Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: w8IM5kx/y9KkMmqNWXTSTF/N++gFfb0MuZYKZVirjkM=
Subject key identifier: C5:92:24:BE:C6:DC:3E:C7:71:71:31:BC:95:52:DA:4C:72:76:E0:D3
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 019F10E49B82536617C917C0EEBFC8BD3BF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 1984
Signing time: Mon 29 Jun 2026 01:00:45 +0000
Manifest this update: Mon 29 Jun 2026 01:00:45 +0000
Manifest next update: Tue 30 Jun 2026 01:00:45 +0000
Files and hashes: 1: NKg93JWQUnBu80RX13MwmqJxvVc.roa (hash: nG4jnHVVr/B/zg5snhsHaHEVH2wq5BQYMoc/wJLZKCM=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: ldWVlKzrroEDn/5qHvSAc2ij1gRXGqL50k1/QxNg/GI=)
3: wGoncIYhxzrOvpFggApuVrKV4Vk.asa (hash: S/6luEA1foPNyWEYWaj/UsXwLkgTP/ejkSFX9YYjOE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e4:9b:82:53:66:17:c9:17:c0:ee:bf:c8:bd:3b:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: Jun 29 01:00:45 2026 GMT
Not After : Jun 30 01:00:45 2026 GMT
Subject: CN=c59224bec6dc3ec7717131bc9552da4c7276e0d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8c:8f:c8:f6:e3:1a:01:76:8b:f3:ce:b7:be:
a6:7e:34:df:f9:4d:67:85:3e:ae:b2:04:fb:d1:e1:
c2:a1:66:7a:0b:5c:ef:37:cf:97:2c:83:33:dd:0d:
65:b6:14:d4:6d:c4:12:15:11:3b:8c:6e:34:dd:f0:
7a:53:8e:f3:cf:ab:69:46:10:48:b1:5f:88:cb:b7:
b1:eb:cc:f0:88:e8:60:86:00:69:70:e9:d4:5b:3b:
37:02:7e:19:a2:71:99:13:4a:46:68:e1:0a:72:bf:
27:ad:46:26:48:a5:bf:da:58:93:c0:c5:28:9c:88:
f1:2d:81:eb:95:44:fd:04:06:01:e9:06:2b:c8:2e:
8d:51:29:bf:fa:9b:3a:d9:e8:36:ea:1e:60:f6:5c:
8a:03:9c:af:5c:9d:cc:5e:73:51:c4:41:33:d8:68:
af:24:a3:c3:a2:8a:83:11:81:c7:28:27:ca:24:03:
a2:26:2e:53:fa:a5:6f:d0:23:4f:a3:0f:df:7b:58:
34:e0:31:c7:22:63:b1:b8:4d:8a:92:97:31:b9:c2:
ed:89:5c:15:9c:48:1f:49:73:cd:6c:01:83:54:26:
2c:95:10:51:db:71:b0:d7:e7:49:ca:4e:67:05:8a:
f8:13:e9:be:56:fe:d8:cc:52:6c:a8:6b:88:b0:ee:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:92:24:BE:C6:DC:3E:C7:71:71:31:BC:95:52:DA:4C:72:76:E0:D3
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:09:97:a8:2a:8a:b8:ff:03:3c:25:c0:ee:0c:44:65:da:08:
89:41:50:98:d0:25:84:21:4c:4e:12:f8:a4:e0:ca:f6:f8:1c:
b4:0a:67:ac:ef:50:2d:d0:ba:7a:1c:8b:0f:30:ad:33:7c:ac:
7f:c5:08:e6:77:b6:ae:70:7a:a0:cb:14:32:ad:e5:4f:70:a2:
93:93:c5:7f:16:af:35:a3:e1:16:69:55:17:c7:6d:26:f9:5d:
2a:a3:6c:3e:37:2c:52:00:76:51:a3:44:cd:c9:db:4c:24:00:
67:ca:54:e4:26:88:85:24:a6:56:2c:e9:01:a9:26:46:4e:09:
39:61:93:03:43:53:05:0a:bb:45:30:80:cd:25:36:4c:52:3d:
ac:b1:a4:d0:c0:3b:42:35:ad:7f:c7:13:2e:57:93:3c:66:68:
a6:12:e1:81:b3:3b:78:45:fa:c9:55:92:51:53:cc:1b:61:30:
f6:26:2d:1e:33:58:b8:2b:8c:f6:c4:e1:b1:5d:3e:cb:52:43:
9c:cd:59:35:4f:05:d6:77:bc:4c:ce:3c:35:ec:df:30:c1:17:
32:1f:1b:19:35:3d:28:40:3f:54:82:92:8b:25:d4:90:c8:69:
78:c6:d5:2f:56:a0:41:ac:59:5c:1d:6d:76:71:b2:5f:85:68:
89:9d:6a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:43:24 2026 by rpki-client