Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: FHoERKk8LvQQJVocgQ1q3dZ5H0KTvDMffcsCM4kQ7Ws=
Subject key identifier: 31:93:B4:EA:78:47:0B:47:5B:8E:B5:FC:F6:01:9A:57:2A:9D:1E:65
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 019E1DFEA954D3E88BE7F380AD1168B459AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 13BA
Signing time: Tue 12 May 2026 21:01:29 +0000
Manifest this update: Tue 12 May 2026 21:01:29 +0000
Manifest next update: Wed 13 May 2026 21:01:29 +0000
Files and hashes: 1: 02JNfVWYOVA2OBy17TDgR9y7do8.roa (hash: x5I0ROnfJh237cohKlOyZemzpgBQnX/4IqZy8ejhw3c=)
2: 5VBhehblaiOfuUShpivHuAhNqvU.roa (hash: SLWl0V7yJEtG44gZ1JVp2uNJOky4M2j+U4CHDGRdNIM=)
3: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: fMNGcqBV0PeSOJEWOmzagPEOfqtfUzlD75PpnOl0zNM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:a9:54:d3:e8:8b:e7:f3:80:ad:11:68:b4:59:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: May 12 21:01:29 2026 GMT
Not After : May 13 21:01:29 2026 GMT
Subject: CN=3193b4ea78470b475b8eb5fcf6019a572a9d1e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:7c:03:fd:97:cc:71:c8:ff:e0:4e:3f:2f:
41:3b:3d:eb:32:73:3f:51:4f:c8:18:8b:c6:7f:37:
8b:35:72:0f:7c:0e:d7:24:2b:2e:6e:fc:ce:7a:18:
71:1f:51:c2:76:de:5e:b5:5f:10:5c:95:38:ac:6e:
98:33:30:10:e8:03:1b:a2:1e:e4:8e:83:dd:39:b9:
35:2b:b8:76:ec:f6:32:9c:d4:dc:62:06:33:97:93:
d3:9e:83:eb:06:a2:52:3b:1a:f4:fc:5d:16:ef:09:
0e:1c:51:c1:d2:b6:97:06:b8:eb:44:b1:7a:d6:32:
b5:c6:5f:68:43:d8:87:3f:3e:c4:d2:eb:7c:86:6f:
f0:e4:13:b9:90:29:9d:a3:a0:ea:3f:3b:40:ee:9b:
b5:d1:2a:5e:e9:79:12:3e:5c:90:26:3d:52:f5:f7:
44:0e:3f:69:f6:74:98:8d:36:73:8e:79:0e:e2:20:
5d:80:cc:6d:15:b2:32:9a:31:0b:d4:f5:a8:0d:1f:
ce:8d:af:f9:c5:fa:99:b3:df:55:f0:12:19:06:a9:
57:34:ed:67:6b:5d:eb:75:c5:25:de:63:f6:b7:b0:
35:72:bb:44:e3:ae:f6:09:36:8f:2d:dd:b3:cc:07:
2c:d7:66:e0:3c:39:f4:76:91:1a:f8:a8:ae:b8:02:
be:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:93:B4:EA:78:47:0B:47:5B:8E:B5:FC:F6:01:9A:57:2A:9D:1E:65
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:8d:a6:74:bc:21:df:0d:76:12:1c:95:f6:86:17:21:c8:f6:
d2:40:32:61:e6:0d:a1:7d:5c:b0:00:89:4a:c1:8b:7a:31:bb:
d4:76:87:55:bf:ae:91:97:27:cc:c0:06:82:89:57:d6:2f:8a:
95:20:88:d2:46:7e:9d:27:2f:e4:28:2b:d2:c4:bd:e9:f4:0d:
c3:be:e2:14:e7:ce:c7:3c:fc:2a:5f:b3:b8:20:61:f5:fb:f0:
22:db:ae:bb:36:bc:24:ae:50:c1:67:e1:57:28:0e:50:cd:aa:
1d:07:a8:1c:fa:84:aa:f8:90:bf:ae:04:ad:65:87:90:d7:35:
f4:b4:93:61:e3:47:56:b0:80:a2:2e:dc:84:db:f2:a7:19:83:
7c:ce:b9:d4:f6:0b:a8:cf:31:b6:b0:b0:25:db:38:0b:05:53:
89:65:b3:b7:3c:42:09:7b:bd:06:d0:d4:84:58:71:39:4e:45:
77:64:3e:ce:1e:9a:37:07:19:48:fb:9d:e5:cd:f3:fe:e0:d3:
0a:23:5d:23:e9:5b:d3:da:2f:5d:0b:34:87:9e:82:12:ea:3c:
f3:b3:41:32:b4:3d:fc:f7:33:fd:cf:4f:ea:95:03:16:a4:e5:
0f:85:c7:1a:40:de:3a:bd:be:99:70:ad:1f:41:31:3e:a1:a3:
08:93:bf:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:11:35 2026 by rpki-client