Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier: MA70XPQ3oDegjfRqxgt9/tdu3kzSOfVtPxWUDIFDL5Q=
Subject key identifier: 9F:02:74:A8:9C:0B:11:43:39:CB:AB:DE:3C:DA:8E:9E:19:FA:E7:8D
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 019F122E8074E10E3F9D1F1D518F88DC32CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number: 0E6E
Signing time: Mon 29 Jun 2026 07:01:05 +0000
Manifest this update: Mon 29 Jun 2026 07:01:05 +0000
Manifest next update: Tue 30 Jun 2026 07:01:05 +0000
Files and hashes: 1: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: P6TGaaS+pQG1Xz35Oh/G+m8376dRxzWP+qkWBlg4JgI=)
2: vSKxJft-YrfZTgTcPvrZEBw-s-o.roa (hash: fXlVBWLEGWm5OQD/WI5lmOPHwN/6Yh6slPhBeiX8hgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:80:74:e1:0e:3f:9d:1f:1d:51:8f:88:dc:32:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: Jun 29 07:01:05 2026 GMT
Not After : Jun 30 07:01:05 2026 GMT
Subject: CN=9f0274a89c0b114339cbabde3cda8e9e19fae78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2b:e3:c3:0f:36:17:ad:84:e8:ea:11:7a:25:
74:ad:a3:e1:24:42:f5:1f:15:41:1d:ee:02:8e:bb:
53:47:05:67:ba:6a:71:7f:41:ee:10:d3:8a:61:bf:
33:99:2c:ac:bd:1f:bb:ba:09:df:01:9f:23:5e:53:
9a:ed:20:20:f8:55:b0:51:6a:d1:d4:50:c3:05:05:
b0:39:d0:0e:ce:18:01:ab:de:73:30:58:90:9d:f7:
9f:d1:2c:83:18:ed:95:e9:e6:4a:47:82:53:49:02:
b8:ec:f1:cd:b2:4b:76:67:58:06:ed:78:c2:54:11:
77:42:be:16:95:4e:d2:38:b6:06:5b:7e:7d:9f:db:
92:1f:30:35:b9:f1:eb:6d:e3:0c:11:57:b7:9d:f3:
eb:5c:09:b4:73:3a:9d:48:20:3a:de:a3:5a:9a:f2:
4c:19:43:1d:32:72:6f:99:10:5c:a7:b3:9d:0d:b1:
8f:f6:c2:d6:61:a7:44:2f:fc:09:50:8c:63:94:f3:
21:ff:d0:f6:40:1b:46:b6:15:17:48:7f:f3:bc:c3:
b1:c1:b5:c4:8b:ec:e6:a8:57:a2:e9:2a:91:73:b3:
ab:34:fd:07:63:21:97:59:4b:40:a2:6e:f4:b6:70:
50:8f:fd:51:be:c0:0f:37:3a:f9:4f:2d:a0:3d:d1:
ca:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:02:74:A8:9C:0B:11:43:39:CB:AB:DE:3C:DA:8E:9E:19:FA:E7:8D
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ec:25:76:89:00:dd:56:cd:02:2d:58:c5:da:9c:75:bc:de:
85:2f:b8:6b:f9:07:87:d8:68:e0:b6:1c:86:c6:08:26:68:ad:
e5:96:3a:b9:19:da:88:a7:f6:73:eb:f3:45:9d:63:e1:6a:52:
09:0a:0f:61:93:f9:be:99:d8:4b:c9:d3:62:aa:dd:d8:4b:b3:
93:aa:18:d7:f6:69:6a:fd:16:8f:2a:6f:00:94:d4:d9:5b:98:
e4:84:2d:52:c3:b7:cd:85:3a:9b:09:d2:0c:e5:b3:be:70:4b:
88:e6:06:a0:34:84:39:7f:b2:f7:1b:cf:92:26:04:3b:7e:6b:
52:0f:18:82:18:4c:b9:82:e2:2b:7f:2e:5e:96:d3:29:83:0c:
91:16:00:0b:86:5e:a1:ff:8f:15:39:2c:6f:5d:3b:35:42:c5:
a9:02:56:d8:ba:ee:7d:b2:9e:f8:72:3c:72:85:4b:c9:0e:f3:
7d:52:11:5f:18:7c:95:f8:b1:2e:44:ee:92:2d:3b:b6:1f:29:
06:28:9f:08:bf:e1:9c:51:92:0c:68:60:49:18:91:ff:5f:04:
b3:c7:9b:71:48:c7:cd:eb:9e:fb:79:a6:a6:67:7f:f5:c3:6a:
8d:15:fa:26:1a:8a:cb:58:93:49:ef:4a:3b:16:91:01:fa:0a:
8d:a6:5b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:35:29 2026 by rpki-client