Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
File: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft (raw, json)
Hash identifier: HVT0E+X2P+07/2vxoV5JU5D4f9nqUzPeFLtuI/OjSmc=
Subject key identifier: 20:E6:F9:59:85:83:DE:42:2D:C0:C0:93:EE:D1:4B:D3:65:D2:7F:2D
Authority key identifier: C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
Certificate issuer: /CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Certificate serial: 019EB733218F6E2BFCB4B3BB4D311C456CED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
Manifest number: 1959
Signing time: Thu 11 Jun 2026 15:00:41 +0000
Manifest this update: Thu 11 Jun 2026 15:00:41 +0000
Manifest next update: Fri 12 Jun 2026 15:00:41 +0000
Files and hashes: 1: 7yu1vZA6sQopFbJ477QSAd_T4No.roa (hash: y294/GuVma254ox9Je2JWpyy0Aod0Bh8Uh2WyhLyqks=)
2: AOST2v0fOQI-ty-pWahAGdkHAEs.roa (hash: jxMvz/MnFmWAmclh3cHyqmlZEVpCA/u6934edlXvIDs=)
3: v92-Eaw03d123_02nzbPzAiBgtc.roa (hash: EG21x+MWDXMZMqTlMifEMC9yWAbNwFpO2h6QDrwu7Io=)
4: xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl (hash: ZAaqq1JQT27nyYZ/Wqf6HpAW+QqEaFOjnyEB4NnGveI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:33:21:8f:6e:2b:fc:b4:b3:bb:4d:31:1c:45:6c:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4d8c1985c50c7ead4cfd8d3a93d63e5611f6fb6
Validity
Not Before: Jun 11 15:00:41 2026 GMT
Not After : Jun 12 15:00:41 2026 GMT
Subject: CN=20e6f9598583de422dc0c093eed14bd365d27f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:61:5a:6b:73:5a:99:57:22:ad:f8:28:68:50:
90:5c:ec:da:3f:bf:b7:87:d3:28:e7:fe:c3:2f:14:
d8:7b:df:6c:27:c0:d9:46:1c:07:26:71:14:86:a6:
fa:37:bf:54:0a:70:9f:31:fa:be:8d:03:fc:49:fe:
72:d7:b1:91:38:af:47:d8:d6:42:f3:b4:24:30:d0:
96:56:17:e0:28:84:86:5d:74:f1:d6:0a:3e:aa:2f:
4d:68:b3:9d:fd:f8:13:e5:de:94:f1:7f:e5:6f:e4:
40:94:45:8b:ad:08:19:40:a1:d2:db:0d:61:18:6a:
55:fe:9c:27:e9:3c:b7:c6:24:8d:00:5d:0d:14:bd:
3d:29:3f:25:7d:33:61:0e:1f:92:35:3a:f3:cb:00:
d9:73:de:37:92:cf:41:c3:90:2c:a9:c7:c3:b7:0d:
2b:e0:0b:27:c9:3b:1b:6c:83:0f:83:0d:d7:e4:af:
8b:cc:51:3f:9f:0c:8a:b5:d8:42:ef:07:b3:2e:98:
8b:26:ed:e4:cd:16:ba:ff:b3:44:66:4b:ea:e1:2d:
6a:64:dd:85:65:13:4c:74:02:88:08:29:74:54:b4:
4b:cb:ad:93:e7:2b:47:54:bb:39:08:fb:d0:13:ce:
e1:b7:3a:7b:ce:c7:f0:0f:8d:41:f8:02:a2:db:35:
b2:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:E6:F9:59:85:83:DE:42:2D:C0:C0:93:EE:D1:4B:D3:65:D2:7F:2D
X509v3 Authority Key Identifier:
keyid:C4:D8:C1:98:5C:50:C7:EA:D4:CF:D8:D3:A9:3D:63:E5:61:1F:6F:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/77d607-7d7c-4589-aff7-2fda97079c01/1/xNjBmFxQx-rUz9jTqT1j5WEfb7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:c1:1e:f5:86:fb:62:8d:ff:a0:51:74:c3:b9:1d:b0:77:cc:
6d:62:6f:e5:c4:ba:7c:b9:00:cb:ae:b5:70:7b:17:d0:09:7d:
c0:02:23:a6:53:de:8c:21:0e:77:54:d3:cb:cb:15:39:bf:d9:
f4:c2:49:67:4b:ea:72:7f:6b:24:41:a7:ac:5b:28:8d:9f:0b:
9c:38:c9:bc:27:ee:97:74:3b:a5:83:23:c6:10:39:c0:6b:2b:
8c:b6:d2:db:95:8d:79:f8:88:ec:90:d9:eb:33:5c:e5:d1:07:
13:4a:13:c5:37:f4:1f:19:6c:7e:5a:c1:59:df:18:c6:c5:56:
39:c4:0d:17:79:33:bc:c0:69:1f:a1:be:44:a0:05:35:36:40:
6d:68:5c:1e:75:ea:7b:0e:d6:7c:a9:4b:a1:6f:e0:6f:54:31:
1b:ae:53:02:42:d4:1d:e3:ab:12:34:70:ed:42:f0:5a:f0:59:
d7:ad:ac:a9:c7:d6:e8:f9:97:84:66:ac:44:22:e2:45:c5:4e:
28:35:82:d7:ce:ca:39:08:af:f5:bc:ed:59:4d:c1:73:2f:93:
24:4d:6d:df:f5:01:07:1f:5f:c3:75:7e:52:4c:7c:fa:5c:d1:
6b:f1:eb:f8:89:c3:a1:dd:cb:6b:f1:34:fd:c8:b8:e2:f5:e8:
da:93:01:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:41:06 2026 by rpki-client