Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
File: x6TS9okT6s5sn1CSvcfdIPV09Dg.mft (raw, json)
Hash identifier: tItogCftUusLBe2Qk9e8eVXUMV+b8iO2yqht73rXjt0=
Subject key identifier: B6:DE:CF:05:A7:57:AA:59:12:6F:20:82:FF:4D:63:41:F7:57:36:93
Authority key identifier: C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
Certificate issuer: /CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Certificate serial: 019E20C85F005BDD430B4B55BFDB56E968FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
Manifest number: 190E
Signing time: Wed 13 May 2026 10:01:02 +0000
Manifest this update: Wed 13 May 2026 10:01:02 +0000
Manifest next update: Thu 14 May 2026 10:01:02 +0000
Files and hashes: 1: FXTyPwjMGAiU5KxW_Bfbg2AROHw.roa (hash: OnE+aJgFklXNXWETHHDMbnfVlcK0uF/bBVveHl9Em7A=)
2: T3lGsdRYO3Jiv8YeumY1-URxH8k.roa (hash: 2iZU0Zg9KB5iXER8e3UtbINmEwCtWsu/Q8hRWGFKAwI=)
3: x6TS9okT6s5sn1CSvcfdIPV09Dg.crl (hash: 0CZh1f5Ij9Xzskx/yjHGKs0jkvwnJCjVXWAYVPP4F6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:5f:00:5b:dd:43:0b:4b:55:bf:db:56:e9:68:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7a4d2f68913eace6c9f5092bdc7dd20f574f438
Validity
Not Before: May 13 10:01:02 2026 GMT
Not After : May 14 10:01:02 2026 GMT
Subject: CN=b6decf05a757aa59126f2082ff4d6341f7573693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6c:fc:bb:5b:68:67:bc:67:56:77:2f:5f:e4:
1b:51:ae:5b:33:24:eb:75:bc:2d:5f:23:57:64:91:
87:fe:43:38:85:02:d8:21:88:cd:1e:c0:cb:8a:8a:
89:33:b4:44:38:10:c2:2d:ac:dc:bd:ef:49:d4:a1:
97:58:de:de:54:d0:27:28:4d:0d:a0:d4:5a:c8:91:
ec:c7:d2:8d:e7:91:a2:1b:ed:d0:cc:17:34:db:76:
5f:1a:37:10:3b:39:89:5e:bc:3c:d0:44:f7:f5:ce:
50:c2:6a:9d:4e:b8:ba:93:e2:a3:13:08:82:56:8d:
ce:48:45:bb:6e:73:05:b7:ac:97:a5:d5:90:10:e2:
ec:62:53:c7:2f:6e:f4:f8:95:25:3c:e8:89:6f:31:
f1:e7:27:29:97:bc:30:6b:19:4d:70:81:45:7d:78:
99:68:1b:e5:92:cd:f9:27:f1:87:a5:8f:cf:8f:05:
a9:5f:92:90:82:40:4c:b4:10:d4:2c:56:1e:cb:ae:
d5:8c:ce:f5:0d:4a:0d:c4:44:c0:a9:d8:7e:fc:d9:
31:7d:94:fd:fd:78:db:b3:87:35:58:a2:13:a7:a4:
3d:e6:da:5d:5e:02:19:5c:ec:42:d5:5b:33:23:37:
d8:21:1c:54:1e:7e:19:e8:14:50:d5:d2:df:a9:94:
43:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:DE:CF:05:A7:57:AA:59:12:6F:20:82:FF:4D:63:41:F7:57:36:93
X509v3 Authority Key Identifier:
keyid:C7:A4:D2:F6:89:13:EA:CE:6C:9F:50:92:BD:C7:DD:20:F5:74:F4:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6TS9okT6s5sn1CSvcfdIPV09Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/f03ca1-726b-4de9-b419-f9a1bbc36845/1/x6TS9okT6s5sn1CSvcfdIPV09Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cc:a0:e1:bb:fe:b2:9b:40:7d:3e:06:2f:b5:9c:f2:c1:f5:
82:33:b8:18:08:8a:84:42:08:f6:99:1a:b9:a1:21:03:88:28:
a9:43:84:1e:a0:1c:c8:01:35:f0:b5:c4:96:be:8b:0e:0c:01:
f8:3a:af:c9:2a:da:5c:4b:e0:16:b2:92:71:28:8e:a3:bd:2a:
70:63:38:dd:34:7b:6d:4d:f5:0b:38:d5:3e:8b:37:22:bf:b6:
3b:4f:60:ae:65:a9:2f:65:72:34:35:c3:6b:80:9e:36:91:2f:
21:03:ef:2d:92:43:1e:05:54:fb:c1:b9:61:45:5b:dd:2e:72:
dc:32:d0:43:74:ee:bd:c6:ba:b1:30:76:d5:a7:c3:8b:9f:e6:
dd:95:a0:12:48:21:30:46:80:cc:96:c7:aa:78:2a:5a:e3:50:
93:9a:31:e1:93:ef:cc:48:1a:51:73:19:fc:82:c2:31:03:bb:
c9:37:6f:21:8b:3c:53:77:8b:f7:92:fe:6a:12:ec:f3:ec:ac:
1c:91:7d:56:f5:69:99:81:2f:c3:a6:09:8f:1f:5c:0e:f7:44:
97:2b:b2:0c:78:f9:1b:df:2c:a2:71:d5:02:67:0c:a5:d3:a0:
3e:b1:6a:a6:88:cf:e4:91:e7:ab:88:8c:08:6c:14:9c:72:a4:
b0:42:de:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:01:24 2026 by rpki-client