Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
File: xmJhwznF7fjYxIPwjka4SAqAXvE.mft (raw, json)
Hash identifier: lRkRzyYsaqYRSPr6dLi6G4MwEESPBxFje7hGQvvgTCw=
Subject key identifier: 0A:33:B9:AC:00:7D:BF:59:C6:34:2C:64:FE:33:4F:C3:E8:E0:54:2C
Authority key identifier: C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
Certificate issuer: /CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Certificate serial: 019F12D3EFB5AE38FB1C29354E831C51F5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
Manifest number: 18C1
Signing time: Mon 29 Jun 2026 10:01:47 +0000
Manifest this update: Mon 29 Jun 2026 10:01:47 +0000
Manifest next update: Tue 30 Jun 2026 10:01:47 +0000
Files and hashes: 1: GkysysiUBXozBtdhxp6l182WpJ8.roa (hash: VR1FnjecjyRiwX08EOHPvLrD5A0SMs3OVYweJtUa454=)
2: xmJhwznF7fjYxIPwjka4SAqAXvE.crl (hash: mqpeIFeud8vT9OX1to3R/cVjd8Nw1VoqRHjTj2I2ztc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:d3:ef:b5:ae:38:fb:1c:29:35:4e:83:1c:51:f5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66261c339c5edf8d8c483f08e46b8480a805ef1
Validity
Not Before: Jun 29 10:01:47 2026 GMT
Not After : Jun 30 10:01:47 2026 GMT
Subject: CN=0a33b9ac007dbf59c6342c64fe334fc3e8e0542c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:19:28:c8:ff:2d:01:66:41:b4:15:57:b6:e6:
74:17:17:71:1d:80:f5:dd:4e:bf:9b:35:f7:0d:df:
8e:6d:3a:6b:b9:e7:67:33:e8:72:93:7b:ed:1c:87:
e9:1a:cb:c7:06:96:d2:c9:d9:07:32:ed:e4:89:29:
cb:b8:9a:f7:80:62:4e:90:09:23:87:57:e0:4f:b2:
29:54:cd:c8:d1:95:ae:63:c3:a3:09:67:71:d7:e2:
ae:0d:68:6c:81:79:29:c5:36:ae:a1:e6:88:15:57:
d2:48:01:91:48:fe:8e:dd:54:13:c6:f8:25:6f:b7:
2a:4e:5e:88:5a:33:be:51:14:e3:3b:e3:49:10:15:
e9:bd:d0:66:58:ff:06:06:ab:33:7f:55:3e:a0:e3:
d5:c9:c5:0c:48:ab:14:ee:f4:0f:74:5a:01:da:7f:
67:21:2c:ae:f0:1b:cd:6c:ea:87:97:25:6f:8c:a9:
c8:80:79:14:1f:fb:d4:91:4e:45:0d:62:be:e2:5b:
3a:37:35:5c:ed:d2:a0:cb:2e:ea:51:2a:10:4d:63:
07:4c:53:64:08:b7:4a:08:97:b2:d1:6d:25:32:e1:
de:d7:47:5b:03:b7:34:36:27:c8:4a:11:dc:2a:3e:
ba:01:2f:ed:b9:f0:8e:ab:d2:6d:3e:61:56:b7:29:
86:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:33:B9:AC:00:7D:BF:59:C6:34:2C:64:FE:33:4F:C3:E8:E0:54:2C
X509v3 Authority Key Identifier:
keyid:C6:62:61:C3:39:C5:ED:F8:D8:C4:83:F0:8E:46:B8:48:0A:80:5E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJhwznF7fjYxIPwjka4SAqAXvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/525952-7afb-443d-af0a-77c3e1c8f6de/1/xmJhwznF7fjYxIPwjka4SAqAXvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:18:5a:e2:2f:a8:3b:83:3c:97:50:36:e8:f1:18:20:f8:86:
6e:77:ea:88:0d:36:0b:ed:1a:96:93:0e:22:6f:88:7f:7e:fa:
19:3e:94:31:62:66:3d:6f:df:7a:6e:d1:64:88:e8:de:f1:40:
6f:0c:3c:6c:8e:5b:19:cf:17:eb:2a:ff:a7:1a:ab:b8:a2:b3:
ef:5a:fe:a8:56:b4:36:6d:b6:f5:e9:0a:13:2a:68:e8:d7:c5:
ef:40:bc:c6:8c:9c:b4:d3:79:45:ba:87:f4:3f:19:f3:cf:89:
a3:68:44:bd:84:88:ac:61:6d:14:ca:e3:ee:39:46:7a:45:6f:
29:e8:d5:8d:85:e3:2f:f3:85:76:94:c2:33:a9:b5:86:b1:65:
c6:51:e8:b8:19:19:32:71:d2:26:88:f4:e5:61:a6:74:3e:96:
33:fc:8c:56:13:9b:1c:61:91:c4:39:d3:62:75:33:31:5d:1b:
8e:75:85:92:97:81:7d:ff:6f:a6:94:69:cc:3f:e4:d4:42:2a:
bd:5e:97:06:1e:f6:ab:5a:bb:f8:6c:28:16:4a:a1:e6:6f:76:
a3:d3:a9:f6:95:f9:ac:86:97:b9:2d:cc:37:fc:93:85:5d:93:
69:7e:12:f8:b9:a6:d2:9b:18:31:d3:fb:bf:21:0a:ec:a9:e0:
ef:18:3c:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:42:37 2026 by rpki-client