Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: NXCkcs+Qn3prDfCqXNZy+uJUY9UQCRHX1xOR3R+KMV8=
Subject key identifier: CA:25:20:43:20:3B:49:26:4A:2E:B9:98:2E:CA:3D:EA:8A:16:D5:FA
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 019F9E83558A6DCE515BC637B44F8BADE359
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 06E8
Signing time: Sun 26 Jul 2026 13:00:34 +0000
Manifest this update: Sun 26 Jul 2026 13:00:34 +0000
Manifest next update: Mon 27 Jul 2026 13:00:34 +0000
Files and hashes: 1: tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa (hash: 3SzovpialpEoSK1tVIj0K+EFB6CyFsxOHbtKDkoQSb8=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: U4OJfK8+kTH90c+2ATrYC1p9hWBQq1KiqeJ9aRgfYzI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:83:55:8a:6d:ce:51:5b:c6:37:b4:4f:8b:ad:e3:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Jul 26 13:00:34 2026 GMT
Not After : Jul 27 13:00:34 2026 GMT
Subject: CN=ca252043203b49264a2eb9982eca3dea8a16d5fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:f9:f7:38:24:fb:4e:93:59:b0:91:cb:46:96:
74:57:e6:86:ff:27:ef:de:95:55:5a:9e:9c:94:cc:
ce:74:ee:d1:14:1e:8b:11:9a:0e:3e:81:a4:40:3e:
6b:fa:f4:8f:4a:57:fd:64:4d:61:39:ae:b5:9f:c4:
b6:68:b8:44:7a:75:f2:73:08:32:4c:af:6c:cf:ba:
df:aa:03:37:b3:55:ef:5b:f1:22:22:30:6f:7a:29:
c4:df:cb:78:82:88:1d:d1:cc:e6:76:8e:b7:3c:94:
fc:47:eb:26:d0:9c:60:2a:96:3e:a3:a6:14:1a:29:
93:8a:3f:6e:01:d8:1d:76:79:4b:50:48:3b:dd:ad:
67:37:3c:af:0d:88:50:8b:34:c8:97:5f:a0:17:95:
e7:58:d7:82:13:81:38:9b:3b:fd:5b:f2:71:86:67:
56:0c:ad:53:3a:92:7e:5c:7e:f0:39:3b:f6:31:2d:
a1:d9:d1:fc:82:14:8b:a4:d1:2f:ff:29:d7:1e:38:
b8:c9:c7:dd:e0:62:03:f9:12:39:6b:16:cf:cb:a3:
a7:7b:59:eb:e6:8c:e6:4d:9a:48:ef:d4:59:f0:a0:
3e:06:ab:06:36:4d:06:a0:ba:0a:e0:dc:fe:c3:a7:
d7:c3:3b:44:e5:30:be:83:05:4b:2d:24:8b:3e:df:
e8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:25:20:43:20:3B:49:26:4A:2E:B9:98:2E:CA:3D:EA:8A:16:D5:FA
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:66:98:8e:42:9b:4e:c7:92:6b:24:7e:ac:ca:5c:39:93:66:
bb:02:cc:24:f7:a9:2f:7d:6c:94:38:58:5f:23:72:04:32:f1:
0d:f3:30:12:cd:04:0f:77:8d:3e:cd:79:58:32:f7:4d:72:e2:
64:b4:a2:38:13:94:df:26:d3:1d:8a:d1:7c:c0:32:c2:d7:c3:
c0:72:21:37:66:09:92:00:32:0f:1b:a3:eb:45:64:d6:63:03:
76:f0:00:3e:b7:82:b9:d3:a8:c3:64:ef:2b:34:57:fa:e3:6b:
70:53:5f:4b:b7:59:2b:90:2c:16:b1:65:62:40:d3:0e:84:08:
7e:8f:52:29:41:f5:ef:3e:03:1c:8d:f8:bc:d6:7c:5e:ed:36:
01:36:a8:2a:05:93:78:e8:e4:b0:c5:c7:77:63:1c:bd:22:7b:
b7:de:cd:b1:dc:a7:eb:36:8d:86:cc:b7:c4:80:9e:59:12:63:
47:98:ef:ee:81:3d:ba:ba:c0:09:1c:23:bd:23:bc:05:ef:55:
b5:f2:6d:59:a7:19:6a:f2:9d:c2:4e:73:ec:17:16:c1:4e:0a:
dd:6c:8d:d3:a6:97:70:70:74:c9:00:44:2f:c4:2f:27:7c:58:
bb:91:93:1c:28:a8:ca:1a:59:aa:71:7f:f8:ef:43:3c:b2:fd:
f7:34:10:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:32:55 2026 by rpki-client