Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: K9dBtPihWXHth79SG/MvAjzkjV8fGCWc88ZLNGvmT5Q=
Subject key identifier: D4:21:94:EF:D2:71:33:47:6D:AF:71:D7:70:22:15:42:CE:2F:B1:BF
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 019EFA9432532FC9C38A8C72465A0656B30F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 1097
Signing time: Wed 24 Jun 2026 17:01:16 +0000
Manifest this update: Wed 24 Jun 2026 17:01:16 +0000
Manifest next update: Thu 25 Jun 2026 17:01:16 +0000
Files and hashes: 1: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: rvkbOGU74SQeaBl8TePaMeYN5OEOG1Z0s1nvKiVW17o=)
2: nbiO0Qsuka11ZNMxAFy9dEINXys.roa (hash: NaboMvIQcJu7trkWGRw22aXFbkdnEJpMvSjIpYA2/ik=)
3: qTb1hfW2cZsJLmGnL2cnlmiyFfY.roa (hash: hklYadmGWp1kEGK+jtsPBwTIyJolTP2I0OScsQI8ZQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:94:32:53:2f:c9:c3:8a:8c:72:46:5a:06:56:b3:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: Jun 24 17:01:16 2026 GMT
Not After : Jun 25 17:01:16 2026 GMT
Subject: CN=d42194efd27133476daf71d770221542ce2fb1bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:55:6b:ce:fe:ba:8a:03:38:12:14:4d:78:5b:
5c:df:d7:8e:2c:85:a9:9b:f1:68:88:74:9f:c7:d2:
d0:e1:b9:43:ef:b8:b0:5f:a9:28:d7:6f:9a:7f:f7:
be:e8:58:f4:8a:57:c4:04:4d:1f:6a:e6:c1:01:ac:
18:a1:89:eb:e8:c6:f1:ea:99:ec:8a:f4:42:66:7d:
36:3c:3c:23:a9:d2:07:0e:a7:78:45:37:66:3f:d8:
17:95:7b:e5:00:6d:fe:ad:6d:d2:4c:61:6d:7c:52:
40:11:94:df:e4:fe:62:90:e4:74:cf:8e:1a:da:de:
80:cd:4a:36:c5:9c:98:14:69:7f:8c:bd:7a:13:01:
6b:62:0e:45:e7:05:5e:cf:8a:50:59:de:9d:1c:88:
3d:30:1b:f0:13:73:73:47:69:dd:43:c8:6b:dc:da:
bd:cb:bd:5a:64:d9:a5:2d:85:fe:98:ce:19:c0:a9:
a7:89:16:6a:20:c6:bd:9d:05:78:e3:7e:2a:2a:b5:
27:29:6b:e9:2e:1b:55:57:1c:f1:81:89:cf:f9:ad:
71:25:54:76:cb:ef:ec:84:1d:b5:fe:6d:82:9c:99:
b3:2e:05:6e:19:fa:c2:11:1b:27:77:d2:42:c9:15:
7f:8b:5e:fd:f2:be:97:94:60:10:35:28:5d:5e:e4:
10:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:21:94:EF:D2:71:33:47:6D:AF:71:D7:70:22:15:42:CE:2F:B1:BF
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:32:61:fc:ea:5c:98:6d:db:22:05:30:70:9d:d9:9b:3f:73:
e9:18:d2:67:b8:26:f5:5c:27:7d:61:92:67:29:44:f6:b1:75:
aa:69:60:4f:1f:20:eb:d8:73:70:03:62:57:0c:ba:85:78:aa:
09:4d:90:25:70:24:d8:52:10:2e:c9:cb:3c:20:34:a1:c0:f9:
22:c3:b2:46:74:44:5b:63:ac:08:90:cf:fb:51:05:0a:57:67:
ee:c5:fb:90:b2:51:33:7c:82:c3:e8:bd:9a:47:84:fd:63:52:
c9:02:01:72:c1:45:8d:b6:08:a8:60:2e:94:82:9f:47:0c:5d:
4f:ed:e0:24:25:0d:f6:04:38:7d:fe:67:24:7c:12:c5:52:1f:
7d:a3:25:37:63:d4:f1:7f:db:b3:cb:3b:d0:5d:c8:ff:7d:e5:
e3:90:71:6b:73:7b:dc:b1:80:ef:31:01:4f:63:21:b6:7d:32:
e8:a5:31:89:65:6e:97:ce:a0:0a:d0:c5:69:da:0f:95:28:27:
af:c0:fd:4b:41:d2:e1:5a:b6:2d:f9:11:aa:6e:07:e2:2f:86:
a8:a5:a5:9e:ba:6a:61:59:86:c5:e2:eb:cd:5a:55:01:7e:83:
2d:c7:03:51:58:31:fc:da:b7:37:b2:ce:c4:4b:ff:70:77:85:
3c:30:0d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:16:55 2026 by rpki-client