMT
Not After : Jun 12 21:00:28 2026 GMT
Subject: CN=1e60adb82d42bcd1f74759fe0bc07ee48e43b3b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:08:60:5e:55:95:63:63:3f:c3:e8:67:bc:4c:
a4:90:3d:bb:44:2e:e8:5c:a7:87:fb:86:d6:e1:78:
f4:73:8d:0b:e0:33:7c:c0:4b:84:6d:3b:e3:80:49:
03:e7:1d:c5:33:19:09:c2:a4:91:28:e6:0f:47:9e:
0b:ea:93:ee:4d:6f:50:42:1b:70:06:be:d7:1d:49:
c1:15:3a:75:e9:f6:f3:92:c0:dd:e5:a0:ef:df:f5:
07:a3:6a:b2:6a:e1:91:2d:9d:63:16:ec:f7:52:59:
ed:fa:c4:26:f6:3b:66:0b:ff:a8:81:1d:07:24:fc:
b3:b0:08:bf:16:0c:83:c5:fc:bc:a1:d4:6d:f5:cc:
3a:d5:9b:c7:6b:4b:43:ad:91:be:ba:d8:cc:4e:fb:
b6:83:1b:3d:c5:39:0e:03:c3:21:d4:01:00:d9:6a:
0b:3c:06:5f:91:d8:ce:56:20:2d:23:d9:a2:ae:da:
6d:1c:16:99:40:b3:f2:6d:41:6c:10:de:f3:8a:2a:
87:40:ef:48:d7:ea:d9:18:dc:0c:a5:30:a8:8f:ed:
94:64:0a:dd:87:03:f4:07:77:fc:d4:59:5c:f6:35:
28:90:ff:b4:8d:15:f7:67:b2:44:0d:41:d2:b8:fd:
88:37:9d:03:0e:02:25:b0:bd:fb:46:e4:12:d7:3b:
08:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:60:AD:B8:2D:42:BC:D1:F7:47:59:FE:0B:C0:7E:E4:8E:43:B3:B1
X509v3 Authority Key Identifier:
keyid:5C:D6:91:0C:F1:E2:E2:B1:CA:34:73:C4:B7:D0:92:02:0E:7B:7C:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNaRDPHi4rHKNHPEt9CSAg57fGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d2b87-0de3-4f93-ad64-172c60b3e36d/1/XNaRDPHi4rHKNHPEt9CSAg57fGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:67:fc:9f:d5:21:58:bc:b2:3f:bf:64:c1:7e:c2:16:b4:92:
e4:fd:a7:1f:70:ba:fe:47:51:75:a6:a3:98:b2:b8:ef:70:60:
26:d4:1c:55:ce:b5:10:eb:db:fb:2d:76:dc:ff:4a:fd:b6:47:
71:d6:a6:89:b3:0a:2d:ac:31:8d:97:28:a3:48:74:7b:db:04:
26:b8:7c:0c:36:11:18:d6:c3:5f:42:90:8c:a8:71:3e:5d:b9:
23:15:ce:aa:7e:93:d4:ee:be:75:f0:82:36:2d:b2:f0:f3:17:
7b:b5:cd:28:51:b0:b3:0e:b3:22:9f:45:ec:bf:88:8b:73:93:
ea:b6:8d:ab:69:a5:91:57:1b:55:eb:a3:91:60:6d:d7:a4:91:
9b:d1:39:20:0f:e9:0b:74:a4:9e:9a:96:ed:82:cc:a0:5a:77:
e4:05:ba:45:1f:7e:79:00:cf:bb:5c:5e:86:70:57:75:89:f7:
6f:57:de:77:18:45:68:dc:a4:27:d4:2a:4a:b2:e8:e3:a7:47:
cf:75:57:b0:72:5e:0b:c4:9c:1b:f9:d1:7d:7a:8f:13:c4:d8:
9f:02:08:6b:23:70:07:9c:29:db:81:1b:70:70:01:4e:a6:f7:
16:58:17:86:2a:5c:76:d7:9c:49:67:41:1f:d3:75:c9:86:3f:
26:1e:e7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:50:38 2026 by rpki-client