Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
File: xvw4sqEAOV-puZGa15LnrLLbLgc.mft (raw, json)
Hash identifier: 1jF+IdMe9h2j9XVVI7xJGhdVEWU1CwpyRv0w9fejJ08=
Subject key identifier: 05:A0:5D:52:B0:C4:4F:60:57:06:A2:55:8E:E5:28:8A:18:8B:BE:B5
Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
Certificate issuer: /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Certificate serial: 019F122EF7640960B92F46E4DBFBF21BB261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
Manifest number: 0952
Signing time: Mon 29 Jun 2026 07:01:35 +0000
Manifest this update: Mon 29 Jun 2026 07:01:35 +0000
Manifest next update: Tue 30 Jun 2026 07:01:35 +0000
Files and hashes: 1: 4kLVVeCRQJrEoKU2Z3FAZr5ZTZg.roa (hash: N+n4RQm/UCrzmjM9BuILs0DGf1giItqSLrBBjPu0qrU=)
2: MAAniPDXI9HsVNZwiBPzQo7C0FE.asa (hash: +t1AssvVOScBcP/9D61rppScOKqy8/J9uspPTrgro+o=)
3: xvw4sqEAOV-puZGa15LnrLLbLgc.crl (hash: ibifWX7VWEOtGUlqjX88Xav+upqo0kK7kFrIhiRzsOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:2e:f7:64:09:60:b9:2f:46:e4:db:fb:f2:1b:b2:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Validity
Not Before: Jun 29 07:01:35 2026 GMT
Not After : Jun 30 07:01:35 2026 GMT
Subject: CN=05a05d52b0c44f605706a2558ee5288a188bbeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b1:b3:6c:b9:a3:3b:47:2d:98:c5:bd:93:58:
31:5f:c4:2c:6b:e1:2d:1c:73:e5:d3:ab:98:1c:27:
7d:4d:2d:fa:26:50:bb:b9:4c:a9:4f:4e:14:bb:a7:
e4:9d:38:da:a1:83:ac:a9:c3:67:c2:2c:95:e1:7b:
09:5b:06:10:90:59:e6:ac:b5:0e:81:38:a6:bf:50:
e9:93:21:3f:16:20:47:57:52:e2:e1:6a:7c:f0:98:
63:8f:44:36:53:e9:de:9f:9d:5b:98:1b:28:18:ae:
65:8d:5b:2c:da:ad:f7:37:70:c3:bb:ec:85:04:41:
b0:df:d3:f9:74:94:5a:b0:b6:4b:2b:5a:09:f4:00:
3f:5d:82:4b:56:b8:63:c6:cc:80:c0:b6:13:fa:2c:
57:1d:fe:b5:63:1e:69:c1:03:06:c9:62:b8:93:e2:
d2:93:e6:b6:d8:b0:4e:7d:9c:37:f3:9d:4a:24:a5:
c0:19:ce:eb:4c:08:ff:f9:17:18:67:df:96:7b:75:
72:0c:df:9a:6b:8f:00:bc:fb:dd:06:74:05:b8:ea:
78:fd:21:98:06:02:e1:be:b1:c4:13:14:73:fa:a2:
87:81:f5:4a:e1:71:8c:99:cd:6b:90:dc:3b:ca:bc:
d2:55:45:17:88:1f:a3:b4:3d:1d:ad:6a:95:39:ec:
63:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:A0:5D:52:B0:C4:4F:60:57:06:A2:55:8E:E5:28:8A:18:8B:BE:B5
X509v3 Authority Key Identifier:
keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:77:c5:09:81:12:9e:b9:d6:d7:9b:bd:9c:52:79:bc:4d:03:
0c:10:0e:fe:88:c2:2f:1d:55:32:36:39:1b:53:85:49:1b:95:
61:26:6d:3f:70:b3:ec:54:bf:55:18:dd:43:b0:9b:ec:b1:a3:
32:38:ac:2f:7c:c1:f5:a9:df:46:0d:19:1a:86:db:42:e7:f1:
f3:12:a8:bd:15:68:46:a1:84:ea:28:13:c6:e1:74:d3:e0:77:
ed:25:a2:a9:1f:65:c9:60:14:7b:65:d0:e0:b0:27:24:92:7c:
3e:4a:40:dc:bf:c4:aa:a3:39:2e:3e:24:19:74:f8:82:3f:4f:
49:ae:f7:49:48:5d:88:8b:59:16:4a:3f:86:9f:c0:33:b3:2c:
9b:8b:a5:ad:e7:95:e2:f3:d2:36:a5:9c:ce:49:c2:49:34:b1:
0d:83:e6:47:ce:d1:c4:9b:a0:05:11:5e:c7:0c:c9:a3:d6:96:
65:7d:62:c1:0b:4e:a7:b1:d2:08:b4:2d:ee:55:db:79:81:c2:
82:50:74:cf:5e:9c:1d:76:bf:37:de:a6:e0:92:d9:21:5f:eb:
56:88:7d:a7:df:15:31:7d:5f:9c:f6:66:b3:08:85:31:6c:2d:
55:fb:8f:0b:2f:4b:9e:90:03:5b:c7:8a:2a:3c:f4:2b:d6:11:
14:a7:43:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:32 2026 by rpki-client