Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
File: XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft (raw, json)
Hash identifier: nGsRL0OM3G3bRwTFwAOIxPdxl3TMAZ67Npq2vqT0cpc=
Subject key identifier: A8:18:82:DE:3A:23:21:EA:8B:85:04:48:FB:8B:4B:19:74:57:F8:BB
Authority key identifier: 5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C
Certificate issuer: /CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c
Certificate serial: 019F11F84223A0A5EA90CD098EB340A30340
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
Manifest number: 0205
Signing time: Mon 29 Jun 2026 06:01:50 +0000
Manifest this update: Mon 29 Jun 2026 06:01:50 +0000
Manifest next update: Tue 30 Jun 2026 06:01:50 +0000
Files and hashes: 1: XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl (hash: EK6kaeBMOakrTL+XsRdjAxNa9O5PBqKoK1IwohEoesI=)
2: pPahSaeBPta7w6VOnQkraRmUcA0.asa (hash: FCTya6t/QqQMoFaMDmatYCTAuidSm61Lv7qwKelhC5E=)
3: rXJCBpwtYShFouVpouU47HymwWo.roa (hash: z0tPKD9etDZny3IDTZR0T2qHlWP90XZw84nhExsH4jI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:42:23:a0:a5:ea:90:cd:09:8e:b3:40:a3:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c43bdc0bb54fb869ee83a2bd8bd87739893a42c
Validity
Not Before: Jun 29 06:01:50 2026 GMT
Not After : Jun 30 06:01:50 2026 GMT
Subject: CN=a81882de3a2321ea8b850448fb8b4b197457f8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:76:29:3b:fa:0f:5c:39:f0:e6:a8:66:3b:f2:
ed:41:3e:ae:20:be:07:57:55:95:eb:75:55:55:19:
e0:12:67:5b:6a:13:cc:fe:17:75:77:be:14:f1:40:
c6:7b:e4:73:ec:ff:cd:9d:79:e9:2d:7d:a9:5d:48:
e2:f0:99:85:4b:7d:b1:06:f2:9a:c0:b2:e4:50:b2:
88:3d:f6:fd:4e:91:87:60:ac:41:d0:78:48:0c:a1:
6f:3c:ec:cf:b4:1f:d1:80:9e:c7:de:37:6a:74:52:
72:1a:b5:ff:96:81:27:27:aa:ef:35:df:9a:e6:bd:
4f:d0:bb:17:7f:ec:d2:7b:1d:a6:4b:f9:93:1e:d8:
a3:d0:c1:70:27:6e:cc:7c:90:7c:b9:ec:a3:6c:51:
aa:1c:7a:8b:63:ca:03:9b:0c:02:23:61:1d:6b:23:
7b:bc:d9:f8:ab:71:70:58:d0:d2:16:1d:47:61:6a:
de:32:0c:10:cd:d4:da:cb:a9:33:ec:c2:d2:ba:f0:
4b:a7:f0:92:4d:24:a1:e4:3e:5e:6b:4e:d3:07:24:
34:60:a5:d0:0f:c4:f5:fa:10:d8:32:80:2d:e0:39:
a7:ae:bc:56:ee:2e:d3:a0:5b:0a:1c:60:42:70:f9:
0a:aa:f6:c3:57:87:3f:7c:70:c0:7c:e5:98:65:b2:
8d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:18:82:DE:3A:23:21:EA:8B:85:04:48:FB:8B:4B:19:74:57:F8:BB
X509v3 Authority Key Identifier:
keyid:5C:43:BD:C0:BB:54:FB:86:9E:E8:3A:2B:D8:BD:87:73:98:93:A4:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ab6b7f-4f19-47ad-8895-4896b228f187/1/XEO9wLtU-4ae6Dor2L2Hc5iTpCw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f4:7f:ab:0f:04:1f:0b:e0:ca:50:e2:0d:90:f1:b9:f0:f7:
d3:f1:52:56:9d:62:c7:44:7a:5a:a6:88:fd:d1:95:df:15:dd:
d1:2f:8a:1c:af:64:d0:04:e4:79:13:23:d2:95:b4:ac:f3:e8:
5f:c4:36:21:a0:05:1f:37:16:53:7b:a0:cb:3b:48:68:1c:36:
43:29:9f:c7:0b:67:50:4f:63:ce:94:67:7d:7c:68:f6:1b:05:
32:10:69:e5:a8:75:3d:d1:8f:3a:58:1c:98:f0:98:33:cd:1f:
6b:34:f5:8d:f0:17:cf:e1:ee:a7:04:8c:f6:e9:be:de:bf:a9:
d1:2c:57:2c:0d:8a:b9:af:5c:ac:15:55:01:3d:72:1a:d5:71:
9b:4b:ae:f8:85:7a:61:c1:85:e8:ba:b0:63:e6:6d:e9:3a:bd:
da:38:be:9c:83:8b:47:ef:43:93:5c:47:ef:bf:83:61:1b:0a:
41:16:10:8f:76:aa:2d:cb:40:cc:6f:a0:7a:2a:8a:9f:d7:d2:
0a:00:52:ff:c4:36:ca:1d:9a:a4:7f:8b:35:fd:a5:37:b5:aa:
de:4a:e9:cf:41:f7:a7:33:db:f6:26:a6:d0:cd:46:98:28:36:
fc:4f:c3:ad:68:e1:0e:db:3f:bb:dc:fe:f7:ee:52:af:17:36:
83:10:85:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:41:16 2026 by rpki-client