Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
File: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft (raw, json)
Hash identifier: 3EFXVqQOWaAlaP/X7C5nQfW+00YS5xYxveBEfHAkxCc=
Subject key identifier: DD:AE:86:C4:45:51:C5:2C:10:E4:CC:15:73:2C:93:C0:23:41:9D:A0
Authority key identifier: 5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
Certificate issuer: /CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Certificate serial: 019E205ACED1C21237513532C1794A1A6C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
Manifest number: 011F
Signing time: Wed 13 May 2026 08:01:22 +0000
Manifest this update: Wed 13 May 2026 08:01:22 +0000
Manifest next update: Thu 14 May 2026 08:01:22 +0000
Files and hashes: 1: XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl (hash: nQQTaNCfmxJGEtx+JwrvQCcfZDfLUJSCLROCxxjn9H0=)
2: sILmqECvPUOwIkOHOOhRTao7v74.roa (hash: llFUAC/mu2lwxUsJ40bzdjW3ddWww0AROSXO714SrqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:ce:d1:c2:12:37:51:35:32:c1:79:4a:1a:6c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d33d7fb967a5b5c203f434c00fff12534e61769
Validity
Not Before: May 13 08:01:22 2026 GMT
Not After : May 14 08:01:22 2026 GMT
Subject: CN=ddae86c44551c52c10e4cc15732c93c023419da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:fe:02:78:27:ef:c9:23:26:08:c1:36:34:
f5:15:30:60:2a:a5:3c:47:e5:17:b4:fb:3e:46:20:
c0:aa:82:c0:2f:df:b1:3d:b4:bc:bd:7f:6c:6b:48:
d7:9c:ca:ac:8e:69:e5:d6:d2:92:62:a5:99:36:fe:
10:2f:ba:13:d7:b6:b1:5a:0f:67:77:ed:3f:81:58:
79:bb:64:dd:94:f3:85:52:9e:d7:2d:3c:71:da:87:
9d:7a:24:d1:bb:c4:66:94:57:e4:8a:9f:d1:a7:26:
07:30:42:03:55:55:94:67:36:3d:4a:63:b0:3d:99:
a5:70:58:70:13:0d:15:f4:10:e8:4a:8b:14:de:4a:
72:04:34:18:c7:e4:2e:90:ff:1c:11:cb:33:f6:28:
6c:60:33:5d:b5:5b:af:66:fc:65:1e:9f:bd:13:07:
83:ec:7f:bf:27:3d:df:88:dc:9c:af:19:51:32:53:
a7:d2:24:3c:cb:b4:63:8f:34:55:27:26:a6:d0:08:
06:09:82:09:bc:2e:3b:d4:b1:40:e2:c5:e2:d8:26:
a3:bb:fb:da:80:c8:2f:fd:d8:2c:88:3a:eb:06:1a:
b5:02:3d:80:26:3c:8e:3d:0d:3e:18:6a:2e:26:33:
97:66:04:74:c7:58:ed:ca:97:38:4d:44:1d:d8:2a:
89:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:AE:86:C4:45:51:C5:2C:10:E4:CC:15:73:2C:93:C0:23:41:9D:A0
X509v3 Authority Key Identifier:
keyid:5D:33:D7:FB:96:7A:5B:5C:20:3F:43:4C:00:FF:F1:25:34:E6:17:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/404338-2acb-428f-98d1-18bda53c5842/1/XTPX-5Z6W1wgP0NMAP_xJTTmF2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:a7:13:d7:56:83:7d:ae:82:72:f1:89:09:6e:b0:21:69:df:
4d:dd:bd:1c:a7:93:1a:11:2c:bc:04:29:66:d3:65:7c:af:f8:
68:ba:5a:af:65:0c:57:25:a1:49:53:96:0e:09:d8:e0:a6:2c:
b2:39:49:66:22:4c:fd:da:79:ef:ca:12:88:de:4e:e4:57:aa:
6f:5a:1d:75:bc:dc:dc:2f:c7:2c:14:59:42:62:d6:9b:bf:a0:
cb:19:f2:67:4f:30:74:6b:46:43:69:61:3a:9f:ab:f9:9e:e2:
06:30:8b:d0:73:1d:39:bc:0b:42:1e:da:39:d8:64:2f:4a:41:
d6:e3:61:d4:e5:17:18:c3:98:58:18:46:61:3d:af:1b:f1:c3:
fc:68:6b:60:d2:89:32:8e:3f:40:c7:cb:47:6a:0e:07:64:03:
72:9e:09:2a:19:3b:64:b2:c2:81:35:d8:cb:58:ea:a1:7f:76:
b1:2e:0c:06:d5:c1:d7:20:41:49:fc:ad:a5:59:88:1f:2c:1f:
2a:52:b7:d7:4a:cc:7d:d6:13:a6:ab:af:4b:73:8a:8b:c7:76:
ea:84:ea:44:04:cc:84:6b:48:f4:62:59:b6:56:46:87:d9:76:
72:a6:34:36:7a:29:5e:76:80:1e:7a:49:c1:24:ea:2c:49:30:
a9:66:32:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:01:23 2026 by rpki-client