Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: JY94uku48urW9m4+24x0+yhy73FfLnObzeRffItcz0g=
Subject key identifier: 9D:0A:D6:CB:01:1B:2E:78:8B:46:21:59:C0:E0:29:ED:64:04:CF:92
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 019EBBB48B78928F5517B56C3971DBCFCBB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 1958
Signing time: Fri 12 Jun 2026 12:00:32 +0000
Manifest this update: Fri 12 Jun 2026 12:00:32 +0000
Manifest next update: Sat 13 Jun 2026 12:00:32 +0000
Files and hashes: 1: 017yR2AH3nhtreOuYgsNpqkrBt0.roa (hash: jH8rFvA13JhY4szX2F6JGpx37/sl3RxTDMuhAZiU224=)
2: OOfgMgyirAjAQpzlSeWvWZ7kZIQ.roa (hash: wpPBvbubRrWqOyJudWgmsWq2Hw2lni+AI3RKu2B28mg=)
3: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: I0FHCBOmOoIFvvGRbodFDNFTDzguje2uav8rCVJydUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:b4:8b:78:92:8f:55:17:b5:6c:39:71:db:cf:cb:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: Jun 12 12:00:32 2026 GMT
Not After : Jun 13 12:00:32 2026 GMT
Subject: CN=9d0ad6cb011b2e788b462159c0e029ed6404cf92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a3:71:f7:91:64:18:f4:5c:67:17:cc:c9:c4:
1e:4e:90:05:cb:b1:87:c9:47:7c:6e:37:90:2c:53:
4d:ae:0f:5f:fc:2b:f2:32:05:7d:ce:df:2d:e9:9f:
dc:f7:c3:f5:68:0b:91:19:6f:b1:9c:56:42:5b:de:
10:cf:bd:9d:22:9f:9b:c5:4b:c7:43:8a:31:c2:ea:
9d:a8:eb:2e:13:b0:a0:28:c6:b3:ab:31:70:82:3f:
d8:45:33:2b:94:59:e4:93:94:a5:1e:ec:1f:dc:07:
cc:43:af:8e:26:ad:a3:b3:68:53:5b:fd:10:2d:c0:
aa:e4:ba:5a:c6:4e:ec:5e:0e:04:fe:2a:3d:81:b1:
6a:92:0e:07:5f:01:1c:18:6f:57:5c:cc:e4:68:6c:
83:0d:c8:12:8b:07:ff:9c:0d:36:89:35:a9:80:93:
8c:00:91:e9:fb:4a:eb:e6:af:1e:2e:08:15:64:dd:
2c:28:5d:2d:fe:09:b7:a4:40:7b:d2:f1:1d:d8:96:
5a:cf:16:a1:4c:c1:1a:9a:0a:fc:b6:ca:42:7e:00:
2f:db:00:36:83:81:ad:0f:9a:4c:b4:9f:d3:05:8d:
1c:18:66:dc:cf:b7:3c:ee:6b:ee:d0:3f:ea:0b:22:
0e:1b:d7:c7:96:9e:cd:a7:67:3c:cb:a4:6b:49:f5:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:0A:D6:CB:01:1B:2E:78:8B:46:21:59:C0:E0:29:ED:64:04:CF:92
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:57:53:df:34:22:49:fd:e3:5d:cb:7b:bd:52:b2:ab:7f:e4:
a7:4e:ef:94:3f:f9:44:2c:29:9a:f9:d2:ac:d8:d9:d2:3a:c0:
70:fa:a6:e5:03:3e:45:69:31:19:43:80:39:db:e8:c5:df:c4:
36:92:a1:e6:30:21:53:26:12:06:8f:bf:61:b4:bb:fe:b1:bc:
63:64:31:67:87:29:5c:77:02:62:31:b2:ca:40:7b:2b:c5:38:
ce:79:3c:75:30:a9:9b:0f:53:c9:b3:a2:26:26:f9:44:1b:03:
d9:6a:d4:da:fe:6c:45:21:f7:64:44:ea:6f:4c:04:52:2b:f9:
b6:57:55:b0:1f:b3:51:b1:32:fd:14:24:29:63:d8:b5:75:83:
4e:8f:63:50:2e:6a:1b:9b:17:9b:59:56:0a:76:55:36:2b:21:
60:75:5e:44:b9:ac:e8:ca:6b:28:9e:09:47:68:25:70:0d:a8:
54:37:33:87:65:4e:1d:7c:7b:b2:70:57:40:6c:50:33:f2:05:
74:f2:87:fe:70:3c:e6:93:69:57:75:45:26:20:e4:2a:f7:7f:
25:98:b2:3e:57:9d:82:84:2f:96:8f:6a:a3:7f:25:47:3d:60:
01:9d:17:9a:97:4a:9a:c3:b1:a0:e9:62:eb:65:10:78:3c:4b:
8a:55:89:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 15:26:39 2026 by rpki-client