Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
File: xJsfdrtbrG0MeWukcTDHaLHHOxw.mft (raw, json)
Hash identifier: zKLVlvjmCnNT7J6aO9/3wyUbFmv4TDODQ7hreuBCZdQ=
Subject key identifier: 5D:9D:C2:46:67:4B:64:3B:44:3C:93:A1:52:81:A5:C9:E4:11:58:C7
Authority key identifier: C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
Certificate issuer: /CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Certificate serial: 019EDD2E8563DE0BF4BDB167B744107AE3FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
Manifest number: 1968
Signing time: Fri 19 Jun 2026 00:01:13 +0000
Manifest this update: Fri 19 Jun 2026 00:01:13 +0000
Manifest next update: Sat 20 Jun 2026 00:01:13 +0000
Files and hashes: 1: Ng0DQWDHTBmFSx5wv3FJ35llgcs.roa (hash: rjml5J5gqgFMe9KzjlWTkxUk0orx3tU+r2zl+R9xROo=)
2: wcLWWQG314JWSm8pfpN9yL_5EII.roa (hash: D4VS38hxLq9k1urmiJ5Azd8OYDvuYJ5hUnqD5WiA9F0=)
3: xJsfdrtbrG0MeWukcTDHaLHHOxw.crl (hash: 44WROfo5/JJrzPDMmloQ/2My8cBE1lWThyNUZM0c3C0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:dd:2e:85:63:de:0b:f4:bd:b1:67:b7:44:10:7a:e3:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c49b1f76bb5bac6d0c796ba47130c768b1c73b1c
Validity
Not Before: Jun 19 00:01:13 2026 GMT
Not After : Jun 20 00:01:13 2026 GMT
Subject: CN=5d9dc246674b643b443c93a15281a5c9e41158c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:4d:ee:ec:e4:02:a5:11:88:99:6a:16:35:18:
98:c8:b7:d0:22:7f:3a:9a:2e:28:6a:13:ca:8c:4a:
0e:16:ed:05:f2:11:3e:3a:8c:b2:67:20:36:99:e3:
64:d7:24:24:23:70:e5:dd:69:f6:60:03:bd:56:36:
98:fb:9b:2a:c0:3e:6d:3f:a6:4a:bd:f2:ac:0d:c8:
c1:fd:f5:9b:e1:48:bc:66:20:0c:37:9c:87:0a:43:
87:69:9e:9f:97:6c:bf:fb:a3:32:18:f7:26:58:ed:
b1:ab:66:d2:a3:6f:66:f6:69:90:e9:42:74:ea:4c:
ec:c6:43:e7:f8:f6:99:d8:28:cc:4b:6e:d9:fb:f2:
28:d8:d4:17:a5:21:14:74:9f:67:bf:9a:e6:59:ad:
3c:ec:de:8c:7c:ab:7d:f1:24:c6:3b:fa:8c:a4:4a:
7f:f7:9d:b0:6f:2e:12:6e:3a:08:a6:db:7f:1e:0e:
a8:4f:19:ed:c4:75:3e:d1:cc:e6:04:60:5f:36:f8:
b9:f5:1d:0d:97:fa:f2:35:b6:f4:c9:05:37:dc:6b:
25:8a:ce:cf:db:15:cd:1d:b1:d2:73:59:4b:16:f9:
fe:8f:2c:06:d5:df:db:77:b0:ef:18:cd:7a:84:54:
4b:48:f5:ce:0f:cf:5c:e6:64:fe:c4:8d:76:49:e0:
d1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:9D:C2:46:67:4B:64:3B:44:3C:93:A1:52:81:A5:C9:E4:11:58:C7
X509v3 Authority Key Identifier:
keyid:C4:9B:1F:76:BB:5B:AC:6D:0C:79:6B:A4:71:30:C7:68:B1:C7:3B:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJsfdrtbrG0MeWukcTDHaLHHOxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/8686cd-1f1c-4845-812d-4ad4035fae7b/1/xJsfdrtbrG0MeWukcTDHaLHHOxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:21:7c:e9:b4:b3:04:91:42:2e:3f:6c:d5:02:e6:4c:e7:6f:
61:32:77:0c:78:21:ed:75:78:c2:01:d5:ca:23:88:05:04:9f:
90:02:f9:b6:f8:d2:41:14:58:ea:75:bd:f1:92:e4:bd:74:c6:
66:ea:0e:86:15:85:1a:5a:11:5f:d4:f8:39:9c:20:ae:13:7a:
a4:b1:d3:e5:61:2f:a0:04:34:18:b5:13:73:d0:0a:de:bb:e5:
df:c0:ae:a3:8a:91:3f:2f:e0:6a:a3:03:e3:11:4b:86:a7:86:
db:88:1f:2e:ac:a1:24:d4:d7:e0:fd:d5:d1:54:c6:7c:c6:5f:
24:0f:7d:a8:5e:06:bb:08:97:6b:31:77:0a:5b:6e:d2:0d:4f:
28:1c:5f:8b:6e:bb:15:3b:1d:4b:ab:67:d7:3a:ac:67:54:b7:
63:6b:2e:32:e1:42:dd:d2:e5:55:58:31:84:cb:34:2c:c1:04:
64:f3:fa:e6:d2:d6:4d:45:b2:bb:24:23:55:73:39:e3:ad:b0:
92:c0:c0:1c:5e:e9:8c:0f:8a:f9:a3:fc:f8:03:27:4e:ac:01:
a7:45:bb:64:b2:09:e4:2b:fc:05:c0:e6:e6:f8:25:de:e9:7a:
5e:c5:51:fd:7f:7a:5f:81:9e:a9:28:78:04:24:97:01:d9:5f:
e3:e2:8d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 08:16:41 2026 by rpki-client