Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
File: xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft (raw, json)
Hash identifier: ttQx/ZuT3sjwSboxQnwX1cElsvdPHcXV02T48K+cZwM=
Subject key identifier: DB:31:F8:30:69:B6:D5:8F:30:90:E5:75:3E:4D:C8:5A:DE:BD:78:8F
Authority key identifier: C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
Certificate issuer: /CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Certificate serial: 019E9213B78EEA4A413329B88CA1A4D886FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
Manifest number: 1944
Signing time: Thu 04 Jun 2026 10:00:26 +0000
Manifest this update: Thu 04 Jun 2026 10:00:26 +0000
Manifest next update: Fri 05 Jun 2026 10:00:26 +0000
Files and hashes: 1: Z4BDlr57O_FweazPHma0rDQN-Eg.roa (hash: RRUvm/U5FkAyaYrRTEjgZo8457PWupRX0eiUbSuUq0U=)
2: xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl (hash: 8/+jCpm98wEpWzQCzAyVBw5Q8qQjAPCIXW7MjXky6DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 07:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:92:13:b7:8e:ea:4a:41:33:29:b8:8c:a1:a4:d8:86:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c63d96aefc548024fa36fa5ce804a48bf7ca3a40
Validity
Not Before: Jun 4 10:00:26 2026 GMT
Not After : Jun 5 10:00:26 2026 GMT
Subject: CN=db31f83069b6d58f3090e5753e4dc85adebd788f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:ec:46:f2:19:e0:d5:cf:f8:ba:6a:27:fa:
d4:ac:88:f4:80:39:81:b7:26:d4:96:01:ca:4a:39:
fa:8b:a9:e7:ff:dc:5d:33:c7:51:55:b1:ea:cd:f3:
b1:c5:db:f3:db:d9:92:f7:e0:84:14:79:7d:5b:d0:
d8:66:a8:91:60:90:13:51:2c:85:9c:5c:7e:5c:ef:
55:2f:99:24:ba:bf:01:20:fb:d7:51:fa:8c:55:99:
6a:e1:75:72:05:19:03:4b:c8:ce:d5:50:d3:51:2a:
0d:67:30:59:91:21:03:0e:5b:64:1d:b3:f2:64:30:
41:5e:aa:a6:c3:7b:16:4b:61:ca:1d:ce:9e:fc:d5:
ff:89:17:26:73:ac:fd:06:2b:0d:45:df:65:69:cc:
f4:2d:3c:ee:2c:62:62:3a:44:8b:14:44:3d:93:e2:
bb:29:f6:a8:64:a5:46:6d:df:5c:9a:06:65:d7:58:
6f:78:39:39:d6:69:44:0f:45:c3:ae:35:37:9d:7c:
6a:66:be:30:95:14:66:3a:d2:de:8a:09:ac:0e:d8:
a0:2d:36:c1:26:ca:d9:2e:ff:d5:16:4a:8b:e0:48:
0a:d2:ef:83:cd:3b:63:b1:6a:a9:71:11:34:16:a0:
fb:52:81:ba:c6:13:ca:d3:a9:ba:88:4e:9b:67:11:
e1:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:31:F8:30:69:B6:D5:8F:30:90:E5:75:3E:4D:C8:5A:DE:BD:78:8F
X509v3 Authority Key Identifier:
keyid:C6:3D:96:AE:FC:54:80:24:FA:36:FA:5C:E8:04:A4:8B:F7:CA:3A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xj2WrvxUgCT6Nvpc6ASki_fKOkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/edd6b8-abbd-4b81-9707-971d28d43c14/1/xj2WrvxUgCT6Nvpc6ASki_fKOkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:2b:4e:1d:9b:74:a4:3c:71:c2:1d:69:fc:3d:23:bb:1c:8f:
eb:1d:9b:81:d0:fd:57:e9:7a:41:8d:4b:94:4c:44:82:87:db:
b4:d6:3a:fb:66:56:a0:1d:70:3a:50:10:e1:e3:7e:bc:78:0c:
61:af:36:8e:20:18:b8:81:14:c2:dc:e7:8f:bc:8a:30:a0:c1:
d1:da:19:aa:d1:b7:c7:be:f7:f9:8e:64:9f:f5:81:e9:57:28:
39:90:c3:21:c8:89:c0:ae:02:04:ac:d0:6e:d1:b0:61:bb:d4:
eb:f5:2b:f0:11:8a:fc:a5:10:ff:7d:ae:21:81:ec:24:31:fc:
61:cf:fa:c6:3b:f4:15:18:06:c6:48:0f:64:92:ad:a8:d2:2a:
98:33:dc:78:c3:4a:bc:92:96:aa:1e:e4:50:ed:5c:a7:e6:f6:
6e:67:24:97:f4:16:25:82:76:60:08:09:e7:3f:9d:9e:19:36:
bb:6b:33:20:88:79:f1:6a:8c:b2:33:dc:ef:66:ae:02:2a:b9:
63:f2:ba:7d:0f:3f:6e:6e:28:1f:90:f4:06:5c:5a:7b:a7:2c:
21:e1:b2:3f:c8:9c:6d:97:79:20:51:3e:06:38:73:7d:25:84:
ff:46:c4:d7:90:a5:4b:99:8e:d4:cb:dd:e0:a2:0f:dd:47:10:
81:ee:c3:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:25 2026 by rpki-client