Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
File: xVfBn2xy2JAMTYnsers11PqSEUs.mft (raw, json)
Hash identifier: 446Y3sTq9X6CApckdNm7h+pJLAZ/B6up86qKbjyoQGU=
Subject key identifier: 57:ED:D2:BE:C7:34:27:DB:73:EE:7B:B1:A9:F6:C8:AD:0F:48:CE:C3
Authority key identifier: C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
Certificate issuer: /CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Certificate serial: 019EB845B32F4E93CA36B3716622303FAF87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
Manifest number: 1957
Signing time: Thu 11 Jun 2026 20:00:36 +0000
Manifest this update: Thu 11 Jun 2026 20:00:36 +0000
Manifest next update: Fri 12 Jun 2026 20:00:36 +0000
Files and hashes: 1: UHPJaWl80QM_ZyHpNl4B0tVvbT0.roa (hash: aDJ3tJRmYftllAauT3ZEK2YDL9vFANpr/wdc/+xRph4=)
2: xVfBn2xy2JAMTYnsers11PqSEUs.crl (hash: Azq9JnARR+j3ntDJZ2Kes29r1aL0+MhuwykfsTrhLXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:b3:2f:4e:93:ca:36:b3:71:66:22:30:3f:af:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Validity
Not Before: Jun 11 20:00:36 2026 GMT
Not After : Jun 12 20:00:36 2026 GMT
Subject: CN=57edd2bec73427db73ee7bb1a9f6c8ad0f48cec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2e:11:34:8c:d6:97:74:4d:d0:8b:5a:00:0b:
fc:57:df:b8:b8:d4:a1:b3:e4:e2:97:40:02:78:2a:
18:bd:10:fe:61:04:16:16:58:ac:09:0a:18:ea:6c:
85:07:74:69:7e:2c:7d:fc:10:6a:50:7b:09:27:87:
db:ab:6f:e4:6f:c4:8d:7b:f1:a1:0f:2e:ec:a2:95:
42:dc:c3:50:db:8c:83:de:22:07:f8:5e:78:46:fa:
8e:49:19:ee:e8:23:43:8c:b2:46:68:98:fe:3d:2b:
86:a4:de:85:4e:e4:b9:b0:7e:ba:76:d2:f0:e4:a6:
36:9b:24:be:23:e7:61:3e:2d:48:83:70:c8:47:3e:
f5:27:6b:dc:3f:7e:d7:2d:c5:bd:55:5e:1d:00:21:
1f:e1:25:dc:e4:41:32:f5:16:2f:e4:88:0c:0e:1a:
fc:66:f6:3c:38:77:89:17:b7:34:19:8b:55:79:22:
d2:4e:d4:2c:99:0d:3c:ec:a7:2d:07:1a:a1:c7:d8:
db:7d:02:36:0f:dc:99:06:7b:57:8f:0f:55:3d:49:
12:9c:6e:5f:12:2f:31:70:69:37:31:92:a0:ab:89:
a2:72:6c:ec:a5:bd:d9:02:58:9f:bc:e0:1b:bf:00:
fb:a2:8b:1b:1d:fe:b0:fe:5a:35:ba:e3:3c:fd:37:
b3:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:ED:D2:BE:C7:34:27:DB:73:EE:7B:B1:A9:F6:C8:AD:0F:48:CE:C3
X509v3 Authority Key Identifier:
keyid:C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:4e:07:63:1b:ac:f3:03:43:71:80:d9:54:32:fb:fd:80:88:
d7:7e:95:3c:22:62:01:7f:15:f5:2b:e6:dd:14:40:eb:12:8a:
2c:fa:02:56:46:a0:7a:6a:47:7d:00:7e:10:ef:23:29:5e:2d:
a4:b2:2a:99:dc:cf:d0:89:85:2a:c3:74:b8:d0:6a:67:b4:2c:
d4:11:b6:70:74:76:1d:cd:4f:8a:8b:3e:33:fa:c0:e8:96:62:
8c:15:38:0d:60:44:df:81:f2:28:dc:63:2b:ee:a9:4f:3e:41:
f2:b2:e4:20:de:59:1b:5f:2a:9b:ca:f5:32:a9:c2:48:0f:ab:
c6:bd:38:fd:08:af:c9:1c:12:77:99:cd:74:ad:b4:17:45:39:
1e:6e:8a:5e:ee:f2:82:77:a2:27:6f:da:8b:0c:dd:70:0e:cc:
ec:51:b4:7a:51:83:21:a0:43:bb:da:a4:bc:a8:03:5a:38:d3:
55:84:e1:12:66:3c:b1:19:19:9a:7f:5b:ad:55:64:09:3d:bc:
2e:15:2f:ea:4e:e3:a0:35:9a:77:66:18:51:7a:55:95:e3:99:
ff:b7:90:81:19:81:e7:e7:b3:ae:3d:11:1e:1d:a1:02:59:f5:
3c:b7:64:83:a1:30:0d:84:d9:0b:0a:63:7b:e6:96:91:56:bc:
b0:03:21:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:54:27 2026 by rpki-client