Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
File: xRGedSADkvGi8IvpkHMtgEeyiwk.mft (raw, json)
Hash identifier: AyQoHfjaBAOJUvYnMzgPx+NXVTdYR5vi/FMJYNFt1Hc=
Subject key identifier: B4:E4:9B:2B:64:99:99:A0:6B:E8:3F:6F:8E:17:8E:4B:7C:20:3D:93
Authority key identifier: C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
Certificate issuer: /CN=c5119e75200392f1a2f08be990732d8047b28b09
Certificate serial: 019EB9216454A5A8A4A117AC2330DB840ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
Manifest number: 1957
Signing time: Fri 12 Jun 2026 00:00:33 +0000
Manifest this update: Fri 12 Jun 2026 00:00:33 +0000
Manifest next update: Sat 13 Jun 2026 00:00:33 +0000
Files and hashes: 1: 7dSZZTHJ1-e2dDdweLpiAslwQS0.roa (hash: TsQjPnCqokf75A2IgOvFTsvPj11pJfIjU93Enfc2xSU=)
2: xRGedSADkvGi8IvpkHMtgEeyiwk.crl (hash: F9goB23W2dn7/OV3ATOmEg+mf8XOWBM5TgkJqbT5pok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:21:64:54:a5:a8:a4:a1:17:ac:23:30:db:84:0a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5119e75200392f1a2f08be990732d8047b28b09
Validity
Not Before: Jun 12 00:00:33 2026 GMT
Not After : Jun 13 00:00:33 2026 GMT
Subject: CN=b4e49b2b649999a06be83f6f8e178e4b7c203d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:99:09:aa:92:cc:58:aa:ca:f3:55:c3:d3:
e3:92:5d:97:6f:3d:67:c5:ee:3b:2b:05:87:93:17:
14:03:32:82:36:c1:73:3e:fd:1b:f1:25:5c:34:a7:
1d:fd:8d:2b:98:e4:9f:77:17:7f:11:29:52:b3:31:
4f:cc:1c:a4:45:86:59:9b:32:c9:b1:d9:4e:78:03:
97:a0:24:c6:06:a3:d5:6c:b7:51:b7:88:e2:94:28:
bc:86:6d:f0:95:81:d1:6d:03:03:8e:8e:bc:2d:60:
f4:23:34:82:15:58:66:84:72:a0:4f:ff:47:08:ba:
62:0a:95:70:de:36:e6:30:00:c3:42:28:02:c9:ce:
9b:43:8c:40:01:48:4f:74:ba:e6:32:41:d7:91:37:
3c:9b:fd:43:c2:1b:87:55:b3:91:c9:3d:2c:11:95:
ee:16:0c:7f:45:42:55:9f:1b:06:2b:f9:c0:a8:f9:
df:c4:aa:a7:2d:01:78:8a:ea:98:8c:1d:de:ba:f3:
66:19:ee:1d:3d:de:28:e1:45:de:2a:4e:2d:94:9f:
82:65:b4:09:f1:c8:e8:3d:2c:f6:f4:b4:ce:c8:42:
e6:ce:aa:30:34:3e:52:87:1b:5a:46:52:b1:33:b5:
41:3b:1b:91:da:69:af:e4:eb:ae:b9:e9:d2:55:be:
34:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:E4:9B:2B:64:99:99:A0:6B:E8:3F:6F:8E:17:8E:4B:7C:20:3D:93
X509v3 Authority Key Identifier:
keyid:C5:11:9E:75:20:03:92:F1:A2:F0:8B:E9:90:73:2D:80:47:B2:8B:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRGedSADkvGi8IvpkHMtgEeyiwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/320baf-59dc-46a2-af7d-d819ced5d35a/1/xRGedSADkvGi8IvpkHMtgEeyiwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:8e:73:12:81:ce:1b:b8:ab:97:53:20:39:9d:68:e1:ae:f4:
a3:fc:e6:06:17:82:94:2b:10:80:b0:32:d7:88:5f:f5:89:8e:
c4:00:e7:8d:7e:a5:8a:8b:99:e6:f1:4e:4f:23:0a:0d:20:af:
dc:41:49:17:13:93:13:56:b9:5d:fa:2c:b5:76:f9:69:7f:5a:
7c:55:d4:2c:36:26:a3:60:1e:f3:08:77:ef:1d:e6:6e:6a:ee:
09:b9:ac:f7:aa:8c:bb:c1:d3:82:a2:9f:c4:7a:68:66:03:0d:
48:b7:dc:9a:ab:73:85:21:62:02:63:64:08:44:35:36:74:0a:
98:c2:e5:a0:3f:79:78:e2:26:8a:dd:cd:a1:1c:6c:57:bb:4f:
17:25:d3:68:26:11:6c:4d:44:f3:85:45:20:95:d4:ce:f7:90:
1e:39:32:07:b5:10:d4:95:12:21:b4:d0:13:04:62:22:e1:77:
a4:4f:bd:c5:ac:07:c1:6f:77:95:95:ab:66:b3:2b:79:5b:a3:
31:5d:7f:97:86:85:0f:6c:57:46:72:bc:a5:a3:c7:3c:3c:cd:
f4:78:ee:17:44:1c:2d:c4:b8:c2:82:00:d1:27:b5:31:87:08:
b8:68:e1:1d:c7:61:5a:a0:4d:a6:0d:a2:ab:c5:c6:ae:32:1c:
fc:b7:4c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:12:04 2026 by rpki-client