Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
File: xafD9LFGk1EiAllaik-VsNa3oQE.mft (raw, json)
Hash identifier: WPgn62Vc5blCRPfWFLAyokDtklWsVmpYsmrm1NlTvd0=
Subject key identifier: 08:C0:91:CD:B5:41:81:D3:CE:3A:19:BD:E0:7C:88:84:A7:BA:83:E9
Authority key identifier: C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
Certificate issuer: /CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Certificate serial: 019E2023720CA558C25C73E0D3DFE29CDB6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
Manifest number: 189B
Signing time: Wed 13 May 2026 07:00:54 +0000
Manifest this update: Wed 13 May 2026 07:00:54 +0000
Manifest next update: Thu 14 May 2026 07:00:54 +0000
Files and hashes: 1: 2hbC2fRcwVVGLuxr3y8s9IdUqJ0.roa (hash: WENyhbzOdCYh/WeleDC3Eb7ZL7vwxD85NmDsUD+Ca/o=)
2: rJ0B3_PG0rjHq-_hS6K9nBrn-PY.roa (hash: m7Zi/TNYib5gTH6m2mPeaQUI4WRQNMe1ierjcvG2bOc=)
3: xOCpqHIGWYpMZiK0D_GduGL-xNY.roa (hash: EH/6F7DAxWGzLP0f7IyWGiPlk48ND1XykF58xtVXDcQ=)
4: xafD9LFGk1EiAllaik-VsNa3oQE.crl (hash: N8XTSp56OObbnSPugO73eYwFNDyanN5UtPax1LZeRqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:23:72:0c:a5:58:c2:5c:73:e0:d3:df:e2:9c:db:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a7c3f4b14693512202595a8a4f95b0d6b7a101
Validity
Not Before: May 13 07:00:54 2026 GMT
Not After : May 14 07:00:54 2026 GMT
Subject: CN=08c091cdb54181d3ce3a19bde07c8884a7ba83e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:8c:67:72:d0:5f:d8:c7:71:18:97:70:b3:
d8:9b:79:47:a4:48:1b:66:c3:87:72:1f:ce:20:26:
66:52:3c:13:6b:ff:70:9e:8b:cc:42:39:bc:76:94:
9f:ee:18:46:d4:fa:21:b1:2d:0f:f5:38:b4:9a:53:
c8:3f:5e:4c:9d:70:21:93:89:e0:2e:53:ee:26:be:
b0:c2:04:95:f1:bb:20:c7:7d:86:3e:ce:d1:80:7a:
4d:0c:b5:9d:07:f8:4a:bc:e4:93:61:da:85:3a:4b:
57:64:3a:e0:ce:75:c2:8f:3a:b7:69:72:51:6c:d3:
eb:17:2c:2f:f8:f3:25:42:ce:17:2a:e6:4b:19:17:
e0:b3:e8:cc:fb:10:48:d2:ac:b2:81:cf:e5:20:d3:
6f:e8:de:10:5d:e8:c8:f8:37:33:c3:46:13:67:c1:
60:c8:4d:69:e4:fc:b5:af:7b:82:d4:2d:8c:47:fe:
f5:d9:ff:47:3b:2d:20:ce:ae:de:a7:44:d6:42:58:
6d:c2:e2:d3:63:59:5f:ae:ea:1e:ac:dd:c7:be:c6:
74:59:ea:75:ef:b0:d5:a0:9f:1c:9d:45:d8:88:14:
ec:b6:d7:9a:e2:54:fe:0e:de:ed:d7:31:01:35:db:
01:18:0b:61:8e:c0:5f:d5:d9:13:29:4e:bf:f9:6d:
d5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:C0:91:CD:B5:41:81:D3:CE:3A:19:BD:E0:7C:88:84:A7:BA:83:E9
X509v3 Authority Key Identifier:
keyid:C5:A7:C3:F4:B1:46:93:51:22:02:59:5A:8A:4F:95:B0:D6:B7:A1:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xafD9LFGk1EiAllaik-VsNa3oQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/3a3b2c-76b9-49b4-8218-d12f1e2456ba/1/xafD9LFGk1EiAllaik-VsNa3oQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:58:f3:1c:ac:65:f3:bc:ed:f8:d8:a3:fc:8f:83:86:9c:88:
3e:f6:ee:fe:70:ad:f6:30:91:a4:b9:d6:5d:87:47:e3:51:fb:
4a:be:08:e6:ae:c1:66:04:d7:8f:6c:73:8a:69:57:5f:a1:f9:
c7:cf:f5:65:00:76:a1:11:73:19:4a:2e:dd:34:70:7b:32:46:
9c:81:d8:48:b1:1d:70:91:88:0b:c3:f6:64:2f:7f:d8:de:ee:
87:9a:15:7f:77:7c:91:bc:0a:04:92:ea:1c:60:7e:17:29:20:
3f:7c:b6:c9:50:78:83:9b:c1:3b:aa:3c:2d:7a:40:d8:4f:99:
54:35:a2:6b:70:a7:0b:af:cc:dc:9c:b5:9c:2f:eb:cd:df:5b:
f3:fd:03:81:24:c3:14:d1:e5:ef:88:77:2b:38:e1:b8:e3:8b:
f3:5e:24:6c:59:dd:16:7b:a1:34:a1:d8:9d:3e:a5:98:5e:66:
a5:ac:58:b8:ae:9f:15:04:29:d4:e5:83:a5:ef:08:a7:74:30:
84:d9:09:29:f9:68:a7:c0:b6:c5:f1:e3:71:cb:ba:75:3c:9c:
bd:09:45:09:16:86:45:c1:4e:9a:03:02:73:38:ae:42:c5:ff:
5c:00:af:13:90:12:25:c7:d2:c1:ac:fa:33:27:b5:63:15:01:
fb:ea:1f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:37 2026 by rpki-client