Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
File: XTcKSLWfuBFJXxHElzRILyKxo5I.mft (raw, json)
Hash identifier: BcHNoR0bIqvLRaUr/ezGW0FKsKH4giNYyhPJI+pKEs0=
Subject key identifier: 81:94:03:D0:18:72:9A:BF:C6:1D:68:3D:88:D0:49:97:36:3B:C2:10
Authority key identifier: 5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
Certificate issuer: /CN=5d370a48b59fb811495f11c49734482f22b1a392
Certificate serial: 019E9D3CB09EB3EF9DCEB5CA6E518BE3F9A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
Manifest number: 1651
Signing time: Sat 06 Jun 2026 14:01:00 +0000
Manifest this update: Sat 06 Jun 2026 14:01:00 +0000
Manifest next update: Sun 07 Jun 2026 14:01:00 +0000
Files and hashes: 1: IcvWLfVUU_qQmUluK1ZJPZKwDUE.roa (hash: 5KtWCkiCc0spLueO4XERS0KkPgjFXkSMZZzwBDaPptQ=)
2: XTcKSLWfuBFJXxHElzRILyKxo5I.crl (hash: TXaBvldR0Y2e4h/s6VX6uKwsFv7VN2mT5ZASxiNeELI=)
3: iTA00PhnwnNaKrIdb7Sf-BOFNWU.roa (hash: VqBJga5+IchMfnf1RmPYAK4MIX90SZMIG8XmiqppDnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 13:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9d:3c:b0:9e:b3:ef:9d:ce:b5:ca:6e:51:8b:e3:f9:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d370a48b59fb811495f11c49734482f22b1a392
Validity
Not Before: Jun 6 14:01:00 2026 GMT
Not After : Jun 7 14:01:00 2026 GMT
Subject: CN=819403d018729abfc61d683d88d04997363bc210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5a:be:5c:58:b2:90:40:1b:3b:1f:28:89:6a:
3a:61:4a:0a:df:b1:55:43:fb:a9:d2:c6:28:8b:d3:
3e:5f:18:e8:b9:a0:be:b5:7a:aa:6b:60:76:81:8f:
f1:23:92:48:9a:8c:a9:06:7c:5f:3e:7e:3e:66:86:
6a:18:48:c2:41:cd:3e:1d:72:2a:6e:c1:69:fb:ae:
ed:07:52:21:99:c0:d6:84:f4:85:6f:09:aa:2c:49:
2d:fe:97:67:79:f6:ac:8f:63:b9:3f:93:1a:92:79:
ee:69:38:0d:a0:d5:60:6c:c9:ad:e6:28:04:d9:df:
98:ab:f1:94:6c:1f:a8:b9:43:e4:4e:34:66:31:98:
65:82:d6:b8:64:c9:b0:42:0a:9f:59:f2:f9:0d:bd:
fb:ca:3f:e5:c3:05:6d:3d:9c:02:00:d6:5c:83:57:
7c:97:b7:5a:90:69:4d:4b:09:37:dd:07:e4:78:89:
cb:f9:85:0a:28:78:c3:7f:ed:c8:50:33:53:07:77:
ec:0b:39:aa:aa:b1:b1:b3:9f:db:46:a1:1e:98:f6:
c2:cd:88:cc:43:44:95:fa:7b:e9:a3:8c:b8:96:a7:
41:87:65:36:b2:09:fb:75:4f:5d:a8:e8:bf:2c:b1:
81:f1:a7:49:05:5e:2a:01:45:b0:99:87:d3:19:2d:
9f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:94:03:D0:18:72:9A:BF:C6:1D:68:3D:88:D0:49:97:36:3B:C2:10
X509v3 Authority Key Identifier:
keyid:5D:37:0A:48:B5:9F:B8:11:49:5F:11:C4:97:34:48:2F:22:B1:A3:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTcKSLWfuBFJXxHElzRILyKxo5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/70858a-6395-402d-9ace-e272013026b4/1/XTcKSLWfuBFJXxHElzRILyKxo5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:95:b4:f3:18:d8:e2:d7:b0:9c:6d:ef:3f:33:45:16:f3:2d:
f5:8c:4f:c4:c8:e9:47:c9:44:a1:80:b5:1a:45:f6:4a:b9:ac:
50:44:45:01:21:f2:db:0c:30:f1:0e:47:6c:fb:ea:9c:ec:a1:
e3:17:37:00:cf:b2:6d:e7:c8:d1:b4:f0:0c:b5:4c:ea:1b:16:
fe:19:a0:94:83:81:69:bf:5e:0a:4b:84:16:d6:29:97:51:3b:
a6:57:a3:da:ea:47:0d:b9:2f:63:86:f8:6b:98:f8:a8:99:e0:
a1:c2:b6:c6:93:99:89:7b:74:9e:64:2a:fc:dd:cf:f6:2c:6f:
3b:9e:f8:9c:b0:f9:9a:d8:14:c2:ac:8a:18:7d:da:22:ee:fd:
38:85:e2:48:84:54:14:98:17:70:5c:69:10:11:06:86:b6:92:
56:39:2e:8e:8a:a7:70:15:b7:72:d0:5b:c2:6b:73:8a:97:0d:
50:33:57:a2:bf:38:17:d6:25:cd:3b:9c:40:d9:03:0e:65:b9:
95:cd:37:4d:bb:f7:90:c0:ec:f7:ef:c4:61:15:9b:52:69:32:
1b:76:0b:ad:81:24:5d:67:8b:38:e3:08:a6:bc:74:c1:38:69:
b1:e3:35:b6:ea:c8:d8:bd:b9:e9:bc:22:c1:52:d2:49:a7:34:
40:b8:c4:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 18:25:19 2026 by rpki-client