Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
File: X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft (raw, json)
Hash identifier: NDogIQ2kAoz8KkjnQV3qh+m8OQWWpkLW7UN5vM6INeU=
Subject key identifier: 43:37:F1:EB:4F:E8:FE:E2:39:57:20:88:70:A3:65:17:B2:1F:79:DA
Authority key identifier: 5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
Certificate issuer: /CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Certificate serial: 019EBB1085647369DD0A4CA8432174CA0801
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
Manifest number: 1957
Signing time: Fri 12 Jun 2026 09:01:22 +0000
Manifest this update: Fri 12 Jun 2026 09:01:22 +0000
Manifest next update: Sat 13 Jun 2026 09:01:22 +0000
Files and hashes: 1: X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl (hash: tnvVwjd9H4NSubPiXL/9wN8WZkPGdXOv3tLFZQy4bKs=)
2: YboTsZW5E_LquEoNeH4f-DKai2A.roa (hash: rVnU6oaQsX3x5ymp+Ryvp8mswyZTbG+O1Im+gcRa5NQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 07:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:10:85:64:73:69:dd:0a:4c:a8:43:21:74:ca:08:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f83c3976cf00e42cbed53924c4a86556bd70142
Validity
Not Before: Jun 12 09:01:22 2026 GMT
Not After : Jun 13 09:01:22 2026 GMT
Subject: CN=4337f1eb4fe8fee23957208870a36517b21f79da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:21:ce:25:19:50:50:8e:42:c8:7c:86:3a:
fc:52:d8:59:bd:ec:bf:c6:1c:e1:aa:0f:21:4b:ec:
2f:8d:b5:79:0f:64:7b:fc:b8:67:c7:f0:36:f6:27:
03:d8:cd:e6:f1:26:ca:ec:a9:fa:06:ec:16:ba:66:
18:ed:27:1f:65:30:be:80:84:54:53:c2:ed:2c:75:
0f:2d:cb:58:d9:f6:ae:e2:1c:25:d4:3a:eb:74:d4:
4d:e2:79:bb:f6:80:73:52:ef:de:91:ae:ce:ef:eb:
87:bd:cb:97:86:c2:2e:7f:b5:f1:cb:83:49:a6:fb:
fc:85:06:9e:0c:eb:e3:34:bd:c5:3a:93:c0:91:0c:
f2:07:af:50:39:40:5c:74:e8:78:7f:5b:ea:43:ed:
e6:05:1c:ac:de:e0:b5:d8:d3:55:c6:55:40:2e:91:
7f:ee:5b:5d:ba:c5:f4:07:ab:4a:a6:3d:42:9f:57:
64:88:8e:8c:a6:f6:e9:76:de:8d:97:b2:91:21:d2:
5a:e7:d9:1f:05:e0:8c:91:83:2f:d0:9a:a8:99:b7:
8c:7c:85:66:a8:39:c6:cf:b2:d6:fc:b1:db:15:a4:
70:1a:61:d1:30:e2:da:28:02:f4:2e:cc:9d:a0:99:
de:29:ab:2a:ee:33:55:98:a9:f0:92:1b:4e:70:36:
02:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:37:F1:EB:4F:E8:FE:E2:39:57:20:88:70:A3:65:17:B2:1F:79:DA
X509v3 Authority Key Identifier:
keyid:5F:83:C3:97:6C:F0:0E:42:CB:ED:53:92:4C:4A:86:55:6B:D7:01:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X4PDl2zwDkLL7VOSTEqGVWvXAUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/bc59ad-acca-41d2-baa1-9c3effaf2af2/1/X4PDl2zwDkLL7VOSTEqGVWvXAUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:29:ca:7d:c2:fd:60:d5:00:aa:f6:93:83:14:47:18:65:fa:
6e:96:90:6e:1b:4c:9c:7e:8e:1c:3d:53:71:63:b8:64:a6:ea:
54:dd:69:27:93:c7:58:fd:f7:66:45:53:0b:64:cf:97:fc:83:
0d:f1:9d:db:b1:05:91:a7:be:db:30:a1:11:35:e7:95:1a:eb:
79:ae:1b:c2:1d:91:18:4a:a5:dc:0b:95:27:d2:f9:06:a9:14:
59:58:d4:0b:b0:e3:4c:88:ef:2f:70:85:5d:c6:65:7d:81:5c:
37:28:fe:57:ac:aa:76:67:8b:f4:e5:c4:a5:16:78:36:3f:ed:
94:82:ff:14:5a:81:ff:8c:0f:d4:47:8f:4d:a2:2f:b9:a3:c2:
bb:9b:95:f8:12:ab:55:66:6d:dd:96:70:0f:af:b8:13:7a:73:
2b:f5:05:b8:c3:68:36:0b:3f:a9:19:e8:6c:cb:8a:ad:9e:f8:
f5:a1:54:18:10:7a:59:c9:25:a1:21:61:7d:24:a8:58:11:63:
d1:26:51:5d:b0:5b:f1:64:f9:a3:8f:dd:9e:a3:aa:24:d4:66:
11:16:f8:dd:40:d9:56:10:f4:9a:04:9f:fb:38:19:2a:98:2c:
c4:44:97:5c:25:66:8b:06:5f:59:b7:c4:b8:0b:d2:7f:b0:e5:
f2:40:b3:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 12:05:30 2026 by rpki-client