Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
File: XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft (raw, json)
Hash identifier: JkHNJj2mUVhv+yuzH4BkzbouhyyTXE1mDFWSLR5QRr8=
Subject key identifier: 6C:12:1F:84:6E:A9:9E:DB:00:66:F1:ED:6E:97:9F:D8:96:CF:87:18
Authority key identifier: 5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
Certificate issuer: /CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Certificate serial: 019EB620EEA2E41791E6C3D1FD0AACB4C89F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
Manifest number: 1116
Signing time: Thu 11 Jun 2026 10:01:11 +0000
Manifest this update: Thu 11 Jun 2026 10:01:11 +0000
Manifest next update: Fri 12 Jun 2026 10:01:11 +0000
Files and hashes: 1: XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl (hash: MpoO2/7gvULEOCxA09so7sqfl3S30nHdthBjCfsacEE=)
2: jr0yuNLqeK_xhbuJCsSNuRbhB6M.roa (hash: iEdWiLEjiAZO/NJAgyr1vdLHg3AlGR9Y7mg3YwAaB/Q=)
3: txhV4jAB0u0krXb4kFMl_-o4obY.roa (hash: s+N5nLT8dkenkTXD8VPGodvyzkSe6kSpR2hC6MCplu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b6:20:ee:a2:e4:17:91:e6:c3:d1:fd:0a:ac:b4:c8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7401f32cd281699fbe4dcf3bb502a63a2a60de
Validity
Not Before: Jun 11 10:01:11 2026 GMT
Not After : Jun 12 10:01:11 2026 GMT
Subject: CN=6c121f846ea99edb0066f1ed6e979fd896cf8718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:7a:52:bf:93:5b:29:f0:28:60:73:4a:04:
60:7e:dc:2f:d1:ae:d7:c0:8e:28:6f:63:dd:18:fd:
bb:8c:8f:2d:e5:49:da:81:36:17:87:79:e9:d6:c6:
8f:4b:32:fc:08:94:64:66:e3:31:11:fc:31:17:cd:
d8:94:e1:7d:2b:34:2f:a3:7c:62:f6:a4:68:d3:b5:
0e:b0:04:5a:da:6d:b2:34:c0:7f:91:65:62:aa:c7:
de:20:ba:c4:99:de:ba:d6:ef:0c:31:8b:e6:df:aa:
90:40:6c:5e:4b:57:1f:38:58:03:11:e3:1b:c3:da:
3e:40:fe:82:7b:45:ff:0d:6e:d3:1b:f9:1e:d2:62:
37:31:e5:01:54:06:5c:12:ab:68:39:4d:64:c5:f2:
fb:7e:eb:72:3d:93:d6:c8:85:84:f3:75:3c:37:2e:
c5:48:fe:2b:3f:08:2e:6b:71:c7:35:b8:c6:2c:4f:
34:5c:24:f0:be:13:8a:f0:17:c7:8f:b9:e4:63:82:
d1:1b:9c:8d:12:5f:31:81:2a:04:a7:49:41:03:22:
e0:45:b6:15:a7:f9:f4:fb:32:76:bf:38:21:5d:94:
62:cb:5c:36:e7:ec:93:ae:da:65:c4:0a:0e:66:e9:
d7:19:d1:fb:6a:cc:a6:11:80:be:b6:f9:f8:72:e4:
36:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:12:1F:84:6E:A9:9E:DB:00:66:F1:ED:6E:97:9F:D8:96:CF:87:18
X509v3 Authority Key Identifier:
keyid:5E:74:01:F3:2C:D2:81:69:9F:BE:4D:CF:3B:B5:02:A6:3A:2A:60:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnQB8yzSgWmfvk3PO7UCpjoqYN4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/188994-2d40-4c48-ba88-f6070a4ad83a/1/XnQB8yzSgWmfvk3PO7UCpjoqYN4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3d:7d:df:1c:31:11:de:b3:12:ff:ff:a8:c4:1a:9a:bd:93:
7c:a8:97:3c:69:e9:88:5e:22:58:c9:9f:d2:44:19:5d:4c:b4:
8e:11:eb:79:6a:ec:84:52:74:38:09:c4:44:ee:05:87:cf:f1:
d8:1f:8e:ef:47:8d:df:9e:9c:03:6e:2a:4a:82:d6:05:a6:5b:
3a:c3:f5:0a:9b:4a:96:39:2d:eb:85:e9:e0:44:77:0d:7f:0a:
13:50:17:e0:96:74:b0:9e:9b:01:a4:9c:3b:5b:ad:05:35:b1:
58:b0:ea:5c:2f:b4:66:29:85:7f:dc:c5:64:38:0b:3d:aa:2b:
33:df:e3:17:65:63:6c:a8:24:69:6b:3c:fa:6f:aa:1f:32:d7:
a4:48:28:c0:c8:b1:8c:bb:79:9b:6f:82:af:c8:50:be:5b:91:
95:a6:9f:9b:04:62:ee:80:d7:da:57:e1:2d:7f:33:ee:84:af:
8c:60:8c:f8:bc:d5:fa:1e:9c:e7:03:08:70:47:9c:d1:b7:83:
5b:68:f9:0f:c8:d2:f2:0a:c7:d4:46:f6:96:0a:35:8e:2f:e8:
b2:ff:1a:44:ac:07:3c:0b:92:67:07:e0:70:01:42:64:8a:b7:
6c:ac:fd:22:49:08:7c:f3:85:a0:2c:eb:52:97:40:d8:a6:1b:
68:37:f5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:03:31 2026 by rpki-client