Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
File: X6OG6XZW1kirU4GylmZBQIGwAIQ.mft (raw, json)
Hash identifier: AmTGAgrKkQ8M+oJhv28AODuJoAfihUE2+zjcmX7xJ4w=
Subject key identifier: A0:0C:04:8E:21:C0:C2:F1:DA:88:DB:BD:1D:80:D0:DB:F7:E6:29:67
Authority key identifier: 5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
Certificate issuer: /CN=5fa386e97656d648ab5381b29666414081b00084
Certificate serial: 019EB845CA36468FE3576284D483123C8EEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
Manifest number: 08DD
Signing time: Thu 11 Jun 2026 20:00:41 +0000
Manifest this update: Thu 11 Jun 2026 20:00:41 +0000
Manifest next update: Fri 12 Jun 2026 20:00:41 +0000
Files and hashes: 1: X6OG6XZW1kirU4GylmZBQIGwAIQ.crl (hash: 2EvzW8W0NlenraxNHJ2HEv8Ue1DZqTSEziJ4clDYUeU=)
2: xhYgnKDXKCLXTlxGKn83qxGD5Wk.roa (hash: 4Tr8pcApL7OMPNYK6DHiqFf/BMOwe5lvOFY1rUx8z6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:45:ca:36:46:8f:e3:57:62:84:d4:83:12:3c:8e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fa386e97656d648ab5381b29666414081b00084
Validity
Not Before: Jun 11 20:00:41 2026 GMT
Not After : Jun 12 20:00:41 2026 GMT
Subject: CN=a00c048e21c0c2f1da88dbbd1d80d0dbf7e62967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f7:e6:19:86:dc:56:70:b9:80:bf:74:0b:ae:
bc:26:a0:df:ca:6e:17:34:b1:0d:fe:70:24:99:dc:
ea:98:d8:38:ba:13:77:64:85:d9:79:c3:75:39:36:
ee:8b:02:1e:8b:9d:fa:fe:b9:71:b7:6b:58:d7:b2:
7d:90:ae:03:f1:0f:6f:7c:ed:f4:42:0d:76:0a:6b:
a6:c8:ce:f4:7d:19:0d:c7:fa:54:9d:88:da:3c:8f:
3c:1d:35:c3:6b:a1:7b:50:05:99:98:19:08:76:58:
68:cd:f9:c7:18:1d:c4:38:49:fe:28:06:98:f3:ce:
d1:c4:7a:0e:8e:14:a7:dc:2a:2b:8c:e7:66:3c:fa:
e1:c7:11:9d:18:7a:fa:b0:39:07:1c:e2:c4:94:6b:
b5:03:5c:ef:40:d3:df:21:89:f4:3c:bd:d9:08:e0:
6e:46:44:9c:d8:fe:df:60:aa:da:a6:79:6a:b2:4c:
43:61:e4:ca:f8:2f:21:b6:d5:9c:c8:a5:d3:7c:45:
88:14:6f:14:c2:0c:a4:f8:46:87:a0:1d:f0:b7:1e:
ef:3c:20:eb:f8:8d:b2:18:02:15:1c:1d:bb:56:22:
c9:a0:eb:a5:c1:ba:e6:04:3e:60:7c:5e:08:89:09:
cd:be:05:37:d9:d5:b8:45:3c:8c:50:81:f1:03:c3:
08:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0C:04:8E:21:C0:C2:F1:DA:88:DB:BD:1D:80:D0:DB:F7:E6:29:67
X509v3 Authority Key Identifier:
keyid:5F:A3:86:E9:76:56:D6:48:AB:53:81:B2:96:66:41:40:81:B0:00:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X6OG6XZW1kirU4GylmZBQIGwAIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/5505e0-2e8a-4c75-8118-950ce39a977c/1/X6OG6XZW1kirU4GylmZBQIGwAIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:97:e2:af:1e:24:61:6c:d4:f3:40:1d:04:80:5d:4d:28:c3:
0c:0d:ee:24:82:6b:db:c3:a8:79:90:f1:32:34:46:9d:9b:53:
1c:59:46:b0:9a:a7:63:0e:41:6a:a8:5a:75:4b:0b:92:fa:be:
92:0b:a1:22:2d:6e:57:7f:d1:52:a8:34:3a:38:b5:11:98:84:
14:46:9a:77:8e:72:3d:b9:83:eb:97:db:76:aa:a6:2d:9c:49:
4e:3c:bd:2d:2c:3b:bb:6b:88:2a:f0:4d:42:03:62:ea:d5:26:
9f:75:0d:12:63:61:78:c7:a1:d4:e5:b9:cc:bb:02:25:8c:22:
13:ec:6d:42:13:5c:b6:08:1e:11:c1:88:22:87:3d:54:0e:07:
0d:61:35:ce:4f:e8:de:e2:a0:6c:3a:fc:3a:c8:8a:5b:30:9d:
1f:9f:c2:dd:5f:d4:8c:52:38:50:23:24:a4:41:21:0f:89:3d:
2e:73:13:a0:7e:cd:f5:cb:3c:59:55:30:99:a0:3d:4b:af:ce:
44:62:e0:cb:23:f6:c6:3c:a0:31:a5:73:c3:a8:4a:a6:6f:bc:
e6:de:9b:8a:13:bc:15:23:93:4e:e9:88:5f:2e:f5:44:56:ce:
96:76:92:c2:86:7b:3f:02:79:d0:d2:ff:be:30:f3:8e:6b:00:
ba:a0:89:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:11:48 2026 by rpki-client