Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
File: XEt3fWoBdf67oFtItHzfCmuJ1_s.mft (raw, json)
Hash identifier: 4zcTtzMTMReyV53bOX4w2rsOt0f0WmbiTtwSbG5upzs=
Subject key identifier: 6D:FF:4E:DD:68:87:72:14:8B:94:21:4D:E5:8E:51:F2:2F:EB:39:20
Authority key identifier: 5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
Certificate issuer: /CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Certificate serial: 019E1CB4E0BD8FA022FD124AF01A41F959AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
Manifest number: 1904
Signing time: Tue 12 May 2026 15:01:16 +0000
Manifest this update: Tue 12 May 2026 15:01:16 +0000
Manifest next update: Wed 13 May 2026 15:01:16 +0000
Files and hashes: 1: Rjq8qMoUVTv8QuPKAfl_sw6bDWA.roa (hash: Ykk34DqNXHApsE9nxxAgQ38pONoyVUESYWMP39kBFzk=)
2: XEt3fWoBdf67oFtItHzfCmuJ1_s.crl (hash: fZaffT/ILygoNZumND3Voqf5UWaH0W1bvjOkquQ86pU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:e0:bd:8f:a0:22:fd:12:4a:f0:1a:41:f9:59:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c4b777d6a0175febba05b48b47cdf0a6b89d7fb
Validity
Not Before: May 12 15:01:16 2026 GMT
Not After : May 13 15:01:16 2026 GMT
Subject: CN=6dff4edd688772148b94214de58e51f22feb3920
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:85:69:09:a0:a8:fc:21:44:64:9c:93:7d:
f2:40:85:cc:be:eb:d0:17:64:5f:38:f0:c9:f8:66:
51:ac:71:ba:b2:bd:a5:e2:da:17:1c:f5:fe:00:12:
12:61:85:ed:5e:c2:51:82:81:0a:0f:64:ac:a7:c0:
20:fd:e2:b5:cd:10:79:ec:27:38:fd:90:3a:18:39:
c8:4a:b1:a2:41:44:17:18:ea:37:54:60:92:ab:cd:
29:1a:e7:5d:ef:36:0b:a8:ed:c1:a5:3f:6d:56:80:
e2:f2:08:38:82:cf:20:13:f2:56:53:4d:ee:2e:00:
d0:22:f3:74:cd:ed:70:7d:3e:4a:83:59:b1:da:26:
c4:99:24:2d:b6:06:98:b4:36:e1:74:cc:f3:e5:ca:
78:df:a1:cb:89:da:1a:e1:64:fe:38:dc:54:bb:c6:
7d:e1:39:55:d5:5c:c6:19:f6:21:ab:15:57:d7:ff:
e8:c2:2d:6a:94:52:41:b8:e9:ae:ff:d2:e5:d3:07:
48:b6:74:87:b4:fa:64:57:38:87:73:fe:9c:8f:19:
56:1a:f8:39:0b:3e:7e:63:05:34:4f:38:dc:5c:c5:
da:d8:5f:92:3a:61:1a:f6:44:6d:64:3a:da:f8:68:
dc:f3:84:28:cc:00:58:19:b4:d1:f2:10:18:61:31:
16:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:FF:4E:DD:68:87:72:14:8B:94:21:4D:E5:8E:51:F2:2F:EB:39:20
X509v3 Authority Key Identifier:
keyid:5C:4B:77:7D:6A:01:75:FE:BB:A0:5B:48:B4:7C:DF:0A:6B:89:D7:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XEt3fWoBdf67oFtItHzfCmuJ1_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3490f8-7e9b-4e8e-b8ed-9d3e59da5ad1/1/XEt3fWoBdf67oFtItHzfCmuJ1_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:8d:95:3b:19:ad:f5:b5:cf:71:8b:b1:27:52:bf:93:6c:89:
4d:bb:ae:b1:3e:8a:60:e5:08:40:aa:b6:a8:10:1c:ef:04:6d:
b6:9e:9d:e0:37:5b:bf:84:c4:23:2e:f4:88:d8:11:74:bd:59:
1f:23:01:d6:05:2b:b3:62:92:e1:50:7e:d3:50:bf:a9:72:d0:
65:58:19:dc:e0:1d:07:41:81:c2:5e:64:30:d2:c9:c1:53:fa:
53:d0:33:31:06:56:ac:43:39:ee:66:5e:c6:d2:06:22:9e:1e:
87:da:49:4a:f5:9c:46:5c:c8:94:5f:e4:5f:89:fc:25:39:2b:
96:1f:57:6c:13:07:97:80:4e:9e:d8:ff:2a:d5:65:6e:8a:8e:
ba:19:16:37:b8:52:5d:d2:a8:b5:a4:09:fe:74:50:8c:a7:b8:
c4:88:9a:36:4b:16:d6:b0:3b:7f:88:1c:41:8b:f5:09:8b:88:
c7:77:5b:65:69:22:53:ad:0f:e6:e4:0e:b6:ae:f7:40:27:23:
01:3c:67:9e:b8:4e:3b:9e:34:f5:5a:06:42:9e:93:1a:f4:67:
12:c0:e3:8b:a9:23:ac:0f:33:7e:95:82:52:db:67:c2:6a:ed:
30:84:69:57:34:1d:cc:a5:81:46:55:a4:50:5a:72:5a:f9:09:
e5:a5:37:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:39:52 2026 by rpki-client