Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
File: XZno1XE6XmOCwNE4nWJCgW-db7k.mft (raw, json)
Hash identifier: MefAHDf0vMCFCykBL0d4MHKhcEQ8HFghdTcvl9ihA38=
Subject key identifier: BC:A6:B4:D9:07:5C:96:3F:67:70:E5:21:BC:B0:8C:D1:97:DA:17:A8
Authority key identifier: 5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
Certificate issuer: /CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Certificate serial: 019EB9215DB6CC764568207A4BFFA6D36E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 00:00:32 +0000
Manifest this update: Fri 12 Jun 2026 00:00:32 +0000
Manifest next update: Sat 13 Jun 2026 00:00:32 +0000
Files and hashes: 1: 5goz8-8OWCAGaf7uOUR0Je34bUM.roa (hash: J9S/f1iEnZHS/9hQ1qliCFEtWZ5CLUMwNjtjL+9IEQU=)
2: A3GUvEekSZoXZuhfSPChuO_j1Ks.roa (hash: Sr4IKLMyPH4Jv5IyKyZQx1tQrF3BoNSld9Sli9uKBCI=)
3: XZno1XE6XmOCwNE4nWJCgW-db7k.crl (hash: LCIh57xHBtp0/kmBcr0eSl715UsRoUkIBgo861T5fg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:5d:b6:cc:76:45:68:20:7a:4b:ff:a6:d3:6e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d99e8d5713a5e6382c0d1389d6242816f9d6fb9
Validity
Not Before: Jun 12 00:00:32 2026 GMT
Not After : Jun 13 00:00:32 2026 GMT
Subject: CN=bca6b4d9075c963f6770e521bcb08cd197da17a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:af:d1:b8:9e:9e:ae:7f:30:6f:09:10:d0:
1b:18:6c:d3:67:8c:00:f4:10:41:0d:d3:39:1f:2f:
83:74:47:5e:80:05:2c:ab:63:54:b7:fd:fc:c1:19:
79:25:07:58:eb:66:6c:c1:15:f4:a8:7f:ee:08:26:
ff:43:a1:ba:da:9b:e2:8f:b0:69:f0:ec:e3:77:32:
d1:a0:a9:05:71:da:58:2f:42:e9:95:db:38:7b:73:
da:1c:2f:ff:47:53:43:d1:59:57:2c:76:3e:a5:6d:
19:f5:38:84:e5:bb:ba:39:6e:c7:d2:90:f6:3a:fa:
ff:92:e5:60:15:42:fe:e5:39:d7:ff:02:ff:d0:86:
37:4a:5c:bf:90:5b:d5:88:2e:2b:dd:26:49:3c:ae:
06:37:60:39:32:c3:ef:1d:d6:8d:60:a8:0f:ee:79:
20:2d:7f:c5:81:41:d8:c7:50:d4:a5:79:60:07:7f:
30:b3:ee:74:d6:1b:3e:dd:fd:02:03:55:12:8b:16:
53:9e:91:89:e3:79:9b:f7:6e:da:09:1e:91:a6:42:
bc:c7:54:60:10:60:6f:5f:b8:5e:b0:b9:fe:06:e8:
55:07:1f:27:ad:a7:b2:77:05:0e:91:54:5a:68:08:
59:47:5d:2f:b0:c5:20:ee:97:6c:83:89:12:b5:2f:
35:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:A6:B4:D9:07:5C:96:3F:67:70:E5:21:BC:B0:8C:D1:97:DA:17:A8
X509v3 Authority Key Identifier:
keyid:5D:99:E8:D5:71:3A:5E:63:82:C0:D1:38:9D:62:42:81:6F:9D:6F:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZno1XE6XmOCwNE4nWJCgW-db7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d2f992-3a17-4975-9c2c-9ca8ea90e617/1/XZno1XE6XmOCwNE4nWJCgW-db7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:1e:0b:dc:83:27:7c:b6:17:90:54:40:36:54:f7:bb:06:8f:
6e:56:83:38:84:4b:45:b2:a0:40:de:2e:e9:fc:c1:f9:c0:43:
a2:95:bf:02:43:97:e8:35:9e:8b:b2:cc:3b:11:32:d6:49:7c:
89:37:71:18:c2:4f:d2:81:7f:21:d0:25:c3:5f:87:08:0e:c8:
01:74:62:70:33:82:c4:31:e3:7e:09:1a:04:17:49:6b:4e:07:
a3:2e:0a:a4:2d:b5:8c:13:e5:51:e5:04:f6:3d:3f:cc:f8:da:
ff:68:98:d2:99:c9:86:1b:4c:a4:91:8f:9d:7c:c4:44:2e:34:
97:e5:0a:c6:b7:79:e1:b3:db:eb:e4:4e:b8:37:fb:25:ba:a6:
3e:77:8e:a1:a5:7a:fc:91:56:fa:ce:c3:15:5e:12:ea:96:b8:
8e:bb:2f:9f:b5:bf:a8:f3:f3:1e:1d:8c:80:81:d4:1e:88:d3:
b4:e5:a8:dc:f1:ba:b8:36:28:ed:6c:e1:fe:fa:f1:2d:13:59:
c3:e1:6f:19:db:6a:26:1b:4e:a1:18:ab:30:63:13:f7:cb:9c:
bd:b9:fe:69:1a:2c:d2:85:61:49:c7:2b:cb:ed:ad:8e:c6:f5:
a5:ae:1f:77:5a:20:d8:96:12:74:6c:b0:b0:2e:fe:c9:e6:a1:
29:e5:5b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:53:59 2026 by rpki-client