Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
File: SXIqDKi7yU1IpctIzMku_vhFp-M.mft (raw, json)
Hash identifier: pZLFGUetwvAhq2wE1F82fN4QgoT49YoB2cxLPLUm6vQ=
Subject key identifier: F8:C1:0D:78:86:8E:8B:48:E1:62:99:F3:D2:F5:0B:C1:76:BF:38:EC
Authority key identifier: 49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
Certificate issuer: /CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Certificate serial: 019E92139E397FD6688F10BC3DF1A530583D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
Manifest number: 18FF
Signing time: Thu 04 Jun 2026 10:00:19 +0000
Manifest this update: Thu 04 Jun 2026 10:00:19 +0000
Manifest next update: Fri 05 Jun 2026 10:00:19 +0000
Files and hashes: 1: SXIqDKi7yU1IpctIzMku_vhFp-M.crl (hash: zHHrGxCkGpvthI3fvOT4sKYhkzcR3gqfjgPC89iENj0=)
2: Y7BflHpDTlEOWh8-FjDosgwANDI.roa (hash: BNh1IcHDcawtVTnT8ZLo5aKLUrVIe97SR3mZxwBAYlo=)
3: kfeH-aHyiZ_llhlDCtwr8YeqKuk.roa (hash: 4qeVrLsRX3PjbQ9N5eaGFDLDZ8tMOqdmxHU/M5zIjWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:13:9e:39:7f:d6:68:8f:10:bc:3d:f1:a5:30:58:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49722a0ca8bbc94d48a5cb48ccc92efef845a7e3
Validity
Not Before: Jun 4 10:00:19 2026 GMT
Not After : Jun 5 10:00:19 2026 GMT
Subject: CN=f8c10d78868e8b48e16299f3d2f50bc176bf38ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:91:fb:c8:74:52:cf:5e:9d:e9:50:a6:47:f7:
f1:07:56:ac:ca:ec:8d:c3:53:4e:66:ea:b0:d1:99:
78:5c:a4:61:5a:2d:be:50:b3:8d:84:7f:ae:81:07:
9b:c9:d3:e6:3d:0a:f2:75:06:cb:92:4c:c6:7b:9b:
e7:4c:b1:80:52:d5:35:83:5c:07:5f:5f:6b:02:b2:
0c:cf:7c:39:71:1c:a0:75:7e:87:fa:8d:1b:08:cc:
a1:95:2e:76:c4:e4:85:a2:02:c3:b9:10:71:4b:fa:
58:85:50:fe:3f:37:1a:a5:67:68:b2:8e:fb:37:35:
a8:d9:18:ce:4f:e9:9d:fa:52:db:e1:c8:b3:90:d2:
04:6c:c0:e2:79:2c:9b:2a:79:db:97:88:fd:cf:e2:
66:08:91:71:27:eb:83:1e:86:4e:8b:11:25:ba:94:
1f:46:bb:5c:4d:3e:d8:0b:68:c6:e4:15:8c:6e:b8:
7a:3a:ae:df:20:e0:67:a0:dc:cd:48:8a:e0:3b:ac:
34:ca:86:3e:73:d7:86:0f:b8:62:9b:c8:3d:f9:65:
09:d2:31:1a:d6:4e:ee:e9:ce:67:cc:36:c6:52:f2:
2a:66:69:90:f7:e8:77:99:70:fd:74:28:91:92:63:
c6:b1:ac:5f:7e:87:fa:c7:2d:89:17:3e:69:b5:75:
b9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:C1:0D:78:86:8E:8B:48:E1:62:99:F3:D2:F5:0B:C1:76:BF:38:EC
X509v3 Authority Key Identifier:
keyid:49:72:2A:0C:A8:BB:C9:4D:48:A5:CB:48:CC:C9:2E:FE:F8:45:A7:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SXIqDKi7yU1IpctIzMku_vhFp-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ec5208-f695-4bdb-9bb2-e18fa658055a/1/SXIqDKi7yU1IpctIzMku_vhFp-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:16:a8:f4:12:26:89:52:5a:71:45:e0:22:dc:4a:2d:96:ba:
2d:0f:be:15:1a:83:8e:83:ed:c0:d1:b2:c2:52:42:47:fa:4a:
79:0d:77:4f:ec:98:70:16:41:ae:9f:5c:0c:fa:e3:03:f2:af:
01:5b:f6:bb:bc:35:9a:a8:5c:52:63:21:0f:ce:23:fc:41:2c:
ba:52:57:8b:34:f0:e1:b8:60:5d:22:10:ad:c5:08:88:36:3c:
fe:96:ad:e9:d7:e8:1e:ef:ac:67:61:57:1c:8e:80:15:24:30:
ee:40:30:bb:96:d1:d5:5a:05:95:88:c6:3f:47:c2:4d:20:89:
82:0b:46:66:bc:f2:3e:bb:d1:85:93:ed:96:19:bc:9f:87:78:
e5:f0:0a:20:2d:e2:0d:71:3d:e7:a8:93:41:bc:6f:1d:25:6b:
1d:ce:8e:5f:08:b8:cb:2c:e5:84:42:39:cb:07:b9:ce:55:f0:
86:17:be:e9:df:15:55:00:5e:e1:43:85:d8:fe:d5:e3:6e:01:
eb:11:df:d7:ba:b4:06:f2:e6:2f:8d:42:20:da:09:f8:1a:07:
24:e7:7e:d7:a3:72:6f:7e:a3:4b:9f:4e:de:25:9a:53:b7:51:
fe:37:87:4a:cb:9a:29:1c:ff:ac:b4:1d:b8:36:65:d4:55:d0:
1d:2a:70:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:04:11 2026 by rpki-client