Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: 3WJjAdIRIw/mnAC1EgxIlKat2/7H+zv3pmJClbXTtsA=
Subject key identifier: C4:13:B4:5C:D7:F4:9F:6A:26:54:90:3C:00:4C:DB:E7:A9:8A:8E:E1
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 019E314E03885A917849B4DFBF16C6D1FC5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 191B
Signing time: Sat 16 May 2026 15:00:56 +0000
Manifest this update: Sat 16 May 2026 15:00:56 +0000
Manifest next update: Sun 17 May 2026 15:00:56 +0000
Files and hashes: 1: EbX7N4kHuDXm0ug317aboa-Elyk.roa (hash: T2hYz7BsiNZAW/oKFsyjXx5vn7Ad21wTFDpKdq1SP6Q=)
2: Kd-PJMG0I6gP3eU-IVUAKt_gccg.roa (hash: guDscC6GtnjjQhv/AcT64xIdqM0iuOGm1U4WIDOTt8E=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: WbB1JC3xvV7mWgDwEXA9ICuIpkYsBwK/FQtB+5nA17k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:03:88:5a:91:78:49:b4:df:bf:16:c6:d1:fc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: May 16 15:00:56 2026 GMT
Not After : May 17 15:00:56 2026 GMT
Subject: CN=c413b45cd7f49f6a2654903c004cdbe7a98a8ee1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:64:24:4e:d6:71:7e:ee:1a:ba:d9:fa:3e:d1:
0d:91:f0:1f:7e:23:91:a0:d9:d4:b2:1f:68:fa:7e:
84:4c:3e:16:a7:de:69:a3:ab:aa:40:8c:3a:70:e4:
2a:28:5b:37:23:43:ff:48:e3:48:a4:56:cd:2b:e9:
e0:92:03:bf:8d:ca:12:23:0c:b7:38:15:93:21:24:
56:a6:1c:01:43:a4:ec:60:4b:a9:0e:ed:37:52:a0:
66:5d:68:35:be:e3:4a:ee:e3:26:e7:b9:2f:88:ed:
b9:d4:96:70:05:70:63:ad:ea:a8:da:59:89:1c:ce:
71:73:55:9a:ac:eb:c4:c7:56:a1:a7:25:7f:5a:15:
54:0d:46:64:20:81:34:2d:84:60:12:86:2f:b9:b4:
7f:6e:c7:dc:b3:47:89:e7:27:5c:b4:ec:39:55:a1:
c4:7c:2e:71:ce:c0:ce:3c:6b:4b:9c:4c:03:8e:6b:
a7:0f:4d:78:de:33:47:0f:70:5c:a1:1d:f3:17:fe:
0d:c1:e3:3d:e2:89:32:a6:be:c2:b2:55:39:51:f6:
f1:11:23:f1:6b:f8:fc:73:76:24:c9:85:43:76:7b:
15:9c:a5:41:be:ff:60:18:97:d8:cf:9a:ce:a2:fe:
05:92:5b:77:81:93:de:2a:ed:60:63:c1:fc:d7:6f:
88:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:13:B4:5C:D7:F4:9F:6A:26:54:90:3C:00:4C:DB:E7:A9:8A:8E:E1
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:98:74:c2:51:bd:a6:e8:b6:05:90:0a:7a:f5:3d:6d:dd:ab:
46:f6:9e:e2:8b:b3:58:24:22:4a:89:a2:85:19:96:48:64:ad:
da:f0:ae:77:c0:19:80:d7:85:0c:b1:a1:3b:1d:cb:22:3d:4f:
5f:ac:0f:b0:d7:50:58:21:3c:ec:a6:76:83:1c:8e:25:38:2e:
86:e5:bb:4f:ae:3d:be:b0:1d:8f:de:23:1d:72:f1:2c:2c:1a:
ad:7c:ef:fd:f1:ca:24:28:a3:45:2a:f5:0a:8f:b2:cb:7a:51:
da:cf:35:7d:4b:c3:0c:18:d4:af:26:1d:77:8a:78:e8:d2:79:
32:13:c0:d9:dd:5f:58:a0:eb:87:5c:f1:6b:6b:15:b4:26:fa:
fa:ca:0f:1c:e9:57:e7:6d:2f:1d:33:e5:6a:d9:1e:43:f7:a6:
3e:81:c9:32:4a:96:0b:a0:8b:be:a5:6a:09:70:33:b9:bf:3a:
4d:a2:21:b5:84:bb:c5:33:0d:39:7b:0f:4b:56:a4:8a:4d:bd:
6f:b3:66:3d:8c:12:0e:d0:e8:b3:71:36:9c:91:85:b3:07:fc:
6f:40:ef:df:24:25:36:57:f1:88:98:88:d9:ad:37:78:cc:66:
2e:1e:2c:4e:61:d6:29:c9:22:05:e8:5c:44:c1:81:23:7c:56:
0c:02:08:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:22:52 2026 by rpki-client