Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
File: xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json)
Hash identifier: I9jcJSJI+kfHkesCm9DPkFbCfeOJUuLVcKGDDknCbeA=
Subject key identifier: 5B:97:C6:CD:99:03:A3:F0:E1:C4:D5:48:21:87:24:82:09:A7:56:85
Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Certificate serial: 019EB95897AE6B93877DC934F4FDDE2A60F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 01:00:51 +0000
Manifest this update: Fri 12 Jun 2026 01:00:51 +0000
Manifest next update: Sat 13 Jun 2026 01:00:51 +0000
Files and hashes: 1: anR-jiw5iWX6P_O3ZLR56HCtW8Q.asa (hash: 7u+mvM88sgrFTXJweELAa6KOQrCFYjsrbqETsAKlTPs=)
2: lXZ70sH06yN7K7WcAZYGhagQGQU.roa (hash: eJ37tNCDP1cEuP29zNg/vJT6DSno9tiJhEXL9Ek6IDY=)
3: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: dq9KYjExPd+Yagj6/b0vY2AIpFOtw+L3fnQozfJa7zY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:97:ae:6b:93:87:7d:c9:34:f4:fd:de:2a:60:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Validity
Not Before: Jun 12 01:00:51 2026 GMT
Not After : Jun 13 01:00:51 2026 GMT
Subject: CN=5b97c6cd9903a3f0e1c4d5482187248209a75685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:10:2a:09:9a:e3:b6:9d:21:52:97:66:cf:72:
90:92:4d:ea:ba:74:a4:af:3a:b9:95:b8:e6:b3:1c:
2b:e6:0e:75:c1:8e:fc:e1:e5:22:05:45:8e:40:50:
79:16:46:91:78:75:ca:44:8b:53:f8:16:46:52:5d:
84:64:04:80:72:f9:e9:d1:48:22:0a:59:49:a1:37:
a3:bd:c8:38:47:35:0d:50:81:73:08:a2:55:4c:60:
0e:b2:6e:70:3f:88:e4:df:09:67:12:13:7d:f9:c1:
92:c4:8f:22:fc:c0:b5:36:85:e9:eb:5a:e8:9f:67:
a6:76:44:ab:5c:dc:89:74:44:5f:2e:8c:94:f1:d7:
8a:a2:0a:84:c8:33:6b:73:07:3f:33:a4:95:ae:dc:
28:b8:21:40:88:69:f2:d4:7c:75:d1:36:01:a6:45:
fb:9a:10:8a:45:40:88:19:c9:f3:e1:5e:74:52:35:
48:74:0e:97:b7:4b:5e:1e:eb:93:a4:8c:48:3a:bd:
9e:a1:71:07:27:4f:89:ec:f2:d1:2f:3a:df:d1:62:
98:c8:6a:ed:c7:45:db:54:e2:a3:a8:d7:ee:31:2b:
41:a7:17:ed:a6:2f:be:97:7e:d9:a4:af:81:eb:70:
1e:90:dc:d4:64:dd:a2:c7:f4:1b:e8:d4:83:d6:09:
bd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:97:C6:CD:99:03:A3:F0:E1:C4:D5:48:21:87:24:82:09:A7:56:85
X509v3 Authority Key Identifier:
keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:32:9b:3f:16:82:08:b1:14:fa:a0:35:2b:23:b2:59:a6:7f:
78:c7:63:76:58:28:1d:df:25:d6:38:e2:b9:bf:4c:8d:22:e7:
c5:e8:e0:78:15:a8:0d:aa:99:3a:d1:79:7e:c5:bf:3b:c5:1f:
65:dd:69:b3:4c:3c:6c:f2:a0:d5:42:4e:1a:6f:4c:da:da:98:
78:6d:26:3d:22:b9:b0:70:be:c5:dc:db:f1:9b:75:5e:b2:a2:
1d:82:37:82:cf:68:1e:b6:b0:6a:51:3f:97:eb:69:84:bc:d9:
75:90:44:b7:67:6a:ad:46:5d:78:9e:16:8b:aa:03:87:fa:c3:
d7:73:79:2d:b8:68:9a:7d:16:3f:cd:0b:f3:39:a0:34:22:37:
35:5c:b3:83:7e:d9:34:66:54:c2:b8:0e:75:b5:0b:1a:97:73:
b0:e7:54:50:1f:cd:17:da:f3:bc:3f:a4:d0:bf:fa:f5:78:f7:
16:90:f1:fa:c9:8b:7c:f2:c9:5d:86:92:55:06:d4:21:0d:cf:
c6:5c:b7:52:79:13:dd:f7:60:f0:82:cd:3e:4d:4d:99:ce:24:
41:9a:38:89:f4:cf:5e:0b:a9:4c:81:1f:71:b1:0f:39:f5:dc:
7b:90:c0:90:0d:77:5b:5d:da:c3:42:b9:c3:d3:39:47:c8:a0:
e4:b3:12:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:39:53 2026 by rpki-client