Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
File: XWlT20hASwxmoV8Npu-n-sCpNp4.mft (raw, json)
Hash identifier: RhcgcZHPHs9ZgaQyZ4++Ud/HtC+m/dpJrjOZcFpkinc=
Subject key identifier: 78:15:09:20:8F:D6:91:29:90:1D:7A:8B:69:B7:1D:15:EF:84:A5:77
Authority key identifier: 5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
Certificate issuer: /CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Certificate serial: 019F1C44DA686BABCC2499C040E39D7E99AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
Manifest number: 1989
Signing time: Wed 01 Jul 2026 06:01:42 +0000
Manifest this update: Wed 01 Jul 2026 06:01:42 +0000
Manifest next update: Thu 02 Jul 2026 06:01:42 +0000
Files and hashes: 1: PnV6MRrCbEDbUgZOWZkw0F-5fTw.roa (hash: gpEq7vfgynN+KUY61gV3ilXsbaQKj+P9YjZ3SCCvLxo=)
2: XWlT20hASwxmoV8Npu-n-sCpNp4.crl (hash: G25sqWDWLlClxSo4HEP6KGpV6fntEL0bQvrPYSwokeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:44:da:68:6b:ab:cc:24:99:c0:40:e3:9d:7e:99:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6953db48404b0c66a15f0da6efa7fac0a9369e
Validity
Not Before: Jul 1 06:01:42 2026 GMT
Not After : Jul 2 06:01:42 2026 GMT
Subject: CN=781509208fd69129901d7a8b69b71d15ef84a577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:dc:73:3a:f6:82:3e:ef:7a:56:40:9e:47:3a:
a1:0a:19:16:a6:21:8a:7a:df:62:07:dc:6c:a4:34:
de:8c:b9:84:9b:bb:be:3a:62:ca:2e:54:bd:74:a4:
5c:86:af:87:cc:12:70:aa:ab:c8:2f:84:b1:3b:75:
08:89:45:5c:0a:fb:41:64:5f:9b:68:cf:3b:10:1a:
3e:68:aa:a0:cd:8d:d6:95:6f:91:ed:9d:56:ea:12:
7a:0e:c9:12:14:32:b8:21:ce:c5:7d:9c:e6:bd:a0:
30:fe:1e:0d:79:38:d5:14:15:c1:5c:5d:f0:b4:5d:
f3:1b:3a:bd:e3:3c:94:7c:0f:a6:08:58:03:53:9b:
1a:b8:67:a6:43:fa:4e:f2:a7:3e:ec:c1:7a:92:72:
a5:7f:ed:8b:47:c1:09:30:8c:29:75:84:7a:30:63:
88:52:fc:70:67:17:eb:11:8c:eb:7b:30:a4:f6:65:
58:ac:2a:27:a1:f9:18:4e:24:a5:bf:dd:b7:92:0b:
28:43:d6:13:6d:62:cb:d8:6e:14:74:93:b9:e1:84:
e1:7a:60:ea:ae:4c:8e:61:d0:c8:10:63:3c:0b:cc:
ec:f0:50:06:d6:3e:a8:2c:65:c1:fc:53:96:c3:ae:
37:d1:20:32:ec:3f:87:5d:11:ff:49:d6:d6:d4:39:
8f:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:15:09:20:8F:D6:91:29:90:1D:7A:8B:69:B7:1D:15:EF:84:A5:77
X509v3 Authority Key Identifier:
keyid:5D:69:53:DB:48:40:4B:0C:66:A1:5F:0D:A6:EF:A7:FA:C0:A9:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWlT20hASwxmoV8Npu-n-sCpNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/536fde-a02d-48f5-a75d-fa2fb94da1a2/1/XWlT20hASwxmoV8Npu-n-sCpNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:ac:e3:d1:64:0a:c8:5b:ee:e0:27:f6:4e:70:d1:e8:71:27:
62:a5:3b:55:df:a1:2e:5c:83:39:e7:28:33:f7:aa:99:9a:3b:
60:79:55:2e:0d:7c:67:a3:70:10:86:a1:50:61:4a:4f:34:08:
50:09:9a:9a:5a:ad:61:35:c3:f6:d9:3b:77:01:b5:37:ae:8f:
a0:31:4e:25:42:c9:e5:0b:d3:c5:bf:09:df:cb:f8:4b:b1:8f:
ea:79:85:8e:71:6a:23:4a:e3:bd:f1:90:87:2a:e3:a8:20:db:
38:8b:f6:67:73:84:96:db:89:01:44:ef:79:15:55:61:58:56:
4a:81:c1:9e:66:b9:6c:b6:c9:5a:2f:74:14:11:75:fb:05:38:
9e:3f:96:9c:c5:21:3f:f1:36:01:45:78:a4:58:c7:50:fb:c9:
55:9c:52:ab:3f:b5:fb:d9:da:8b:0d:9a:ad:92:6d:ed:12:93:
cc:c0:5b:1e:f1:06:81:89:f2:f4:76:c4:34:c3:29:4e:b5:74:
c1:1d:23:a7:9c:52:81:b1:e0:72:12:5e:5a:cd:c7:ff:a9:bf:
11:e2:92:54:6f:43:66:bd:63:a0:9a:67:b5:f6:b6:ea:27:1e:
4e:50:cc:3b:ce:cb:a5:93:72:79:7b:5a:9e:4d:1e:8c:5b:01:
e1:ee:34:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 07:26:11 2026 by rpki-client