Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier: vCQNzPrlYXwr7sfjIAlykhDjm3UwEvIo4+3HGfbPAbs=
Subject key identifier: D1:9A:CB:DE:3E:B2:05:0A:13:AD:90:9D:F5:61:64:0F:70:5F:45:1D
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 019EC7B8F45E936B9D759F91459DBDEF4AD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number: 1961
Signing time: Sun 14 Jun 2026 20:00:47 +0000
Manifest this update: Sun 14 Jun 2026 20:00:47 +0000
Manifest next update: Mon 15 Jun 2026 20:00:47 +0000
Files and hashes: 1: JtY0Nc5KsnYFhq9gwtFkh9ll4_c.roa (hash: 2ee0ztpkOTTrJZ/rJndPjJzssmpY0MoOu/loesqHer8=)
2: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: rp7Y5TtcE1B0y+W+oMAzw5ZUkFpFBBU+G28PeifiKfo=)
3: XVPpnUXQ607rP--ePsLN9cz89_c.roa (hash: 0wqwWXvhEcuxDQDNA2phuoRTJPiVO88rNNJcF2GbNvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 15 Jun 2026 18:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c7:b8:f4:5e:93:6b:9d:75:9f:91:45:9d:bd:ef:4a:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: Jun 14 20:00:47 2026 GMT
Not After : Jun 15 20:00:47 2026 GMT
Subject: CN=d19acbde3eb2050a13ad909df561640f705f451d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:14:9c:1e:eb:8b:6e:87:8c:60:4d:2e:1f:2f:
3a:53:ec:d7:4a:54:aa:d0:38:c9:1a:2d:1d:cc:6a:
6f:5c:b4:03:92:9d:01:69:f1:32:3a:70:0f:28:9c:
ad:e6:59:dc:17:a5:ce:41:3d:79:bf:7b:8c:ae:4c:
1d:95:22:e0:4e:52:67:84:5e:71:71:12:12:73:2d:
9d:04:2d:63:c6:44:d5:ab:18:11:f1:8a:80:43:eb:
7d:e1:fe:4d:cd:56:a5:ef:80:bc:94:b2:df:7e:ce:
57:7f:d1:b9:42:6a:56:0d:b1:5a:2e:f6:40:2d:c6:
e0:43:5a:c7:09:b6:32:78:0f:3e:89:99:fc:05:21:
a9:3e:cc:99:6c:09:d0:d0:be:5a:7e:c5:0d:e9:b0:
30:08:ea:33:24:c5:d7:8c:f6:91:2a:88:c3:ef:19:
39:d7:dc:8a:f3:29:5f:73:49:e6:a1:26:a2:bd:6a:
ad:21:13:25:08:d7:c3:f4:ec:1b:40:46:05:b6:7e:
51:4f:36:88:23:c6:58:11:9f:64:b6:c2:60:12:b2:
81:c9:a0:87:db:a2:d5:1e:98:e1:c2:bc:03:6a:25:
cb:99:d4:a5:e6:dc:a6:3a:71:51:45:d0:5e:29:7b:
c1:1c:cf:ef:f1:91:00:79:11:8c:f8:9d:de:ef:ea:
eb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:9A:CB:DE:3E:B2:05:0A:13:AD:90:9D:F5:61:64:0F:70:5F:45:1D
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:b8:ad:23:a0:f2:65:20:82:f4:5d:90:0a:a7:c6:b9:7c:6a:
36:3b:be:ba:68:7f:d9:6e:0a:79:46:97:1d:e5:f4:33:ac:0d:
de:b7:7a:cd:b7:73:2c:72:df:ae:bd:60:7b:ae:d7:e1:c6:ff:
36:42:3e:1e:08:43:0a:b5:87:98:ca:8f:65:8a:36:c0:a4:17:
8c:d4:14:a7:24:af:33:b8:8f:7a:df:ce:cf:c8:c8:cc:55:ff:
6e:58:7d:9d:d6:a3:f4:e6:4f:0b:f2:52:e5:9b:6e:a2:d4:68:
bd:39:02:1e:ab:30:83:34:b9:fc:82:ec:5e:57:5f:2c:d6:a7:
0a:d5:b0:1d:f9:82:2f:05:d1:50:b1:54:de:c6:6e:6b:88:54:
ad:0c:9b:4e:cc:a0:2e:88:ba:40:6d:89:f7:e6:cb:c6:be:d2:
a4:42:d9:3b:6e:be:f5:42:94:ef:e2:01:fa:c4:32:fd:6c:4b:
5b:7c:4e:aa:a6:cc:88:0a:c2:72:06:c2:b5:9a:5e:90:c8:78:
7a:df:89:e9:a4:85:56:25:c8:0f:fa:dd:a8:70:38:e7:5a:a7:
99:0e:fe:44:02:47:f6:62:e1:de:28:b2:53:74:c2:fe:f3:4d:
af:2a:74:f8:38:2d:32:4b:0f:5a:a1:d1:0b:76:d5:ca:84:a8:
9b:c6:9e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 00:02:44 2026 by rpki-client