Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
File: xe6WP4Kg-whm1CVTszeFl9nz72g.mft (raw, json)
Hash identifier: uPkeERFn5/Wyr0UaJW9cny5eJ2BtBOM3Nbmk+Nicsfs=
Subject key identifier: 2A:F3:C7:C7:86:6E:38:13:88:EC:DB:33:D7:C9:B7:49:A7:05:8D:3D
Authority key identifier: C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
Certificate issuer: /CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Certificate serial: 019F1265CC51B04CE8B99880F06E1B130B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
Manifest number: 152B
Signing time: Mon 29 Jun 2026 08:01:29 +0000
Manifest this update: Mon 29 Jun 2026 08:01:29 +0000
Manifest next update: Tue 30 Jun 2026 08:01:29 +0000
Files and hashes: 1: Cw_CJ5OIoHGbk_LBH69lh1CZovM.roa (hash: yuy/Yr+PAF0sScRAiUSYVsMjWEF5R7acxEyN+jKmOa4=)
2: GUYAfSyAe_7KoSF2zNniTR86G3o.asa (hash: QJFS4MThTD8AoeTU4o5zhEg8FJRAThUcCKNx9GenoTY=)
3: e1vkUB4hW3aB_edwhYTI6Nlcy0A.roa (hash: izbr6DXAEGnVX5rmj+RODLmoS4n5mXvbk+24OOXQV7s=)
4: xe6WP4Kg-whm1CVTszeFl9nz72g.crl (hash: 5KFZ45uFhu0Dg9cX3OJZCavitOfARX/MIwtOrtTkEj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:cc:51:b0:4c:e8:b9:98:80:f0:6e:1b:13:0b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ee963f82a0fb0866d42553b3378597d9f3ef68
Validity
Not Before: Jun 29 08:01:29 2026 GMT
Not After : Jun 30 08:01:29 2026 GMT
Subject: CN=2af3c7c7866e381388ecdb33d7c9b749a7058d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f2:03:42:80:28:49:9d:b2:2a:07:60:f3:91:
07:00:bc:4e:66:3f:5f:72:b1:aa:8f:68:7d:34:09:
1d:5b:ea:8f:e7:db:13:58:7c:79:30:74:bf:66:12:
8a:62:db:36:d3:81:c8:4f:47:5d:95:86:58:d4:37:
03:1d:c0:ea:f3:0f:7a:5c:34:39:e9:69:c4:ce:4b:
0a:5d:78:27:88:c6:61:99:1d:91:b5:ae:2b:46:98:
e1:73:4a:36:f4:b2:99:e2:e1:c9:06:ce:58:2c:3a:
41:12:0f:c0:cb:40:e6:7f:68:b3:3c:a6:3b:63:31:
cf:b0:4a:4a:f9:1e:b7:8a:45:f5:0d:9f:23:c9:ad:
62:5d:ae:8c:91:4d:8f:06:fa:95:79:6d:f5:11:96:
65:1e:0c:16:1e:b3:77:c0:26:9e:40:3e:de:80:44:
f5:f9:b1:bd:71:6f:26:61:db:40:87:46:0e:44:fa:
81:d9:2f:13:c6:44:44:03:c0:a1:83:25:82:b5:f0:
04:df:e0:98:66:b2:2f:5d:a9:46:f1:77:95:54:cd:
df:26:d6:57:6c:a8:57:25:61:62:b0:93:f1:04:49:
30:48:32:67:87:40:26:e4:8e:36:a2:bb:86:e9:7f:
20:0a:b6:9e:15:0a:97:fc:26:5f:55:b6:f2:8f:2a:
41:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F3:C7:C7:86:6E:38:13:88:EC:DB:33:D7:C9:B7:49:A7:05:8D:3D
X509v3 Authority Key Identifier:
keyid:C5:EE:96:3F:82:A0:FB:08:66:D4:25:53:B3:37:85:97:D9:F3:EF:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xe6WP4Kg-whm1CVTszeFl9nz72g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/83d246-740d-4b01-9020-db5aa577c3af/1/xe6WP4Kg-whm1CVTszeFl9nz72g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0d:a7:0a:dd:10:98:03:fc:5e:25:7e:90:68:ed:fd:89:ac:
06:26:4c:5d:e0:04:d5:c5:a6:22:e7:31:9d:06:be:01:4e:6b:
75:76:4c:06:9a:b0:b1:e4:13:ce:2b:50:ec:7a:34:18:10:0f:
a6:4b:9a:e1:6d:d0:4e:3a:ba:f7:96:74:c4:f8:19:94:f2:df:
b5:cd:17:21:c1:0b:85:7b:1f:31:aa:71:1d:5b:8d:19:01:72:
ec:7d:69:54:b5:94:1b:58:9d:24:a9:6b:84:4b:72:50:cf:61:
ae:d0:b2:b9:67:35:ca:60:68:52:a9:92:89:98:36:08:1e:79:
03:69:91:a2:1a:70:83:d3:d6:4f:64:67:a5:ef:79:79:75:8f:
50:07:0c:4a:98:2f:bb:b9:c4:1a:a0:1a:f5:63:30:8b:4c:78:
90:6b:72:bc:d9:5f:77:84:d7:7b:18:65:00:7b:a2:b8:6e:86:
47:47:41:78:34:78:e0:ee:06:46:e7:6f:50:8b:c8:0b:08:e1:
85:aa:11:ef:17:d6:34:53:7f:9c:41:d9:dd:af:3c:11:2c:09:
03:31:bd:0a:ee:b8:05:85:e6:c2:31:5f:6a:88:15:38:80:bb:
03:99:f2:dd:7b:93:c5:fc:92:05:18:c8:b5:f8:ba:0c:d0:ef:
49:d5:c0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:36 2026 by rpki-client