Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
File: xKPrF197V5BsgPUI4V9j4D8Lfvg.mft (raw, json)
Hash identifier: sI5hLIfhut9GX6JEB3lmiEELQDgOTMJOGOpEztFg7BI=
Subject key identifier: 63:B0:64:CA:3F:81:E7:C6:C2:C3:1A:15:C3:31:90:73:D9:E7:77:05
Authority key identifier: C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
Certificate issuer: /CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Certificate serial: 019EE2F9D8007C67FE9118058BEFFC68735B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
Manifest number: 1909
Signing time: Sat 20 Jun 2026 03:01:24 +0000
Manifest this update: Sat 20 Jun 2026 03:01:24 +0000
Manifest next update: Sun 21 Jun 2026 03:01:24 +0000
Files and hashes: 1: mTuVuiw3HM2pBIheqITWSq5I3n0.roa (hash: Ipl/v3cZkycb4zTv5tbg7JdjHKPt6S5to0wny64/QVQ=)
2: xKPrF197V5BsgPUI4V9j4D8Lfvg.crl (hash: EpcYnq7FNyPBknlVAOMA2af+7UIDbgymMqnkZfR4Mbs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 21 Jun 2026 03:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e2:f9:d8:00:7c:67:fe:91:18:05:8b:ef:fc:68:73:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4a3eb175f7b57906c80f508e15f63e03f0b7ef8
Validity
Not Before: Jun 20 03:01:24 2026 GMT
Not After : Jun 21 03:01:24 2026 GMT
Subject: CN=63b064ca3f81e7c6c2c31a15c3319073d9e77705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ce:db:c4:84:04:0c:65:bd:28:63:81:32:0b:
35:82:83:51:e9:ac:7a:f6:c1:e4:7a:17:ba:01:1f:
6b:8e:cf:90:50:3d:5a:ad:8e:4e:5b:a3:39:46:58:
06:91:2d:fe:7c:83:25:63:69:83:08:7a:58:07:06:
9a:ba:57:91:98:66:c6:ca:12:f3:70:ac:22:7d:93:
c8:74:c8:ed:fe:70:49:c5:c3:4d:52:32:a2:c4:4b:
82:d4:dd:8e:d5:28:a8:85:e6:43:b5:e7:0b:c0:73:
f0:49:f6:b8:df:da:cf:f7:d7:ea:93:98:a4:e8:aa:
79:22:3b:f0:08:e0:d0:36:1f:52:20:bf:1e:14:2e:
0a:10:9d:86:a6:ff:42:b1:30:d4:b4:76:a5:ea:94:
39:fa:0f:5a:12:c8:13:7c:18:fc:88:ee:29:83:63:
f1:76:ae:cd:84:c5:61:8a:02:d7:f4:9e:48:b3:c8:
50:80:6f:6e:59:a4:81:bd:56:89:c1:4d:3c:8f:2d:
8c:4f:76:2d:7b:74:a0:6e:51:47:56:84:c1:3e:3b:
f5:60:05:12:1e:6a:4e:1c:e5:ca:bf:c4:bf:c6:4a:
8d:53:4b:a7:7b:55:90:d7:2b:76:c3:04:1c:d7:ab:
4a:d5:29:cf:e1:18:56:ad:99:3a:d2:e0:bb:5f:70:
1b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B0:64:CA:3F:81:E7:C6:C2:C3:1A:15:C3:31:90:73:D9:E7:77:05
X509v3 Authority Key Identifier:
keyid:C4:A3:EB:17:5F:7B:57:90:6C:80:F5:08:E1:5F:63:E0:3F:0B:7E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xKPrF197V5BsgPUI4V9j4D8Lfvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/7f77bd-b302-4933-a5f9-fcb4d20bcd75/1/xKPrF197V5BsgPUI4V9j4D8Lfvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:ed:2b:f7:ae:57:0e:e7:44:d4:0e:f1:11:66:43:77:16:59:
ca:da:34:54:a7:d6:d9:79:8c:62:fc:34:93:ff:b9:8e:62:b0:
e4:31:51:73:9d:73:eb:f8:74:7b:d0:29:10:36:59:20:e6:ae:
07:0d:9a:28:74:32:54:29:90:dd:75:41:06:78:31:8f:5f:f4:
67:05:cf:7b:45:73:1e:2f:6b:d5:ff:1c:83:85:cf:dc:b0:aa:
a2:ee:c9:e4:7c:12:58:47:4b:e8:3b:d7:75:54:0e:3d:b3:d4:
5e:ed:94:f5:c6:d1:68:3a:3b:21:e9:ee:43:d5:eb:83:11:65:
a4:48:40:3b:a6:80:af:38:a8:0b:1c:4a:9e:64:ce:f4:75:46:
11:91:91:6c:0e:66:20:d5:1b:40:1b:85:7e:64:b2:34:82:ec:
7b:a4:13:1d:a3:ce:82:22:4f:d5:5e:65:96:62:80:27:94:17:
76:fd:04:d2:4d:97:26:0a:38:fb:f2:02:95:8c:25:ff:71:7e:
2e:09:b0:10:a9:5b:cb:eb:8d:a5:e8:1e:f9:78:b1:78:83:44:
ce:87:7b:51:61:c5:b6:d5:9c:07:91:60:73:52:e0:52:f1:21:
9d:0a:bf:41:46:ca:9f:8e:23:f8:e4:6e:e9:30:03:d8:4f:b9:
21:fc:31:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 13:39:33 2026 by rpki-client