Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
File: XWMX9pNua1eLOMPfsZgCVJj8rqE.mft (raw, json)
Hash identifier: +qHByF+DTH8yFd4+ybB7bKYDGigVqOTHC/i9/1sA0mU=
Subject key identifier: 6C:B7:C3:E9:C0:9B:AA:62:03:B8:D5:16:F0:09:9A:BA:1A:DA:2B:7A
Authority key identifier: 5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
Certificate issuer: /CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Certificate serial: 019EB958A84036410C63D5A0DE1C30A1E41E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
Manifest number: 08A7
Signing time: Fri 12 Jun 2026 01:00:55 +0000
Manifest this update: Fri 12 Jun 2026 01:00:55 +0000
Manifest next update: Sat 13 Jun 2026 01:00:55 +0000
Files and hashes: 1: XWMX9pNua1eLOMPfsZgCVJj8rqE.crl (hash: oAAQJl7Ulc5puX4LJPAFdtDt/9zUYRR1MIznIH59FuU=)
2: ap-hePAObGM0xD9pl1yT2LqZzQg.roa (hash: mxBd1kBKjM1E0LiaQSAHHf7cP2igd3O8Gy2yRTKiPCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:a8:40:36:41:0c:63:d5:a0:de:1c:30:a1:e4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Validity
Not Before: Jun 12 01:00:55 2026 GMT
Not After : Jun 13 01:00:55 2026 GMT
Subject: CN=6cb7c3e9c09baa6203b8d516f0099aba1ada2b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d4:52:fa:80:c4:8a:f4:66:05:d5:99:4c:bb:
f0:49:78:6a:4d:2e:06:53:40:51:c8:b2:10:45:2c:
e1:95:0b:dd:10:a5:01:c7:1f:9c:98:64:ad:8b:ae:
ba:1e:09:0f:3a:02:3f:53:ee:a9:9c:2b:50:48:95:
8f:d4:94:a7:5f:6f:48:72:30:89:89:1c:27:67:b6:
92:40:a1:80:a1:f1:64:9f:d1:66:ee:d6:00:ca:56:
06:5d:7b:0a:60:18:cd:1e:09:3e:76:1c:b3:d8:08:
a0:ef:2f:63:bb:d8:53:56:c2:55:2e:50:c6:0b:4d:
85:d9:59:68:b8:4c:d9:79:dd:69:b2:e2:45:ef:3b:
f6:d0:5b:ef:8f:a4:7e:66:db:2a:3a:7a:1e:e9:7e:
e8:48:f8:3a:86:fd:38:8f:e0:6f:03:49:d8:e0:54:
ba:e0:17:41:a7:64:7c:41:0d:78:88:68:5f:d1:15:
d4:c3:a8:b5:86:0e:a9:ea:03:2c:9a:65:38:b9:8e:
b4:de:a2:aa:f6:14:6b:bf:ed:9a:47:7a:68:54:b5:
49:8d:24:46:6d:a8:7f:ef:64:4e:4f:ab:c7:84:ad:
86:fc:e6:6d:bd:22:c9:ee:4c:81:ab:e0:f8:79:57:
c1:24:31:2e:11:6f:2e:23:7c:3b:e8:dc:66:ca:d2:
e6:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B7:C3:E9:C0:9B:AA:62:03:B8:D5:16:F0:09:9A:BA:1A:DA:2B:7A
X509v3 Authority Key Identifier:
keyid:5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:db:ba:49:29:c6:d3:44:e8:c9:2b:1c:78:9d:7a:b7:ea:27:
5b:43:f5:29:64:23:5d:84:6f:52:4f:ff:7a:2d:00:8f:4b:b3:
fc:98:47:6d:61:06:37:7b:0e:42:e3:6b:34:60:c4:a1:6b:0a:
4b:1d:14:e4:ce:1f:6e:b4:90:a7:f3:dd:f8:02:f3:7c:08:af:
e9:8e:51:8e:1d:f8:43:d7:ab:b2:2b:18:66:97:fc:70:72:a8:
a8:59:14:00:f1:17:70:75:83:70:13:c4:17:e4:1f:c9:80:6a:
99:2f:9f:8c:31:63:4a:dd:73:31:8f:74:94:7d:3f:27:7c:b1:
13:a4:71:51:07:46:f5:38:d3:92:13:6a:b3:80:b7:e2:44:f4:
89:67:e6:48:fd:73:ca:88:ee:82:02:d3:b9:01:61:4e:0d:2b:
25:dd:96:84:31:6a:dd:43:9c:99:3e:f9:d3:7c:c7:38:e9:da:
c5:4d:95:a8:7d:7f:02:f9:a5:34:69:81:8f:58:ae:c8:a6:7e:
98:3e:a5:a9:6a:2e:69:93:15:ab:1d:76:bb:0e:10:15:be:ac:
b6:62:d2:38:61:d4:d3:51:d3:32:af:16:fa:1f:c5:99:c2:38:
ec:2c:fb:b5:48:01:7e:bf:7a:67:a9:fb:90:3d:7e:f2:44:0f:
47:7e:20:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:23:15 2026 by rpki-client