Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: gW01+Lp0ezAkldVGsrm0JRWMjb1cQjuxfeQMHzOHRKA=
Subject key identifier: AC:7E:EC:70:26:CB:B9:B2:57:F4:CF:5C:A3:D2:92:7C:B7:FA:FC:86
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 019EE820346021BE41C73AA78B7A3DB7F1B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 09BB
Signing time: Sun 21 Jun 2026 03:01:25 +0000
Manifest this update: Sun 21 Jun 2026 03:01:25 +0000
Manifest next update: Mon 22 Jun 2026 03:01:25 +0000
Files and hashes: 1: DNO1I-TkpArSeHYJmcY4l5DFhts.roa (hash: cJ58Vzw7QL+cL/8OgW9JpclMRUS3i5GfX5DaYn+9oUA=)
2: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: iul5afmTG+eDvVJ4VPrlLQQyBmyi8URcTY0ljJHiE6M=)
3: f6o8iIm7eRanj7sneg-S1UBYSw4.roa (hash: JhBDw1owZqhHCI0ApuQN1vnUlpCXAoljuxrqIpJLCVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e8:20:34:60:21:be:41:c7:3a:a7:8b:7a:3d:b7:f1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jun 21 03:01:25 2026 GMT
Not After : Jun 22 03:01:25 2026 GMT
Subject: CN=ac7eec7026cbb9b257f4cf5ca3d2927cb7fafc86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:0f:9e:80:67:9d:4b:eb:5c:dc:01:8f:c5:
af:48:e5:fd:dc:f7:4c:d7:ec:a4:db:9f:b6:43:e5:
6e:65:77:f1:94:80:66:41:b3:75:bf:bf:60:2d:8b:
4d:55:7e:3d:56:dd:c1:63:ba:c2:2e:a6:f5:ff:15:
1b:22:85:52:50:16:fe:86:94:25:da:fd:10:29:98:
87:83:13:82:8f:e7:88:e8:18:18:21:5f:7f:df:84:
cf:08:d8:1c:50:c1:ce:59:c3:a4:b8:74:fd:fe:ec:
da:d9:7b:1c:3e:a2:c7:8b:93:45:66:bf:5b:26:d0:
82:b1:76:3b:9f:e0:7c:f8:54:36:aa:3a:d9:03:48:
c3:dc:63:21:0a:30:b9:2c:5e:5b:15:26:5a:9a:7c:
33:bc:ee:26:92:84:00:e7:0a:07:9b:2d:8f:4b:0e:
6a:85:1c:fe:d1:c8:24:95:08:99:11:53:2c:e7:b6:
d0:84:65:75:cf:0b:06:34:52:87:e9:67:ba:cc:d4:
b2:98:ce:a5:1d:b3:75:8e:0a:ba:14:c3:f6:88:88:
e3:6a:87:ad:16:a9:d3:16:9f:c8:56:8c:7d:50:e0:
ba:21:ec:69:a2:90:30:bf:2d:d4:a0:44:12:f6:19:
d5:ff:9e:ab:aa:af:fd:77:4c:7d:8a:54:ba:2a:ea:
9a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7E:EC:70:26:CB:B9:B2:57:F4:CF:5C:A3:D2:92:7C:B7:FA:FC:86
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:d5:0a:cf:9b:ad:8c:2c:5b:07:e4:1e:f8:ca:ae:3f:6b:33:
73:4a:2e:e3:46:43:8b:79:ff:16:06:53:fc:64:2e:d2:1c:8e:
d7:62:4a:22:83:c3:31:52:a5:08:b1:f2:3f:d3:16:0a:ea:86:
eb:3f:91:b1:4f:50:3c:5d:b2:4d:17:24:05:82:3c:e7:f7:16:
9e:fe:7b:55:4a:e7:99:1f:bf:d5:11:7f:8f:e2:88:92:5d:11:
6d:6d:ab:06:56:09:5e:c9:4e:0a:35:bc:9c:c4:e7:3a:2e:58:
c8:96:59:5c:08:3d:3e:f1:2c:4b:11:96:bf:0a:85:b2:66:0c:
1a:fe:96:eb:69:89:0d:2b:c3:6e:24:de:07:4e:b2:94:66:d9:
25:6a:33:09:42:67:ff:7c:0c:49:e5:d4:f7:4e:b0:0f:26:57:
ed:8a:48:ab:e0:9a:a3:34:d0:b2:6c:2d:e3:d5:1b:dc:dc:30:
16:e2:33:c8:be:91:5b:60:2b:32:8a:b3:96:9d:47:ab:c8:1a:
d2:f0:a8:c6:1e:71:2e:52:61:54:38:c9:97:34:88:70:2b:37:
e2:2a:ca:a3:33:6f:cb:54:29:d9:fb:d8:11:db:63:c4:f2:98:
1b:ee:5f:88:d2:63:5b:aa:26:27:57:d5:48:e0:99:ae:88:92:
26:8f:37:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 12:20:45 2026 by rpki-client