Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
File: xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json)
Hash identifier: op74IuvGkB3ETF0LFmwr+jEJTAUyxfiJmnh4k0bH0Rw=
Subject key identifier: 6F:BE:C7:1A:22:C1:CB:3A:2E:B7:F2:85:A9:D4:11:CA:C4:4C:26:8E
Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Certificate serial: 019E2926D6AD8F5E80A4A620C925A82F03EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
Manifest number: 1848
Signing time: Fri 15 May 2026 01:01:11 +0000
Manifest this update: Fri 15 May 2026 01:01:11 +0000
Manifest next update: Sat 16 May 2026 01:01:11 +0000
Files and hashes: 1: GkysysiUBXozBtdhxp6l182WpJ8.roa (hash: VR1FnjecjyRiwX08EOHPvLrD5A0SMs3OVYweJtUa454=)
2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: XCECQlUyl7kSBHxeuDZ7XtyVx8u4wmeqG543ALPpuqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:d6:ad:8f:5e:80:a4:a6:20:c9:25:a8:2f:03:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Validity
Not Before: May 15 01:01:11 2026 GMT
Not After : May 16 01:01:11 2026 GMT
Subject: CN=6fbec71a22c1cb3a2eb7f285a9d411cac44c268e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:38:18:5a:f9:2f:80:2d:19:d5:79:bc:42:23:
64:59:9f:31:7d:43:b5:9e:9f:19:4b:ba:be:e8:ce:
e9:6b:bb:ac:67:d1:aa:66:ea:66:a0:4e:d1:55:35:
19:4a:53:d4:c1:ef:6d:61:bd:1a:92:0f:14:46:43:
23:f5:45:8f:9e:ac:99:d7:2b:cb:86:e3:f1:bf:72:
22:15:ad:1c:4a:04:82:ed:60:c7:61:63:59:8a:00:
da:38:52:13:2e:06:ef:f6:8f:06:d1:2a:b7:5a:a0:
27:c3:7d:3b:6a:93:db:65:f7:9c:33:18:7f:56:81:
53:3b:58:82:dc:03:54:4a:d3:fa:77:be:30:bd:86:
a2:29:c5:b4:66:e1:05:7e:f6:c0:21:05:d2:8e:f4:
7f:a7:a0:8c:b0:3e:84:29:72:d5:28:9f:b6:11:b8:
c8:93:74:67:59:ed:03:b0:27:70:87:90:35:8a:96:
07:3f:26:2a:53:6e:db:00:80:b2:f9:b0:e6:03:8a:
4e:e4:e4:83:4e:3d:be:44:52:22:96:9a:0d:19:de:
b8:3d:81:b9:ee:61:13:bb:9f:a7:09:01:84:bf:89:
3b:38:2d:1e:7b:98:2b:2c:c1:e7:08:13:69:ff:e1:
3a:fd:9a:be:9a:2c:ec:aa:c7:0c:57:bd:86:21:6b:
92:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:BE:C7:1A:22:C1:CB:3A:2E:B7:F2:85:A9:D4:11:CA:C4:4C:26:8E
X509v3 Authority Key Identifier:
keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:27:b6:d0:7d:6b:cc:12:e5:88:65:a0:de:fd:6b:82:6c:59:
dd:63:49:a2:84:e2:32:d9:2a:2e:d6:43:2c:c0:40:bd:55:65:
dd:83:6d:a4:6b:18:ff:ad:f6:87:2f:f0:f5:39:85:2b:d5:11:
c2:39:2b:95:3a:08:02:2a:8e:e7:d0:56:00:8b:c3:b4:85:5d:
6c:ab:d7:25:cb:53:c4:da:f8:fe:97:2f:3f:05:4e:9f:d8:f0:
70:2f:74:e5:26:9c:e9:d2:77:c9:f3:46:13:de:4a:fa:c9:65:
a5:94:00:74:61:1d:40:71:ea:b6:32:fa:4a:c0:27:f2:2f:cb:
da:c0:06:20:65:fc:d3:98:6a:60:67:65:c0:a2:c4:14:dd:a2:
9f:72:52:b1:e1:5a:9e:c1:4c:a0:95:75:42:ac:90:4a:f4:aa:
bd:27:90:95:5c:dc:5f:69:dc:b0:52:d9:ee:ef:68:19:f0:dd:
58:55:7b:9d:f7:ec:5c:fd:b4:d8:69:2a:c9:42:7f:74:c9:61:
6f:28:d5:49:65:ab:4c:ad:06:d0:cf:14:d7:c2:a0:e8:d2:fe:
cb:42:86:af:6e:40:c7:18:5f:b6:45:78:f7:a4:a1:89:8b:7c:
71:64:fb:02:38:6d:a1:86:9b:fd:f9:5f:b7:b8:f4:86:2d:76:
2e:b2:c4:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:55:20 2026 by rpki-client