Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier: L3syqDyJyAFcWO0rzRs+4Sjj/MZamFHaqco8UzXqSek=
Subject key identifier: 21:73:CE:F4:2E:71:8F:52:EE:8C:08:F2:EF:6A:BB:09:CF:D0:D3:4A
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 019E9C2A886F06D9AA425FD520000E8091F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number: 157F
Signing time: Sat 06 Jun 2026 09:01:33 +0000
Manifest this update: Sat 06 Jun 2026 09:01:33 +0000
Manifest next update: Sun 07 Jun 2026 09:01:33 +0000
Files and hashes: 1: Sg_4XUAI-4zoY2AzgRoGFITRYgE.roa (hash: J1EWDPsgpuehOfFX0CglsLJx+tt5cw97sY3WgurbJXo=)
2: TeQy6kFDHKNYmWvI94KK1SajumM.roa (hash: 9uvICF7tqz4KyCQG2zRzp+9JspsGn3aZOu1Zg1a40nY=)
3: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: C0Vu25gggLqQ6YNISWQBKA0I1Bz4lNgOofQR5YoNa4U=)
4: dhOZf_4fAgQZi4_moQSI8o9EFj0.roa (hash: 5T/3rUQwrhAAxuFwErHVP6jvrc57b61OVidSPKCnMBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 09:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:2a:88:6f:06:d9:aa:42:5f:d5:20:00:0e:80:91:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Jun 6 09:01:33 2026 GMT
Not After : Jun 7 09:01:33 2026 GMT
Subject: CN=2173cef42e718f52ee8c08f2ef6abb09cfd0d34a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:60:6a:d7:38:1c:36:d5:b0:23:7c:e4:f5:6d:
66:c2:fe:a9:b0:e5:8a:8e:56:46:fe:19:19:02:92:
40:bb:81:9b:e3:cf:14:0b:cf:fc:ee:9d:de:6f:b9:
c5:6b:ee:dc:f2:56:4f:35:de:61:3c:0a:90:91:35:
41:cf:e6:b2:25:b8:77:37:26:ed:b1:bc:b9:54:b3:
b9:71:10:c2:8b:62:cc:56:da:a3:8e:64:a2:2c:bb:
6d:52:89:e3:ce:53:46:a0:71:42:e4:e6:c4:1a:60:
65:c2:0e:21:12:4c:63:6a:a1:ec:3a:21:ff:77:a0:
51:bb:52:3c:90:6b:b5:10:65:e9:ad:a5:8e:2b:bc:
95:75:42:cf:c0:b3:c4:2e:fc:ce:e6:6c:cb:d0:2e:
dd:57:b2:05:f7:9f:7b:26:2c:4f:f8:41:3a:f6:0e:
04:ed:ed:91:85:19:4d:5d:e1:d8:71:b9:38:61:7a:
05:8e:40:df:22:fc:43:07:21:26:25:32:9f:ba:39:
90:14:fe:59:be:c2:47:96:72:35:42:11:d5:3e:23:
7c:d1:83:64:21:88:0f:63:55:93:6d:57:fd:c5:f8:
b9:e6:b1:34:3d:ca:f7:a9:e3:b9:38:de:5b:b4:15:
58:db:14:f4:f8:ba:cd:ed:ae:99:b3:10:79:ab:9b:
ca:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:73:CE:F4:2E:71:8F:52:EE:8C:08:F2:EF:6A:BB:09:CF:D0:D3:4A
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2d:05:ed:1b:72:c1:d5:33:23:0c:03:f2:65:d9:33:de:f1:
ef:1a:ab:14:b9:0a:82:15:f1:0b:2f:98:80:e8:7a:03:c2:68:
05:67:d4:bb:dd:eb:4f:04:a7:4f:5f:9e:62:b9:7b:7f:26:63:
9a:4a:ca:aa:c8:b1:b3:33:28:68:a4:ae:aa:d0:4c:ac:29:94:
14:94:3c:bf:93:7c:23:91:2c:30:92:18:fe:c1:61:85:12:20:
9c:8d:dc:03:f3:65:4a:f1:38:de:1d:04:f8:98:37:b9:12:be:
8c:30:2d:92:d3:61:aa:30:f5:58:d6:11:fe:95:93:3e:bf:82:
7e:d6:35:0c:dd:50:ac:11:0e:a9:14:fb:33:b2:22:00:8b:f5:
b8:23:bb:97:f0:77:a6:d3:e3:3f:81:6f:a5:60:78:17:2a:72:
9f:a6:1d:7a:b5:70:05:19:ca:b4:90:87:4f:75:54:87:88:dd:
a7:38:e5:57:40:59:d1:d9:15:64:26:df:40:6e:8b:5b:00:0b:
77:fb:1d:a0:29:25:de:a0:62:66:1c:6c:90:62:d7:82:0c:06:
f7:1c:af:9b:f7:61:7c:9b:e0:be:bf:6e:8b:43:73:b7:8a:46:
5d:b6:aa:94:8e:39:a4:55:78:40:95:86:d5:54:fd:5d:cf:2b:
e1:c4:db:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:02:09 2026 by rpki-client