Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
File: xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft (raw, json)
Hash identifier: R7jp7tf/tp5i295dKffFXZ7ZZUAUnLVSIyf00gdQQFo=
Subject key identifier: 8F:6C:D0:6B:4B:DE:C4:1D:D7:43:D0:22:B5:B7:A4:8F:C4:58:2A:EB
Authority key identifier: C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
Certificate issuer: /CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Certificate serial: 019E91DD5661CFB1AD6841D5F1F2281A05EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
Manifest number: 1949
Signing time: Thu 04 Jun 2026 09:01:02 +0000
Manifest this update: Thu 04 Jun 2026 09:01:02 +0000
Manifest next update: Fri 05 Jun 2026 09:01:02 +0000
Files and hashes: 1: YYRSpcNyohXAVMmCQRhhQXcor54.roa (hash: fuXM313ONuqmW2wV79N+ZCUER2LAZ4hkP7+nINYw4hI=)
2: iKpp3qI47nAdkGSzRA3WViJJwfU.roa (hash: cua53JtZVRFiG1D02IQc2WZ6uSxKMIhsPK5IrnlN2iI=)
3: vkpwNDj7xXwx6pMj2XVWZxBCxc4.roa (hash: YGEdE5O7bWJqyVhJI5l0CUgDvZQQki89nPNnaYxZHCc=)
4: xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl (hash: GpSB5wSzftJoMfMeS2Vx5sLNrBxe+/n2E2aaHkijOKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:dd:56:61:cf:b1:ad:68:41:d5:f1:f2:28:1a:05:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c58ed1af964a7668e44397619ee1985a2491c5
Validity
Not Before: Jun 4 09:01:02 2026 GMT
Not After : Jun 5 09:01:02 2026 GMT
Subject: CN=8f6cd06b4bdec41dd743d022b5b7a48fc4582aeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:ca:58:50:e9:aa:ed:ec:96:7b:bf:76:5e:
a3:c6:7d:44:1f:a7:0d:59:ee:13:fc:a8:6a:e6:36:
0a:5d:54:c8:c0:51:a2:f4:c0:f8:d8:6b:b0:2b:de:
bb:58:9f:7b:c5:92:97:e3:a4:78:7f:d8:11:79:23:
d6:81:22:9a:f0:fa:3b:89:ef:62:67:88:e3:d4:12:
48:41:92:71:ae:ba:dc:8d:95:81:de:81:e9:69:42:
92:01:84:dc:f6:7c:ae:b2:44:85:cd:79:16:72:53:
7f:57:25:5d:ac:bb:b0:c2:5c:20:15:47:99:cb:24:
6b:84:9d:38:96:03:01:ab:02:63:18:d3:e2:d0:54:
72:77:ad:a6:46:fd:37:56:d1:3d:d6:bf:77:32:32:
5f:b3:20:bb:e3:e8:c5:30:70:2c:af:f1:0f:4f:1a:
51:8c:3d:09:c8:9c:75:a9:18:df:5f:e0:13:ad:b7:
b5:8d:3d:58:a4:ae:f3:9a:8e:82:e9:cc:0a:7e:7b:
59:10:06:f1:3d:3f:e0:19:27:2d:1c:d2:b3:3b:24:
40:a5:84:e2:64:a6:7e:c5:b4:43:98:ba:44:4b:39:
59:03:e8:30:e6:e5:cb:7f:e7:dd:d7:d7:b1:ff:6e:
52:33:7c:6e:d3:d2:22:12:74:fe:38:ab:a8:7f:63:
0d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:6C:D0:6B:4B:DE:C4:1D:D7:43:D0:22:B5:B7:A4:8F:C4:58:2A:EB
X509v3 Authority Key Identifier:
keyid:C6:C5:8E:D1:AF:96:4A:76:68:E4:43:97:61:9E:E1:98:5A:24:91:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsWO0a-WSnZo5EOXYZ7hmFokkcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/fc2815-d293-40af-bf3c-1c8afd19fdbb/1/xsWO0a-WSnZo5EOXYZ7hmFokkcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:55:7a:f7:66:e8:fc:06:67:a8:4e:b7:ce:06:15:91:61:64:
fd:2d:ee:6c:8f:6f:2c:16:0e:95:3f:c6:ee:40:ad:26:e5:49:
d7:b3:09:31:56:c2:01:cf:dd:5e:a5:51:1a:32:b7:72:6b:ea:
10:5b:95:3f:41:c7:82:d3:39:00:f0:00:77:2f:03:fb:f1:48:
91:5b:89:cb:ea:d1:2a:bf:d0:49:c1:06:d4:98:f9:6f:16:5f:
3e:d5:db:8b:21:e1:ee:21:ad:72:6d:74:f3:22:07:6f:49:72:
68:ac:e6:7a:7e:86:9d:c4:92:6f:0b:55:d0:73:ce:06:b1:00:
f3:50:80:1e:f3:ec:7b:27:6f:d8:c8:84:7b:43:3e:12:7a:aa:
f6:60:7a:47:bd:1a:de:43:4b:4d:ba:ff:b1:82:01:72:5c:aa:
ef:aa:24:12:a2:ff:a3:b1:d0:9e:29:3d:86:7e:d5:86:2f:77:
8b:1d:36:d0:4a:78:e5:66:e5:95:31:65:1a:e9:28:ca:fc:55:
22:73:99:e5:7e:df:db:f5:fd:09:35:23:c3:03:18:9f:bc:44:
34:b4:3d:fa:5f:86:be:ba:20:02:3f:ef:f0:a0:52:47:e7:43:
47:2b:16:b5:c0:1f:07:64:ee:28:b4:7e:db:61:b0:23:06:7e:
ce:62:5b:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 13:05:22 2026 by rpki-client