Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: kQ7D9BPdzNu4SaZM7Eb5PgHDoGzUbWPdU45KZvKfR+4=
Subject key identifier: FE:5C:EF:D2:E9:6D:08:4F:A5:4D:76:57:6F:A4:C7:44:57:E7:2F:7E
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 019E89B5C46D67ABAA903E0BF23CF605BB62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 1944
Signing time: Tue 02 Jun 2026 19:00:51 +0000
Manifest this update: Tue 02 Jun 2026 19:00:51 +0000
Manifest next update: Wed 03 Jun 2026 19:00:51 +0000
Files and hashes: 1: 2oiBg97yJfcku7AZ1xtBGexIP9I.roa (hash: ZkJc6vel+43QcyypXskCAIYVCyw1+ndC8Q1LjIoI34g=)
2: GWcwAEGL8dWNpctIdaHLmJt2F-M.roa (hash: icoIbE+7HxZrn6cToVlzjrHBi9MeFRezSthDAS8pPcs=)
3: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: U0EAbjfxGoEbQTp9M6CSfCzZkuxgUtVDnTRjsQYcCj8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 15:55:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:89:b5:c4:6d:67:ab:aa:90:3e:0b:f2:3c:f6:05:bb:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: Jun 2 19:00:51 2026 GMT
Not After : Jun 3 19:00:51 2026 GMT
Subject: CN=fe5cefd2e96d084fa54d76576fa4c74457e72f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5f:30:c7:44:3b:c0:61:8f:18:df:92:fc:bf:
ed:a1:12:1d:3e:a5:df:0b:c7:c1:c9:64:b3:52:06:
c7:c4:80:dc:6a:b1:df:1c:de:f6:e1:95:ab:46:4a:
f9:9b:70:a5:f7:a6:d8:02:e4:f3:f1:38:a3:8b:19:
c9:2c:b9:9e:b4:58:88:a8:7f:2a:61:66:1e:78:2b:
21:21:3c:3f:3f:a5:db:05:77:86:38:43:d6:96:af:
8a:fb:42:cf:1d:46:47:c7:71:ad:27:af:a3:0b:1e:
48:90:16:b1:30:b0:6a:5c:55:95:6a:31:c1:b4:17:
3f:02:ca:fd:35:ba:83:d6:aa:ef:fb:56:91:aa:9a:
13:61:13:e8:47:6e:2f:d1:ec:8a:e8:ac:dc:27:80:
04:e1:52:c9:2c:76:4b:80:37:05:4c:20:db:ce:0a:
31:f2:5c:d5:32:f6:0e:9b:2b:35:bd:0f:9a:7f:be:
60:df:e7:7e:35:0c:83:e2:6c:15:af:7c:ff:34:95:
10:9b:b9:ab:c6:eb:14:df:9c:f2:2e:aa:58:ca:34:
21:ce:c0:f9:71:b0:a2:5c:a3:aa:bd:25:d2:a9:c2:
c4:28:fa:a3:7f:45:6b:79:d0:76:f9:bb:e6:b5:de:
fc:fb:ce:51:72:4b:c6:bf:46:27:7f:1f:3d:74:bb:
2c:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:5C:EF:D2:E9:6D:08:4F:A5:4D:76:57:6F:A4:C7:44:57:E7:2F:7E
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:81:81:49:e4:1d:7d:87:e1:db:6b:d6:a1:cf:b5:1f:da:0b:
0d:8d:f4:d3:83:bb:3f:1b:f2:95:27:5b:15:fd:f0:23:09:68:
5a:93:ea:fc:d2:e1:28:78:41:69:fb:40:97:31:fa:b9:d3:ec:
9b:3e:93:1a:26:5d:04:4c:43:43:55:d0:2a:2b:03:3f:03:03:
fa:d9:ff:48:48:d9:03:4d:f6:80:27:1f:06:c2:ae:29:7b:69:
79:8b:31:0b:19:c8:87:71:7e:7a:c8:3b:d4:b5:0b:cc:c8:41:
bf:4b:50:84:18:8b:60:e6:00:f1:92:5d:86:98:74:81:3f:99:
98:b1:6e:55:3a:8f:7b:2d:83:be:07:59:7b:06:d5:cb:12:6f:
e0:ac:0d:17:d8:f9:fd:88:2d:d0:ad:03:ac:90:eb:ab:ab:2c:
c8:b7:c8:88:ab:e4:f0:70:aa:e5:17:1e:19:90:4f:91:3b:2b:
ff:d9:9f:bd:dc:6d:80:76:fc:4d:52:a6:73:db:27:b2:ca:e4:
73:b2:d7:05:b4:62:30:a9:91:c3:02:66:14:3b:6f:1e:39:18:
2e:a7:97:85:36:33:23:09:1d:d5:73:7c:76:c9:b9:2f:33:9a:
31:4f:ed:b5:c4:b3:ff:6e:6e:27:8b:4d:25:59:46:01:f1:e4:
07:dc:a2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 22:05:31 2026 by rpki-client