Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
File: xDt0aX74sFcJ99OU0f4pUeidXFU.mft (raw, json)
Hash identifier: aLgX9LwE6hmu8bw1/H0OwQtzq+zEkbAecmeBzp4sWmc=
Subject key identifier: 1E:69:0A:C0:34:83:75:AA:FC:FC:0F:D4:60:2E:03:AD:94:AE:7A:9E
Authority key identifier: C4:3B:74:69:7E:F8:B0:57:09:F7:D3:94:D1:FE:29:51:E8:9D:5C:55
Certificate issuer: /CN=c43b74697ef8b05709f7d394d1fe2951e89d5c55
Certificate serial: 019E97A81A6B8C4BB6733934385A4D009B30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
Manifest number: 6F
Signing time: Fri 05 Jun 2026 12:00:36 +0000
Manifest this update: Fri 05 Jun 2026 12:00:36 +0000
Manifest next update: Sat 06 Jun 2026 12:00:36 +0000
Files and hashes: 1: cdK-ddxQ6uw5AVK3VADEiG5b7xU.roa (hash: kzD188j7ogf+ogrfaYMQ1BaJogJz8brxVXslH2Z+iS8=)
2: xDt0aX74sFcJ99OU0f4pUeidXFU.crl (hash: ytu0cGeoMXKZVpaBTr3KRLAdnL8k71AgDpclVwg3pjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:97:a8:1a:6b:8c:4b:b6:73:39:34:38:5a:4d:00:9b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43b74697ef8b05709f7d394d1fe2951e89d5c55
Validity
Not Before: Jun 5 12:00:36 2026 GMT
Not After : Jun 6 12:00:36 2026 GMT
Subject: CN=1e690ac0348375aafcfc0fd4602e03ad94ae7a9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:92:ff:86:b2:2a:ba:da:ec:fe:3e:4e:4c:a4:
fe:9c:2c:77:5c:c9:27:1b:0b:a9:57:d7:f0:bb:e8:
f8:5c:a2:4e:3a:8a:01:e9:df:51:85:5a:96:d2:57:
aa:99:b4:a0:b4:67:c9:d6:4e:28:fa:54:18:07:99:
56:76:74:51:d3:6d:66:84:2d:7b:d6:f7:81:1a:97:
23:d9:37:6d:3e:6b:ea:1c:89:dd:31:10:68:3c:0d:
80:e2:b7:cd:f4:2a:9a:2b:7b:8d:3b:31:4f:2a:b3:
e0:ea:65:8e:6d:4a:55:cf:1b:ac:8b:6b:31:00:01:
25:3a:5b:7d:ed:90:33:36:d4:25:76:95:88:a2:88:
44:d8:7e:46:2b:37:9b:e3:d0:19:23:86:ec:a4:87:
5d:90:99:b7:e6:53:28:d2:04:ea:86:ce:12:37:48:
6a:df:17:ca:61:7c:13:79:df:3e:d3:a7:6a:1b:f4:
83:f9:c3:17:7f:56:64:ed:99:f0:76:d7:ee:6f:c9:
eb:0e:e3:9c:fd:ec:08:62:34:4f:80:8a:f7:d5:59:
e9:87:01:6d:0b:8b:75:bb:f7:49:1b:6f:8a:87:0a:
8a:6d:f8:3e:21:50:89:ce:04:87:ec:68:d7:7b:fb:
94:14:d1:2b:93:c5:ac:78:49:d9:73:5f:b8:1a:49:
85:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:69:0A:C0:34:83:75:AA:FC:FC:0F:D4:60:2E:03:AD:94:AE:7A:9E
X509v3 Authority Key Identifier:
keyid:C4:3B:74:69:7E:F8:B0:57:09:F7:D3:94:D1:FE:29:51:E8:9D:5C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:64:89:cd:bf:29:ac:57:b0:6e:31:c1:84:ed:3e:b1:ad:39:
4a:3e:4d:5f:0a:29:16:70:e6:a5:3f:18:9f:cc:71:48:35:33:
83:21:0a:a1:14:1b:d4:60:15:45:2a:1c:cb:50:6e:be:45:b7:
50:c6:3d:ff:55:73:94:52:d5:30:45:6c:35:71:38:3c:eb:5c:
8a:f2:42:77:dd:2a:23:70:75:ee:6d:16:ca:61:94:92:3c:e9:
c8:10:07:d9:f8:70:ab:4d:c8:be:18:3a:31:23:50:9d:fa:92:
77:ed:17:3a:47:fd:11:12:37:0a:f8:92:5c:c4:b3:fb:b7:9d:
1b:21:8a:19:38:ad:87:81:bd:97:06:88:76:82:17:d5:b8:c5:
6a:7b:4f:55:b9:6c:53:26:cd:34:f3:1a:f8:b7:87:84:bb:87:
0e:83:83:f1:ae:57:ef:ca:7b:0b:4c:ed:0f:56:26:2a:fd:80:
98:d9:0c:53:75:af:73:a4:92:2c:78:37:b6:c0:32:5a:13:08:
bd:78:13:f4:eb:c6:31:0c:c3:bc:8a:79:d6:7c:93:14:14:29:
71:d4:7f:e1:1b:b7:6d:81:6c:a2:aa:1e:99:56:ca:b0:02:22:
7d:85:82:95:b8:03:45:ed:08:5e:70:63:1f:99:61:b4:9b:99:
73:69:dd:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 5 19:51:34 2026 by rpki-client