Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: fsvAbYe7Z+fkhoYPyJadnVEn67bpIJU5EA78wgDJocs=
Subject key identifier: EC:C5:B8:53:BD:42:FE:C4:C4:7E:73:FA:2D:F9:54:14:EA:57:E8:C8
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 019F92EDC647ECEC28AEDD9F3E3FC3C703BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 06E2
Signing time: Fri 24 Jul 2026 07:01:23 +0000
Manifest this update: Fri 24 Jul 2026 07:01:23 +0000
Manifest next update: Sat 25 Jul 2026 07:01:23 +0000
Files and hashes: 1: tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa (hash: 3SzovpialpEoSK1tVIj0K+EFB6CyFsxOHbtKDkoQSb8=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: wnt2WAwS/FSxdABWcF/wIrX4if4+djjnpxye7WLG9Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:c6:47:ec:ec:28:ae:dd:9f:3e:3f:c3:c7:03:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: Jul 24 07:01:23 2026 GMT
Not After : Jul 25 07:01:23 2026 GMT
Subject: CN=ecc5b853bd42fec4c47e73fa2df95414ea57e8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5e:f6:2b:b4:4c:7d:8b:25:1d:17:d6:00:10:
74:8e:9b:c9:ad:65:d8:6c:2c:60:f6:84:cd:75:65:
64:c6:7b:09:c3:eb:92:3c:e6:4a:75:4d:fc:08:be:
23:d3:01:d4:1f:fe:08:37:fe:77:4b:cf:96:b4:a2:
6e:a7:e7:ad:2e:3d:c6:92:12:1e:95:36:25:ba:6f:
43:31:f5:16:7f:cc:5a:ca:38:c1:9e:87:08:b8:54:
d1:c3:0f:76:42:3c:9b:ed:39:cc:55:9c:e3:b5:a4:
2f:90:3c:b4:46:50:7a:b4:06:f2:87:0e:f8:5c:a6:
3a:ae:f4:ae:12:2a:8f:94:80:b1:be:67:87:90:84:
0e:38:f3:bc:22:5c:d0:42:42:e6:43:0f:73:2c:80:
84:8f:e0:5f:3e:39:6b:ee:8f:66:2f:56:7f:a7:50:
c1:97:ed:db:0d:25:0e:b7:7c:c5:e3:fe:2a:bf:5b:
97:58:1c:01:dd:ab:d2:57:bd:ec:89:53:b0:59:d4:
08:2f:5a:a1:00:c5:f5:be:99:d1:23:95:fa:bb:30:
38:3d:91:22:3e:3c:d1:32:fd:0e:c8:ba:17:51:07:
53:09:97:86:39:11:c4:3c:09:4d:56:e7:3e:36:03:
2b:7d:cb:86:45:4d:b3:09:51:1b:00:78:e8:30:67:
0f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C5:B8:53:BD:42:FE:C4:C4:7E:73:FA:2D:F9:54:14:EA:57:E8:C8
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:ea:ff:7a:a0:34:3b:41:9c:cb:18:60:a4:d9:61:c0:de:23:
cd:10:ab:00:84:16:66:22:53:23:48:3e:34:a9:6f:18:1f:80:
5c:c6:a7:d4:05:43:62:ba:dd:9a:c6:ea:98:b5:b8:f2:e4:ca:
63:e5:40:7a:fb:d1:82:0f:13:83:f9:c3:d7:4c:82:4c:4d:bf:
36:3d:f4:bd:11:75:ea:3a:e1:5d:86:ec:b7:3a:66:46:66:bb:
7c:fa:bc:67:4b:e9:4a:85:3c:bc:6f:b4:e1:2f:b5:90:63:29:
d1:40:98:a1:79:24:ca:6f:3d:7d:49:d3:f9:71:ef:45:6e:1f:
36:b7:61:10:16:c6:3e:46:8c:a8:be:59:a6:94:65:b9:49:e0:
f0:45:fb:e2:48:94:50:b2:8e:87:ea:17:4a:5c:a6:bf:eb:56:
17:3b:4c:3b:94:ed:ae:c4:3a:b2:2b:0d:23:65:65:b7:19:59:
4e:b2:09:c5:29:04:f5:ec:f0:0d:ef:60:cb:b3:68:7b:89:3a:
13:d5:26:51:18:8f:b0:aa:33:55:a4:82:c3:a4:34:3c:e3:e6:
4a:51:84:08:dc:46:7e:7b:85:a9:bd:b4:fa:e8:62:7f:3a:1a:
14:49:cc:8f:0b:0f:3e:e4:d4:2f:e4:92:61:59:44:d5:47:ee:
f3:9f:8e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:08:38 2026 by rpki-client