Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: 3cw6jHryb76hd6+lnqC1FHIcoyKrWWcoVUmcPPfIjwk=
Subject key identifier: A7:72:77:9E:4B:58:57:FC:E4:94:0E:F8:41:14:08:EC:6E:9C:2F:1D
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 019EB92232D9B18096ED64209399A554058F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 195B
Signing time: Fri 12 Jun 2026 00:01:26 +0000
Manifest this update: Fri 12 Jun 2026 00:01:26 +0000
Manifest next update: Sat 13 Jun 2026 00:01:26 +0000
Files and hashes: 1: YJVBg6yi8rhbBJuxWKJ7v5Xiat0.roa (hash: Hyd6ST+4DY0Ptd4aJ86bVxwbS75QcKsP6VrnesIx1WI=)
2: __9VedluN1sWd7ruf5_gxA1gv9U.roa (hash: 9+zLsshZreT9h4dF/gegkgeeA5ROS1Ql2Nv3i9Zy+8U=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: gHQIKidJSq0phxOmiDEM52hI5JZzSBRjKTJ/YlCNNiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:22:32:d9:b1:80:96:ed:64:20:93:99:a5:54:05:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: Jun 12 00:01:26 2026 GMT
Not After : Jun 13 00:01:26 2026 GMT
Subject: CN=a772779e4b5857fce4940ef8411408ec6e9c2f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:00:da:34:b9:33:cc:89:41:02:3c:f7:7c:bc:
30:73:0b:28:e7:96:a2:20:0d:cb:0a:ec:b1:97:3d:
45:8d:5e:6e:41:63:80:2a:e2:d5:b3:df:38:86:7e:
42:51:8c:43:67:aa:68:40:89:f5:50:45:5f:bb:1b:
c3:ce:00:e4:38:ad:81:b1:03:62:38:c0:30:01:43:
e8:d3:99:d0:f5:09:59:07:c7:3b:9e:1c:1e:13:dc:
a1:f6:66:a4:0a:c3:43:9c:ec:20:50:69:81:90:17:
9b:91:7d:8a:ce:52:4a:e1:8d:5c:fa:70:c0:f4:bc:
a5:ce:f9:8a:46:62:ff:6e:98:5c:63:b1:ab:26:85:
60:1c:3f:14:81:96:3d:02:2f:0a:2a:b7:4a:2e:ee:
54:1d:54:bf:de:72:c9:c8:16:4c:a9:ac:af:ea:83:
f2:fa:00:d1:3a:fb:e6:c8:24:e0:df:4b:a4:ed:76:
f4:34:e1:c1:c3:0d:89:ba:2b:c5:bb:9f:13:36:f4:
58:ea:e7:5d:55:df:4a:16:ad:74:83:39:06:59:5f:
ca:01:3a:fe:7c:49:00:ea:a2:f6:ba:e0:dd:2f:2c:
ee:2a:df:8f:c1:11:c4:fa:d4:2b:72:db:e9:ce:37:
1c:c9:60:97:5e:08:4d:99:f5:60:e8:2e:28:fe:da:
dd:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:72:77:9E:4B:58:57:FC:E4:94:0E:F8:41:14:08:EC:6E:9C:2F:1D
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:bb:fc:26:99:42:36:88:c4:8b:05:2a:f4:4b:e1:c2:e6:40:
6e:88:79:4f:bd:0b:a7:70:d9:9d:63:fd:38:29:9c:86:75:b8:
9b:66:0c:27:a8:ba:f7:2c:12:d3:d6:2d:b2:37:e7:1b:06:9f:
cb:ce:75:d1:e4:08:cd:1e:b2:d6:ac:ad:46:cb:e0:4a:54:de:
ca:d4:02:1e:05:93:cf:31:bf:27:34:8f:51:65:b5:c3:72:b9:
fa:ba:bb:25:4c:c0:85:be:87:bd:30:ca:d2:51:50:dd:79:b9:
b6:91:d0:09:ca:f4:2b:8d:13:ad:82:15:f9:72:49:71:4d:c1:
40:c2:e6:c3:ab:6e:90:1f:b6:e1:f2:9b:b1:0d:08:f9:73:2a:
84:fe:ed:f9:89:4e:09:76:80:bc:15:de:f3:62:75:82:28:a1:
26:e4:0f:84:fd:99:95:16:3a:02:56:e0:a6:28:c3:b5:f0:c9:
7d:d9:26:20:74:3e:21:c7:07:ae:ab:d8:32:17:b0:b1:5d:01:
b5:ac:cf:f7:7d:fd:14:44:e4:de:31:9f:24:01:9f:03:84:bd:
2e:92:d6:bf:ba:0d:13:bb:59:a1:d3:a2:33:e2:60:ac:e4:0e:
97:d4:71:c9:13:8c:af:05:6b:0c:4a:cf:b2:6e:d9:21:ea:ec:
de:0d:da:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:40:37 2026 by rpki-client