Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
File: Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft (raw, json)
Hash identifier: 5yxT+U2hJJiQao5asoijSmZYFmPmGuC1vKn+wo7G+HA=
Subject key identifier: 2B:87:76:6F:C6:0C:FE:17:4E:EF:20:60:65:20:4F:A4:EF:1F:4C:26
Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
Certificate issuer: /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Certificate serial: 019F0E51EFC0C2868FE6DC274E43EF685CB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
Manifest number: 1986
Signing time: Sun 28 Jun 2026 13:01:18 +0000
Manifest this update: Sun 28 Jun 2026 13:01:18 +0000
Manifest next update: Mon 29 Jun 2026 13:01:18 +0000
Files and hashes: 1: 7_n1YNS1aUe0Bo_pCtHt0pUhIqw.roa (hash: xzYsTyhKWQal1xfqWksT1weyCxFWFp7bUNSd2LqW3lA=)
2: Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl (hash: hfI5cu6Id+kRGWitEsqhwwA3rkjdj9bHjuPqITApuL8=)
3: qMmguo9Z2V-BC5t7evoX7K1Fbss.roa (hash: V408yrY8gn/eWE6bGQXHDcnC3POLPttI1BvbFvBLTFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 29 Jun 2026 12:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:0e:51:ef:c0:c2:86:8f:e6:dc:27:4e:43:ef:68:5c:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Validity
Not Before: Jun 28 13:01:18 2026 GMT
Not After : Jun 29 13:01:18 2026 GMT
Subject: CN=2b87766fc60cfe174eef206065204fa4ef1f4c26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:a2:ca:21:09:2e:cc:ff:7e:17:63:a3:3d:34:
81:bb:fd:a8:72:20:4b:6c:a7:54:48:75:53:b8:1c:
b6:c7:be:c5:9d:16:35:44:28:a7:db:fa:0c:fe:19:
49:06:e2:e5:ca:aa:e3:df:8f:0e:df:2e:1e:14:26:
82:cb:de:4c:02:e9:b8:de:f9:10:3d:82:06:87:ef:
64:fe:26:5c:bd:45:22:3f:09:09:2a:0d:a9:d6:17:
8b:ec:61:f4:2b:80:c4:97:f0:46:ad:09:0b:35:23:
f0:95:65:37:31:28:c4:e6:f1:0f:4d:8f:31:e8:26:
ba:96:44:bc:99:5b:9a:4a:a0:b0:39:98:54:0a:32:
81:1a:68:ca:c2:51:e4:e6:c2:d6:17:06:28:f1:b8:
c4:a2:ab:f4:d6:2e:87:18:f0:41:40:51:68:8b:5e:
dd:58:00:a9:49:8d:7b:02:63:54:e1:ce:ac:97:37:
43:82:ab:05:42:69:9f:55:5f:58:25:e9:48:73:21:
80:e0:29:e4:0b:d4:47:b8:be:80:29:89:54:f2:11:
ba:32:3f:47:d4:cb:6b:d4:50:70:41:93:12:3b:1e:
63:06:0a:e1:c3:b3:01:3d:17:bf:f1:bd:a1:03:73:
29:3b:2f:5a:82:85:ea:cc:6f:c3:19:09:6b:66:9b:
ed:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:87:76:6F:C6:0C:FE:17:4E:EF:20:60:65:20:4F:A4:EF:1F:4C:26
X509v3 Authority Key Identifier:
keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
de:01:96:a6:3a:36:95:85:48:0b:a1:1d:e4:3c:92:f7:19:d6:
01:c8:27:5d:83:da:5c:d4:a1:15:3f:ca:92:21:26:23:2a:d7:
82:db:be:45:90:70:9b:7d:e3:37:1e:e7:d7:7b:1f:69:2b:0a:
89:a1:0c:30:9b:59:14:4c:71:c5:9d:99:7b:b1:8d:9a:fa:e4:
8d:ca:12:0f:cc:ab:52:aa:2b:5a:f0:3b:9e:36:58:13:fc:05:
b6:a4:57:c0:b1:a3:24:9a:ab:68:2b:a9:0d:65:47:b9:b8:5b:
f1:e2:44:10:61:85:32:3b:6a:86:cc:c0:a3:b1:d7:7c:9d:ac:
f2:f3:7a:88:d9:9d:fc:62:e9:8a:9d:a3:93:e4:f8:9d:21:bb:
74:85:59:b7:0e:46:3e:7e:09:24:d6:73:05:b6:d4:4d:37:4f:
16:7d:77:bb:bc:0d:d1:0a:a8:28:60:6f:cd:15:7e:bb:58:3a:
58:54:6a:9d:b7:8f:d5:79:8e:50:56:f5:30:4e:58:d1:e9:fc:
f8:d6:62:16:34:97:c5:1a:ba:ea:6c:18:0a:32:71:1a:29:a8:
b4:92:ff:08:56:b9:48:95:88:7c:91:48:0a:d5:71:e3:28:2c:
e3:e3:dc:0a:ea:ce:bc:67:aa:81:c5:57:14:27:e8:26:c1:52:
de:ae:b2:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 20:35:46 2026 by rpki-client