Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
File: XTJb79i36F40cQQgbYwKuKbg-04.mft (raw, json)
Hash identifier: 4FopmvGbmsoyI5F09Ed0iliDVWpXDDIcA0Up7cj+3BE=
Subject key identifier: EE:19:1F:D0:15:39:34:8D:2C:D0:14:12:29:38:78:B0:2C:13:D6:48
Authority key identifier: 5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
Certificate issuer: /CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Certificate serial: 019EB87CBBFE0731A6D430A346F1DBD395CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
Manifest number: 1730
Signing time: Thu 11 Jun 2026 21:00:42 +0000
Manifest this update: Thu 11 Jun 2026 21:00:42 +0000
Manifest next update: Fri 12 Jun 2026 21:00:42 +0000
Files and hashes: 1: PzMpMCVPdUDUUH8GTuka9keIPNQ.roa (hash: IKEP0LVD3JdV2nQIZoc3FzX3XZlJgMd0mFQnJDaVjxI=)
2: XTJb79i36F40cQQgbYwKuKbg-04.crl (hash: szr4jgbo+Vk6vQNA3f1XcgSZHUP5wggcsY0ZqoAW+vQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:bb:fe:07:31:a6:d4:30:a3:46:f1:db:d3:95:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d325befd8b7e85e347104206d8c0ab8a6e0fb4e
Validity
Not Before: Jun 11 21:00:42 2026 GMT
Not After : Jun 12 21:00:42 2026 GMT
Subject: CN=ee191fd01539348d2cd01412293878b02c13d648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:61:da:99:b0:1e:f3:a1:9c:86:18:33:6e:
0e:34:d9:54:2c:39:1a:8c:ea:2a:47:86:4e:99:92:
22:13:fa:70:cb:85:3c:df:e6:0e:fd:68:6d:40:59:
41:86:47:5b:c8:f7:b9:68:17:29:8a:1e:8b:3f:28:
d9:9d:b3:37:68:67:15:3a:b6:51:e2:a2:af:81:95:
f5:6a:d5:6e:27:29:d5:9e:4c:f4:75:c5:9a:40:3e:
96:1d:37:c9:9b:53:0c:20:b6:64:e2:47:dd:d3:be:
f5:3b:da:0d:7a:15:85:db:62:17:1a:3a:92:bd:5f:
3f:8e:cf:c3:ab:b9:94:d8:6e:66:eb:e3:4e:16:f4:
92:8d:09:39:49:c7:05:d7:ac:db:14:74:e2:a2:34:
d7:73:3c:16:76:45:4b:53:ed:56:c8:e1:0c:75:c9:
6a:02:df:65:e1:bc:4b:e7:e8:fb:22:fa:02:86:8f:
8e:b4:1d:92:b7:4a:f1:f7:1e:6c:32:e9:db:03:95:
bf:a8:e6:76:a2:2a:9c:f0:72:56:e0:ba:a1:2b:87:
3c:22:26:48:34:1d:51:44:7c:0b:36:b4:63:d7:66:
7f:2a:45:97:c6:8e:ba:3f:01:4c:ad:d9:11:af:e2:
3e:ce:40:4e:0f:b1:b1:2e:5f:0f:fc:98:3a:cf:d2:
e8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:19:1F:D0:15:39:34:8D:2C:D0:14:12:29:38:78:B0:2C:13:D6:48
X509v3 Authority Key Identifier:
keyid:5D:32:5B:EF:D8:B7:E8:5E:34:71:04:20:6D:8C:0A:B8:A6:E0:FB:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTJb79i36F40cQQgbYwKuKbg-04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/5146d0-3e74-47a1-aa3e-f9995b78a85f/1/XTJb79i36F40cQQgbYwKuKbg-04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:f8:85:02:5f:a8:e8:da:15:30:40:c4:ce:29:84:77:16:9a:
d3:c7:38:82:e2:96:2e:34:c6:ee:8e:a7:5d:a5:82:65:78:47:
cf:db:50:99:7f:05:33:65:c2:53:dc:1a:1d:47:72:89:90:6a:
bb:e3:74:e4:ec:46:da:55:eb:d4:36:8f:41:5d:a8:97:2e:50:
0d:0d:b9:b4:0b:5c:98:7b:3b:51:24:2c:68:81:6d:22:f3:3b:
88:73:e0:3b:6e:89:51:c0:11:1b:4b:56:c9:ee:5d:f4:4e:4d:
40:2e:0f:67:56:aa:b6:88:40:b6:3a:cb:18:21:ca:22:26:02:
ce:ee:94:ca:2c:45:5c:96:c3:8e:12:33:18:61:d9:a8:b1:ad:
df:96:6b:e4:19:0a:b0:43:ea:0f:14:75:d2:b3:fa:53:27:75:
64:c4:c2:d0:a5:d1:56:03:f5:c7:8c:89:b1:a4:e6:5e:9f:72:
5c:22:e2:ac:d6:e3:8a:1c:90:48:a6:0b:19:3f:4d:f5:1d:8f:
a6:4e:5b:ee:9f:67:47:cf:d0:25:21:d7:56:55:4d:ed:62:0c:
bf:d4:2c:55:c1:62:a1:35:fd:e1:73:b4:51:5c:c0:8e:6f:f6:
c1:58:c1:48:4d:2a:66:d3:d0:5f:76:3f:77:e3:dd:10:a0:4a:
01:0f:fc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:03:06 2026 by rpki-client