Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: K47MTT6nAIzM9paDSCQzKCFD+PgsGVJmR9kXNv8qWYw=
Subject key identifier: 2C:97:01:2B:66:09:A3:B2:31:51:8B:19:2E:48:A4:EB:45:56:C5:C6
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 019E303BEF98DFB0B39921ED0211979AB9FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0CA6
Signing time: Sat 16 May 2026 10:01:34 +0000
Manifest this update: Sat 16 May 2026 10:01:34 +0000
Manifest next update: Sun 17 May 2026 10:01:34 +0000
Files and hashes: 1: EmJaWy9ErTq18djeUNfT6TYwXlA.roa (hash: 4n7tztgrwrUxD6WI3OMeFvCbZPJYYWR7ZCZusKoAv2Y=)
2: I-K9nqaL8isdaQPATdz15jV472A.roa (hash: IzWVmalHZuVa9srOGb7K8LfnsGA4gkEh+RLBEqMh0oM=)
3: RcwVn60BAjXaSKd54kN8HvE9mEI.roa (hash: HMzOnWY8MpFn7ebVHAu3c09I2xVaAKGb1gijWHIVX6I=)
4: VMEOZBTbdat5Ej2FDGSSyvWxON4.roa (hash: il5PH5NsJiNfZtmLceTZARbKmqNBVyPmTfnq15PGTB8=)
5: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: EZnVCUqTbzOU0EuHDlaKYYJZaGUNYbXGnddk+rsaCuo=)
6: lIxTSYsNmmcqNIHLrqXgnkuovB4.roa (hash: KyCy7f0RC+Gah0kPcXWSGeJFDqftrveXwrbOBQUq7gE=)
7: n6hUs8ScD2JiUwNfl89-e_tCc6w.roa (hash: /7fv2sWCDJbqb4l7iyEbmK73ArodpdBZ+jyH4nyo2WE=)
8: roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa (hash: HW4LBYiaQzfwjk4eYDYDeite6KGRHXlfiOHLKtkmNeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 10:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:3b:ef:98:df:b0:b3:99:21:ed:02:11:97:9a:b9:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: May 16 10:01:34 2026 GMT
Not After : May 17 10:01:34 2026 GMT
Subject: CN=2c97012b6609a3b231518b192e48a4eb4556c5c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:9b:ee:ea:74:1c:f4:21:87:4b:13:16:f0:bb:
ec:a3:8e:cf:98:75:a7:f0:97:b2:27:ba:c4:50:17:
2e:4f:4a:d7:71:78:8d:43:8b:49:2d:fd:60:7b:6f:
2c:a3:3a:9f:ad:fb:9b:c5:48:b8:56:3b:a0:db:2d:
32:23:2b:06:e2:82:c5:65:de:d7:74:02:8a:5b:da:
c0:b3:9d:5a:35:86:ce:24:46:1b:df:3b:f3:36:21:
e9:9f:9e:d4:51:ef:69:26:6b:cb:d6:dd:f8:5c:7b:
12:e2:4c:10:7a:45:88:f2:69:3d:b4:80:c5:6c:a7:
6f:d9:58:c3:96:0c:bf:de:cd:7e:2d:2d:05:34:e0:
d3:5e:fd:5f:1d:c7:af:7a:67:98:54:2b:fe:51:bf:
46:f8:86:96:05:3d:36:8d:b2:bc:e0:54:45:e2:1e:
3a:46:68:bc:5a:59:32:19:b6:da:f3:48:79:bc:16:
e6:0e:1f:49:f8:c0:a0:e8:a6:35:fb:8d:90:4a:55:
73:86:d8:86:7f:72:6b:ad:0d:c1:49:99:ec:05:62:
7d:a5:4e:68:f8:06:90:87:f5:ec:e5:0d:08:39:7c:
a6:84:bc:5a:a6:3c:63:76:6e:83:40:fd:da:ee:f4:
e2:d1:b5:09:76:23:a3:cb:e9:44:9e:c0:e9:51:c0:
0a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:97:01:2B:66:09:A3:B2:31:51:8B:19:2E:48:A4:EB:45:56:C5:C6
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:b2:8b:da:fe:7c:4a:e2:9d:52:57:e9:0b:d9:08:df:e3:d1:
2c:f2:ce:f7:5b:f1:99:b7:a1:33:ed:4e:06:04:bb:a1:d6:3b:
cd:1b:a7:e4:ee:ee:97:5b:66:00:64:d1:98:13:f2:b4:54:75:
ec:84:a1:03:b1:4c:df:8d:b4:7b:4f:c3:d6:b1:ae:82:03:2e:
c7:d6:b5:94:85:ca:b3:84:a5:07:5b:77:e4:c2:af:fb:9c:db:
8d:8a:39:03:17:10:ac:4e:47:13:fd:f3:fa:5b:61:6f:6a:bc:
2f:6b:50:c6:a9:27:dd:bf:9e:e3:84:8b:71:17:20:06:b9:91:
05:21:4d:45:76:d5:a3:66:75:a8:81:19:8a:60:d3:2e:6e:88:
39:8f:1c:92:ae:64:55:98:f7:f6:33:a7:3f:ba:e6:ac:90:e9:
2b:45:1c:4b:84:07:e3:ed:1f:6d:be:56:b6:bb:fa:bb:11:75:
d2:f8:fe:3e:6e:6c:95:eb:10:75:4d:5a:15:25:22:a3:fa:ea:
4f:f0:e3:9c:51:31:fe:f6:0e:11:24:44:98:9b:de:47:00:3a:
ec:75:0a:d8:c5:56:ae:63:be:e1:8f:4a:f4:6d:56:a0:a0:58:
e7:0a:f6:ab:6d:87:fd:83:f2:e7:51:6d:3b:f6:6f:9f:06:6c:
4d:2c:8a:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:38:29 2026 by rpki-client