Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: ZpzQVsgs448/rvWTGjTgmdR1K20eKt9f+cyURbHbncE=
Subject key identifier: F6:DF:82:96:4E:9F:BC:F4:B3:51:02:A7:9A:54:5F:B9:07:C5:F7:A7
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 019EBBB49A709AA10E2DF2BBDDD4E445A6AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 18EC
Signing time: Fri 12 Jun 2026 12:00:35 +0000
Manifest this update: Fri 12 Jun 2026 12:00:35 +0000
Manifest next update: Sat 13 Jun 2026 12:00:35 +0000
Files and hashes: 1: AorOXJjA6o7VIXG2KhmRn45N0UY.roa (hash: opct1yXiFy361tzWw8bb0wIPcRKu5irJGelwFQC/fvQ=)
2: ErvwJYNq58NBwdxg4NllytvGu58.roa (hash: L/oQiFOQUaagNx6+74y64js5tlg2OsPgxLI2bOEuDOs=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: kWPx1v23S9Rb6pNDBY9bgEnXbAoiMGVeFlG/FLzwGdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:b4:9a:70:9a:a1:0e:2d:f2:bb:dd:d4:e4:45:a6:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Jun 12 12:00:35 2026 GMT
Not After : Jun 13 12:00:35 2026 GMT
Subject: CN=f6df82964e9fbcf4b35102a79a545fb907c5f7a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:bf:ca:1d:58:ca:3c:0c:90:d2:37:e0:cc:
82:b5:95:62:e0:7e:27:8b:a1:b8:cc:cb:b3:2c:ba:
47:b8:cd:f0:7e:3e:2f:ff:87:be:ec:ae:c1:4e:69:
49:de:79:62:23:b8:df:7e:00:8d:20:e9:c9:2d:29:
a4:6e:8d:fc:17:a8:2b:7b:7b:42:78:fe:1a:30:2c:
09:44:92:58:23:e9:51:39:ef:97:b2:c0:7a:95:2c:
a4:39:11:d2:e8:c2:3b:30:62:6f:81:fe:06:8a:4e:
0f:23:f3:4f:75:f4:c4:e0:e4:de:f0:af:54:c9:98:
fb:78:b5:ae:55:c6:e6:88:9d:56:8b:9f:f3:e4:a2:
71:69:77:cb:7f:08:b0:78:89:b6:34:da:47:7b:7b:
22:37:09:cf:16:22:39:66:c8:21:84:f5:6b:83:fc:
42:99:f5:55:44:dc:cf:97:c5:4c:7c:28:52:d9:da:
6e:f4:d0:f1:0b:5a:68:e4:13:db:20:d8:b1:38:d0:
5b:98:e3:0d:dd:00:e2:7e:57:37:47:98:f6:06:3c:
84:73:36:8a:2f:64:e2:a6:cf:72:18:74:51:b1:72:
80:c8:2c:0e:2d:4b:df:8c:f1:af:15:0e:3c:2e:02:
de:bc:d1:63:64:e8:a2:60:50:c3:ad:67:54:98:d6:
07:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:DF:82:96:4E:9F:BC:F4:B3:51:02:A7:9A:54:5F:B9:07:C5:F7:A7
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:68:44:ba:65:f9:2a:e8:1a:a4:87:ab:15:e6:62:58:b3:0a:
8e:58:4f:7b:fb:0e:15:10:5f:a5:a0:ec:a1:d8:4a:d8:29:20:
08:65:32:84:31:14:6f:18:3b:c3:70:49:61:0e:b2:64:c5:52:
49:ab:d2:c1:f7:68:e5:87:bc:0c:fb:da:e7:13:3e:2b:5c:d0:
d6:a6:1a:04:c0:eb:86:a1:d3:bc:46:44:c2:e1:bd:a2:b0:85:
fe:7f:60:26:2f:0e:1c:9b:65:42:ee:d2:df:fd:ab:12:fa:e6:
6b:ee:55:95:ef:fb:9c:d0:34:9b:10:f0:ec:6d:21:28:80:93:
b0:d7:dc:34:c7:09:18:fd:d5:91:db:8b:92:4c:cc:d6:b8:cc:
8e:01:e6:ee:3b:10:46:12:56:8d:f5:a4:29:05:03:76:0d:a6:
c7:cc:af:44:d1:05:30:5f:72:77:cb:69:72:54:40:6a:04:39:
3f:1e:c5:80:9e:8d:d0:ce:d8:32:78:90:12:55:51:2b:e8:af:
e4:a6:3d:ab:25:29:f4:dc:9d:d4:2f:e7:e5:0a:74:e6:e7:fc:
22:e7:c8:25:a0:0e:78:ab:43:d8:62:53:a2:ab:c6:76:74:f8:
ac:53:fa:c6:e5:87:f5:7e:f9:93:87:d8:a9:7f:8a:2f:e1:84:
1e:65:dc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 13:42:21 2026 by rpki-client