Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
File: xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft (raw, json)
Hash identifier: SUsBd+XMDH/8F/h+07dIGEUVMnVfvzDYuiwRYlGreoI=
Subject key identifier: 6F:41:E8:46:D0:67:8F:4C:F1:56:5E:AC:F4:F4:20:72:22:DF:31:E7
Authority key identifier: C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
Certificate issuer: /CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Certificate serial: 019E20233B561C56E96C29FFEB362AF73FEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
Manifest number: 0622
Signing time: Wed 13 May 2026 07:00:39 +0000
Manifest this update: Wed 13 May 2026 07:00:39 +0000
Manifest next update: Thu 14 May 2026 07:00:39 +0000
Files and hashes: 1: tOUQl2J5Wpm8LcDuYGUnej7OiFY.roa (hash: 3SzovpialpEoSK1tVIj0K+EFB6CyFsxOHbtKDkoQSb8=)
2: xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl (hash: ESUEYS+OQmuw36BML5fo+Nx1Ny3Br3LE0d1y0r7F7S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:3b:56:1c:56:e9:6c:29:ff:eb:36:2a:f7:3f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d573724cb1c095b9b61b2df05ee3fc1a8716d
Validity
Not Before: May 13 07:00:39 2026 GMT
Not After : May 14 07:00:39 2026 GMT
Subject: CN=6f41e846d0678f4cf1565eacf4f4207222df31e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:0e:2b:25:f2:29:78:7d:f0:db:8b:08:3f:3c:
6d:8f:be:aa:5a:1d:75:0a:12:7d:81:2e:60:b3:ec:
54:83:3e:43:5e:1a:b4:18:de:7b:35:2d:ef:69:65:
71:c0:39:d7:2d:eb:15:e8:63:e7:d4:4d:63:85:74:
fb:61:82:1e:ef:1b:5f:bb:f4:49:bb:e2:35:1d:78:
5f:a5:03:06:dc:63:6a:e2:d0:85:89:d0:34:f7:aa:
ea:8c:fa:4f:87:0a:4e:9b:c1:02:07:cc:58:20:1b:
4d:80:6b:1e:8b:e3:76:e0:4a:fd:71:0b:f5:b4:22:
9d:9c:27:fa:53:8e:35:56:63:73:4c:76:89:5f:3b:
b5:cf:30:11:7a:55:f7:d9:19:d9:15:79:b0:3f:d7:
4c:1d:df:a0:f8:0d:c7:64:0f:f8:78:fe:d5:30:d1:
30:7c:60:e4:ff:f5:3a:57:50:df:76:10:38:6d:34:
2c:3b:49:38:3e:7f:ad:2b:27:b6:9e:6c:0a:64:fd:
f3:8d:7b:81:8a:13:8d:a0:cc:b0:83:ce:e0:d2:6a:
e0:a2:47:de:cb:30:7c:40:c9:0f:5f:8c:78:56:12:
9b:36:a5:b4:36:4e:3b:d1:e3:f6:10:f5:f8:e0:5a:
fb:de:20:2e:a0:f7:bc:35:15:8b:59:66:a4:c8:a5:
63:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:41:E8:46:D0:67:8F:4C:F1:56:5E:AC:F4:F4:20:72:22:DF:31:E7
X509v3 Authority Key Identifier:
keyid:C6:2D:57:37:24:CB:1C:09:5B:9B:61:B2:DF:05:EE:3F:C1:A8:71:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi1XNyTLHAlbm2Gy3wXuP8GocW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f2cf11-bf14-4204-af88-f67ecc585bb8/1/xi1XNyTLHAlbm2Gy3wXuP8GocW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:6e:45:c6:af:d2:c4:44:14:9b:d8:3c:76:f6:88:7d:c0:25:
60:f4:53:aa:23:37:d0:a6:df:3c:26:e9:54:a9:ce:0d:b0:19:
66:74:e7:c6:6c:4d:e4:4c:c2:ed:5a:08:83:b5:3e:d3:5e:4a:
73:16:a1:17:be:0f:fc:f9:e7:ea:f9:c3:4b:f7:b4:b6:e8:1e:
47:1d:b2:81:ac:ff:ef:3e:05:b6:fe:11:6c:5c:0b:57:7a:01:
e0:85:b6:4a:bc:41:a4:b0:46:2b:e0:78:c7:d8:6d:d2:21:98:
f1:19:29:dd:a1:19:11:95:02:00:ed:17:24:46:e6:00:62:4d:
43:d7:5c:8a:ce:8f:53:30:23:1d:27:d5:c0:c1:ee:fa:fb:74:
64:91:89:ea:df:16:0a:91:ed:92:03:8c:60:52:cc:03:94:9a:
d7:29:5a:e7:0a:c0:89:a9:7f:56:3b:10:13:b1:0a:64:d1:3f:
68:04:d1:ce:c3:c1:16:a7:d7:a9:1e:a8:db:35:34:32:d7:56:
dc:13:ed:1e:a8:8f:e8:5a:b2:5c:e4:de:5d:65:82:3b:a0:ad:
a6:5e:98:80:30:dd:b5:53:11:11:55:7b:9d:ad:b5:17:ad:e4:
20:6b:8d:a3:b0:be:25:7f:e2:f9:ca:86:d2:57:f9:a2:0e:3e:
6a:6a:c2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:14:42 2026 by rpki-client