Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
File: xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft (raw, json)
Hash identifier: OEymhD4SVOSqiAupyKaxSvq3Q5hHlWdsECyO9p5RSpI=
Subject key identifier: D4:46:1E:EA:FB:70:86:C9:B8:93:5F:4C:86:44:55:B7:72:55:7A:C8
Authority key identifier: C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
Certificate issuer: /CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Certificate serial: 019EB87C49FC4E815664BE0BE6623A0322C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
Manifest number: 1955
Signing time: Thu 11 Jun 2026 21:00:13 +0000
Manifest this update: Thu 11 Jun 2026 21:00:13 +0000
Manifest next update: Fri 12 Jun 2026 21:00:13 +0000
Files and hashes: 1: BQk9R-N3GOOYrja30Pn_XVDUf88.roa (hash: Yweym3mWkXHkGOyAmG6nDG9vHGdFCmlWDKJNXExlolQ=)
2: Z16EOuIvCScFGsV_p1V2RWzx1ZA.roa (hash: rAhtAVQwXrS7vputjJ+v+BvlJ+PvCNgskZKO8Cfnpys=)
3: xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl (hash: xRax3H8A9cyCy9G62p0YtuOr6fBEBu4kmMk0vWmtrg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:49:fc:4e:81:56:64:be:0b:e6:62:3a:03:22:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c69ceb1240844cde8a168897e47c1df5d6ecbf21
Validity
Not Before: Jun 11 21:00:13 2026 GMT
Not After : Jun 12 21:00:13 2026 GMT
Subject: CN=d4461eeafb7086c9b8935f4c864455b772557ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d5:9c:75:88:d5:54:e0:53:86:19:b8:8d:b7:
a0:e9:63:62:cf:86:6e:f5:be:50:0a:a4:03:ba:dd:
c7:d2:f8:89:c1:8a:1a:09:93:78:54:29:2f:1a:1a:
d1:2a:bb:3a:44:b7:74:37:2d:80:82:0c:b2:0e:4c:
99:d6:dc:9b:e1:e2:47:9e:a6:d6:c5:5a:f6:75:49:
1b:f6:1a:6c:f5:d9:ed:35:8e:fb:c2:41:6f:5a:fc:
72:79:dc:f0:d8:6f:97:fa:bb:1e:8f:83:06:3a:0f:
95:57:33:e3:d9:63:33:31:5e:d3:a4:e6:b9:6c:cb:
7f:8a:74:7b:f5:f9:eb:af:6d:cc:66:e9:87:f2:5c:
be:61:c8:6f:cb:d3:ee:93:c4:7e:3e:d3:7c:86:6f:
f9:75:4d:88:8b:a8:1e:38:bb:e6:df:15:9a:bc:98:
9d:b7:74:e6:73:35:52:f9:d0:35:2b:b3:e8:19:50:
04:a7:25:90:99:2f:0a:a3:26:ae:ad:2c:13:19:12:
c3:05:7e:2f:c1:a8:74:8c:33:77:ee:c8:a2:a0:4e:
9d:36:16:c3:6d:18:f3:5d:94:6c:95:45:79:6f:db:
fa:e5:e9:d0:19:0b:46:d7:cc:c2:30:e0:be:bf:ef:
72:72:47:28:ad:34:58:aa:fd:6f:00:ef:9e:d5:53:
83:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:46:1E:EA:FB:70:86:C9:B8:93:5F:4C:86:44:55:B7:72:55:7A:C8
X509v3 Authority Key Identifier:
keyid:C6:9C:EB:12:40:84:4C:DE:8A:16:88:97:E4:7C:1D:F5:D6:EC:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xpzrEkCETN6KFoiX5Hwd9dbsvyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/0fbd8d-820d-4979-81a3-8be9571eb10d/1/xpzrEkCETN6KFoiX5Hwd9dbsvyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:a1:13:45:d8:1e:24:0a:1d:e8:98:1a:71:54:8e:4e:a2:60:
ee:f1:f7:79:22:b2:d1:79:df:0a:2d:55:69:a9:4e:f4:05:11:
3a:b1:42:48:23:8c:31:19:3c:31:27:d8:45:27:b7:6c:0b:ab:
80:97:8c:de:2a:5d:fa:c1:25:f9:fa:b6:a4:07:fd:a3:fc:f9:
e8:14:0f:f5:73:2b:b1:c1:f0:9d:f5:23:42:fe:2b:64:65:f4:
97:30:d4:fc:d2:ec:55:df:fe:f2:01:d7:8b:96:47:55:be:15:
b2:f0:ed:3d:37:01:e0:cc:ea:81:5e:c2:d0:04:4d:7d:00:5b:
20:f3:b2:20:bd:e0:4a:6a:c6:50:42:c0:91:c9:a6:58:26:7a:
fd:de:ae:03:35:78:86:16:1f:d7:2f:4c:88:2d:de:27:9f:69:
18:8f:8a:5e:56:ed:3b:e1:e8:83:78:b3:fa:d9:2a:a2:2d:26:
42:7b:71:33:34:7b:5d:bb:29:03:78:4f:db:2b:cd:f5:7a:fa:
0f:06:fc:b8:bd:32:2c:35:fd:4f:0c:6f:f4:7e:ed:e8:53:b7:
d3:8e:01:3b:40:76:e5:4c:10:8f:22:f7:d0:e8:33:84:a7:a6:
4e:b7:c8:f6:7a:e5:9c:c2:c0:6d:7e:f1:e9:6e:6a:b6:25:08:
28:25:93:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:09:56 2026 by rpki-client