Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier: XAaYlL3K4ytZ2AvKI49y5lr6UUuebW6AV61ong6Zwy4=
Subject key identifier: AA:2E:BC:4B:63:8A:44:28:DE:47:E9:26:B5:8C:74:9E:9A:4E:C3:DC
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 019E9B17D646947E8378362B50FCE316E57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number: 18B8
Signing time: Sat 06 Jun 2026 04:01:30 +0000
Manifest this update: Sat 06 Jun 2026 04:01:30 +0000
Manifest next update: Sun 07 Jun 2026 04:01:30 +0000
Files and hashes: 1: 4GacYlC1xTXBA2gZGI4h12SFY-0.roa (hash: NjXRgF24DIZuh863duD3ZThupdmVygwzxLiXyqu402Q=)
2: E0wwloupObPs9_O7vd7bSguVl6w.roa (hash: db081CMNM92GGYGAY4P5+DovYW2JE0c6H2IK3KWF7l0=)
3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: cF3i33UgWGjecsyS/2VzrvoRRf35DljrjLiwqFOo0vc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 02:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:17:d6:46:94:7e:83:78:36:2b:50:fc:e3:16:e5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Jun 6 04:01:30 2026 GMT
Not After : Jun 7 04:01:30 2026 GMT
Subject: CN=aa2ebc4b638a4428de47e926b58c749e9a4ec3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:b9:85:34:3e:d7:0c:a4:05:0c:0f:d1:ad:
d2:3e:92:e8:db:fa:29:6a:e1:4b:19:03:d7:cb:6b:
fa:95:32:da:08:10:3f:f1:c9:16:20:1d:d8:22:4b:
49:ea:59:ca:88:20:41:ff:88:8c:51:bd:67:15:4f:
1a:c6:bc:a0:df:c2:d0:90:76:f4:db:12:2a:40:86:
a4:5d:1a:54:42:8e:bc:7b:b6:43:fa:55:e9:eb:12:
e1:7d:cd:4f:0e:18:8c:f3:1e:ae:1c:87:f2:cc:fa:
25:0c:ad:ca:74:e9:9a:87:86:da:c9:93:40:98:d8:
6c:e5:01:79:f7:90:df:a4:d1:83:11:54:e5:48:78:
71:27:51:28:ac:93:40:95:32:5a:a0:f5:51:9b:b4:
6a:c3:e7:cf:b7:d5:a8:26:fb:4b:61:e1:44:99:2d:
48:9b:5b:32:d9:75:02:2e:36:36:c9:a4:a2:08:eb:
80:67:06:e3:32:48:81:cb:a0:7f:ef:04:24:02:8c:
a6:64:38:ee:36:a4:4b:6e:00:90:c7:af:93:a6:8d:
56:13:9f:b2:24:a0:31:05:04:58:b6:1e:90:6d:5a:
9e:cf:ea:8b:ea:76:8c:d2:1d:f0:3f:9f:40:d6:dc:
7f:6f:4c:a5:69:8c:1a:47:8f:c0:e5:bf:64:37:c5:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2E:BC:4B:63:8A:44:28:DE:47:E9:26:B5:8C:74:9E:9A:4E:C3:DC
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:ad:15:a8:fe:cb:25:8f:b4:cd:a0:22:14:a7:41:af:44:26:
51:b1:9e:11:2a:53:fa:8d:6a:8c:bf:7e:32:08:32:8b:f2:89:
32:8e:b0:93:e1:a1:b7:91:24:00:69:5a:cc:39:d9:24:e8:76:
35:70:ac:4b:73:9e:bf:83:a2:49:3a:d3:ce:fa:81:90:17:d5:
bb:21:3a:49:6a:bc:76:2e:0b:9d:90:38:9c:78:52:8a:52:03:
06:bb:fc:36:9f:ac:7f:1c:dd:fd:6e:1a:84:81:cb:51:ac:f3:
84:c9:d0:e8:41:32:01:7f:a3:f8:14:07:01:12:41:43:6b:58:
1c:fd:9a:40:68:fa:d8:40:59:18:c2:22:59:f7:04:bd:f6:4d:
03:4a:63:18:46:ad:1e:b3:39:bc:0e:6a:53:9a:9c:05:ef:d4:
4f:6c:b1:a9:89:74:f6:70:7a:75:a2:9c:04:00:00:90:2d:ba:
0d:cd:96:f5:14:49:34:c4:1a:ad:8d:65:96:c4:82:ac:2a:ac:
9f:d8:8b:ce:b8:0b:db:35:f7:27:3c:e4:cf:b8:f0:3a:3b:90:
43:17:b9:59:f7:12:9a:db:9d:76:fd:ff:95:bf:1a:c7:36:be:
3c:8e:e8:8d:29:82:41:d7:e5:d9:75:a8:65:50:fb:98:67:93:
c3:57:64:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 07:02:41 2026 by rpki-client