Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
File: XfEaGA3xeZTkitMxhyz9AK2augQ.mft (raw, json)
Hash identifier: ogOOMo/lY8jSVMHrTZ7j6LIn4qVYAf6eMPkpN+S9CU8=
Subject key identifier: 2C:0A:0C:AB:ED:20:57:7A:92:F8:33:6A:D0:E8:01:ED:25:4D:3C:7E
Authority key identifier: 5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
Certificate issuer: /CN=5df11a180df17994e48ad331872cfd00ad9aba04
Certificate serial: 019E1F7F1F935E20B17B15537347E7562CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 04:01:25 +0000
Manifest this update: Wed 13 May 2026 04:01:25 +0000
Manifest next update: Thu 14 May 2026 04:01:25 +0000
Files and hashes: 1: XfEaGA3xeZTkitMxhyz9AK2augQ.crl (hash: ys+tpERC0apb40/o0alLtyYwiuW5z1i3esXhVyRYDuk=)
2: vOvUH4QL3euA8n5Zs-p3s8pu5OU.roa (hash: qqJCGshMa7lPJa7oCp0UWM6NmrUrD8W4y4uDd4fxLLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:1f:93:5e:20:b1:7b:15:53:73:47:e7:56:2c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df11a180df17994e48ad331872cfd00ad9aba04
Validity
Not Before: May 13 04:01:25 2026 GMT
Not After : May 14 04:01:25 2026 GMT
Subject: CN=2c0a0cabed20577a92f8336ad0e801ed254d3c7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:3d:0b:58:2b:f8:95:50:6f:be:69:d8:1d:fe:
09:fc:95:61:f7:f7:08:68:53:30:b0:d1:a1:61:a8:
bd:d2:2f:b6:45:60:50:e9:3a:ef:c9:8b:bb:f1:37:
e1:c8:68:22:1e:ad:49:09:97:d9:b4:52:84:c8:6c:
06:87:99:c4:b2:02:ac:c1:ed:5e:7c:a6:bc:78:e4:
1c:95:f0:9c:5b:b4:af:c1:83:20:74:b4:8f:af:ab:
9b:e1:7c:30:53:a3:4f:52:58:db:86:49:94:49:48:
f7:3e:2f:52:62:92:ef:96:19:60:47:bb:e7:e7:11:
35:b9:d8:09:34:62:46:7e:10:4b:fc:1d:85:53:bf:
5c:a6:d7:04:72:34:e7:c8:9c:c0:5b:ff:76:b9:7d:
b2:f2:25:85:63:17:bd:b0:57:41:27:a7:84:12:68:
e8:5f:79:3b:d7:be:46:e5:d0:64:b2:ca:b0:a3:97:
d7:0d:39:24:01:53:b3:bf:67:36:7f:d4:cb:d7:ed:
77:b9:7d:16:3b:e1:b2:74:f4:40:83:95:6a:6f:a4:
ca:03:96:c1:19:a3:e9:ac:fa:ab:7e:03:4d:a7:64:
a3:2e:d7:01:30:92:2f:a5:52:6a:99:f9:79:3f:26:
ad:20:98:b5:65:cc:4d:2e:89:0b:02:e1:65:fd:03:
f1:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0A:0C:AB:ED:20:57:7A:92:F8:33:6A:D0:E8:01:ED:25:4D:3C:7E
X509v3 Authority Key Identifier:
keyid:5D:F1:1A:18:0D:F1:79:94:E4:8A:D3:31:87:2C:FD:00:AD:9A:BA:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfEaGA3xeZTkitMxhyz9AK2augQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/73d145-eb99-4bd8-a817-6bce7799cbea/1/XfEaGA3xeZTkitMxhyz9AK2augQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:f1:61:df:9b:26:51:f1:a4:fe:d0:f7:0b:ea:78:b8:e8:42:
83:61:84:54:70:29:01:40:04:21:e2:50:00:d4:d5:88:c1:46:
36:b9:08:b1:83:ef:15:0a:ff:ab:f2:0a:58:ff:8e:28:78:14:
7d:17:af:f0:8f:0b:ad:49:67:2c:01:fe:f5:9e:4c:12:62:2f:
48:46:04:6e:15:b5:ec:01:bb:22:68:19:db:5f:64:2b:5c:b1:
b5:d4:8c:f4:3c:a0:78:a9:2e:cd:8a:94:bd:d6:2c:d7:f2:06:
43:76:49:89:ae:84:0a:59:da:af:ea:3e:05:08:8d:8e:64:31:
66:d7:ff:e6:15:7d:6d:87:d4:48:b1:a9:ab:36:06:11:19:73:
2a:b7:1c:0e:fa:e1:63:2d:a9:ba:49:66:31:5a:c9:7a:35:d3:
64:0a:eb:21:c7:e0:58:b6:b9:cc:e4:cd:05:46:7a:69:de:0b:
f4:1a:70:92:a6:1a:7d:ef:bc:24:4a:cf:50:63:30:cc:c3:4d:
60:38:99:e6:43:5e:9d:44:ac:91:ec:df:ad:08:5c:f4:d0:4e:
59:ea:05:a9:4b:5d:24:4c:d9:0b:72:db:31:d2:6b:a5:0e:fd:
59:ae:c5:ca:06:ba:5a:09:2b:a4:2e:21:4d:5d:1c:51:34:0a:
7d:71:7b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:12:58 2026 by rpki-client