Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: +Zya8fO1Nl8cJ9JIHxlkAogorMwzlld130CrYWq/vP8=
Subject key identifier: 66:1F:51:D7:D1:00:FE:5C:EE:39:22:26:A2:AC:F4:67:C4:AE:C0:22
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 019F145406EFF56B84BAB4776E4D07B0C5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 120D
Signing time: Mon 29 Jun 2026 17:01:18 +0000
Manifest this update: Mon 29 Jun 2026 17:01:18 +0000
Manifest next update: Tue 30 Jun 2026 17:01:18 +0000
Files and hashes: 1: 1HMsGfdsMj6bVCe_HqSPHKmPGQA.roa (hash: Aa+3horScinkb91IcV06nuOTEkzdcEAPUq8TBlQGMDg=)
2: Q6q5ifTmogwJicn2e4z2f5_1UN8.roa (hash: ZCT+LPivkmFqXHHIYRE3kEHzKOk9mVM2bvW0OtpppFg=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: d2QlgbsOCpJYUsYj4KF1Gq/GLkPJWT45LR/SilHFuaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:54:06:ef:f5:6b:84:ba:b4:77:6e:4d:07:b0:c5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: Jun 29 17:01:18 2026 GMT
Not After : Jun 30 17:01:18 2026 GMT
Subject: CN=661f51d7d100fe5cee392226a2acf467c4aec022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:bd:06:52:c4:22:0c:2e:46:34:2f:96:0c:
c5:54:a3:e6:ea:53:7b:d0:7a:63:59:2f:a3:5f:29:
bd:a3:11:15:01:d0:ef:01:f2:8a:dc:30:58:bc:8d:
ae:3c:a3:d0:c3:f0:66:b6:62:61:f0:ba:b9:43:ae:
fb:47:19:0c:07:52:b4:b3:3d:ac:9d:e5:2a:12:75:
fa:16:0e:d4:d6:ee:f2:c3:0e:8a:4d:35:96:9d:8c:
b2:f3:19:8f:68:88:7b:a4:be:c2:80:9e:f6:78:e2:
32:98:c9:eb:04:57:64:7a:e2:02:16:0b:62:23:83:
2f:f4:7e:71:c5:bd:55:0c:b2:b0:43:e4:e0:5a:00:
5d:f6:8d:95:b2:0e:b9:fb:9b:f3:5f:0f:57:dc:95:
a7:62:12:ed:02:78:02:c3:45:62:d8:22:b2:41:d8:
20:83:62:4c:78:25:f2:c5:ac:01:1e:97:a5:7c:90:
54:35:4c:16:db:88:a8:91:fc:5f:10:fc:48:3e:fd:
dc:b5:d9:7b:67:c0:3a:53:0e:cd:49:9e:39:72:6a:
8c:39:a2:71:82:f7:63:40:4e:36:55:40:45:d4:dd:
6d:71:e3:29:ce:ce:c4:12:be:05:a2:33:2a:5d:bd:
68:a6:70:e6:c2:0c:1e:c9:9a:64:5f:62:31:e2:28:
39:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:1F:51:D7:D1:00:FE:5C:EE:39:22:26:A2:AC:F4:67:C4:AE:C0:22
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:d6:47:e0:95:e9:43:c1:1a:52:db:b6:9a:b2:25:1f:83:22:
8d:86:29:c7:0b:43:4f:9e:0c:61:11:b6:25:4e:93:af:a4:a5:
60:c6:f4:54:95:21:12:cd:3b:13:af:8f:e8:33:9e:1a:81:ee:
5b:b2:d1:7a:6d:98:43:37:a8:24:61:a9:6b:5c:8d:4b:16:4d:
d2:ed:97:8a:b5:7d:94:cc:7b:d1:5c:02:f0:63:b3:e4:04:ce:
c5:1c:4a:d3:8f:33:06:43:5a:cb:1e:b7:90:c0:d1:18:69:31:
bb:62:12:6f:5e:ed:7b:93:a7:c9:9c:3f:34:a0:6f:41:61:16:
11:22:e8:5c:a4:9d:e3:77:b4:89:3e:92:a2:67:d0:11:3b:94:
3f:c6:9a:5c:11:4f:5e:6e:14:4a:45:51:b0:62:c4:5a:b8:37:
4f:f9:7c:35:08:be:0d:b1:cb:46:1b:86:91:4d:83:da:d6:11:
63:91:e8:09:a7:29:51:17:72:70:50:71:36:50:ca:d1:1a:b6:
1d:c2:b7:8a:c2:25:12:fb:5e:b4:91:0d:b8:c7:d3:e9:86:2c:
a9:2f:6f:54:75:ac:3e:c5:8f:72:94:8c:45:93:66:fb:26:89:
f1:6f:3d:26:c8:8d:f2:2b:a6:47:16:2e:44:c2:ad:af:ee:65:
ef:6f:08:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 22:31:59 2026 by rpki-client