Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
File: xaL0JAfyHJ12kPsw_YzbK_320DA.mft (raw, json)
Hash identifier: xKbEP0hlsb3QpkXAHI89DYelwX7PwXGAo8r0HPRm9Rk=
Subject key identifier: 19:5D:D9:57:16:C2:5B:7C:A1:FA:27:03:9C:7C:B5:44:7D:B7:B9:3B
Authority key identifier: C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
Certificate issuer: /CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Certificate serial: 019E1EA3D5D43CA4562F8E8C5E5A01C2534C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
Manifest number: 1923
Signing time: Wed 13 May 2026 00:01:53 +0000
Manifest this update: Wed 13 May 2026 00:01:53 +0000
Manifest next update: Thu 14 May 2026 00:01:53 +0000
Files and hashes: 1: vvOgIMkDpg0381NKvOJ6xEsVrhU.roa (hash: Ilfe2d/82ILTFX47xfIYllXXNOO6y9+T+nkxBpSb/2g=)
2: xaL0JAfyHJ12kPsw_YzbK_320DA.crl (hash: 6+OBqXdw+YNt660otJl+ZVFIY8Wya5ydbvsBjFDq/5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:d5:d4:3c:a4:56:2f:8e:8c:5e:5a:01:c2:53:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a2f42407f21c9d7690fb30fd8cdb2bfdf6d030
Validity
Not Before: May 13 00:01:53 2026 GMT
Not After : May 14 00:01:53 2026 GMT
Subject: CN=195dd95716c25b7ca1fa27039c7cb5447db7b93b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e7:f0:41:95:24:49:89:73:44:c4:c3:92:73:
5c:67:1f:46:b6:73:88:fb:a2:08:f8:9f:07:07:29:
87:de:72:ef:d2:67:78:18:d8:e4:41:42:da:8f:49:
b9:42:5a:46:62:00:75:06:35:f5:8a:96:d8:ff:cd:
5a:57:62:13:a0:73:19:db:94:a4:76:00:91:54:18:
f5:6a:dd:b5:9e:52:99:30:07:f7:3f:df:2f:7a:16:
df:36:bd:ac:43:09:09:2b:fa:64:f8:b8:83:b4:3d:
82:fa:4a:87:ec:b1:fe:39:9d:39:d3:74:57:0c:73:
42:fe:e8:97:59:4b:f5:04:b8:db:2d:6b:03:d4:e7:
0a:93:1b:a8:27:6e:c9:00:42:b2:58:99:c7:9c:aa:
c6:d0:e5:15:8e:1e:a3:21:6c:e9:fa:ab:6d:63:07:
1b:a3:cf:92:07:0e:b0:45:1a:34:48:e4:cf:35:de:
b7:5b:be:57:f7:f4:26:c9:fd:80:8f:04:d6:33:24:
ab:03:cf:41:d9:2b:3b:81:49:3a:ad:af:9d:16:72:
73:58:79:5a:4d:f8:28:50:ed:20:31:42:4f:f9:67:
1d:9d:48:23:43:d5:d7:aa:a3:07:e6:1b:74:18:a3:
04:c3:b1:c3:46:8d:08:29:a2:87:1c:f7:cc:f1:95:
1b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5D:D9:57:16:C2:5B:7C:A1:FA:27:03:9C:7C:B5:44:7D:B7:B9:3B
X509v3 Authority Key Identifier:
keyid:C5:A2:F4:24:07:F2:1C:9D:76:90:FB:30:FD:8C:DB:2B:FD:F6:D0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaL0JAfyHJ12kPsw_YzbK_320DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/1a18e1-67c8-492e-8fba-fb5c62e42f6b/1/xaL0JAfyHJ12kPsw_YzbK_320DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:09:3e:4f:64:b9:75:40:08:5d:bb:e4:ed:64:20:96:7b:83:
c9:16:f6:58:0b:40:92:c8:db:c2:f1:dc:17:fe:ba:42:66:d4:
32:e4:d8:3f:f3:60:1f:aa:8e:2f:3d:8f:81:14:97:c0:a5:3e:
5b:ae:4b:42:b4:09:dd:0f:c9:39:fb:71:96:7a:11:85:c6:b9:
25:68:60:1b:a5:cc:d7:57:a3:66:3d:a4:64:fc:89:b3:fc:52:
0d:28:e3:88:1f:df:97:a0:32:c9:3c:b6:fe:de:67:4e:4b:5d:
90:83:71:0d:a6:38:46:39:3d:8d:c8:10:84:cc:46:5f:f9:bf:
5d:f5:a8:d3:bf:98:4e:a0:5e:d5:96:4d:e2:aa:04:2e:01:c8:
67:d0:90:d0:e8:32:65:25:67:7a:d1:98:fa:dc:85:06:cb:28:
a9:e5:a4:12:b3:2c:b0:14:bd:16:24:49:aa:cb:2c:15:7c:b0:
3a:50:0f:8d:bb:da:2c:6b:76:68:cc:37:15:80:d7:bc:ea:02:
6c:76:1e:e0:21:78:eb:fb:b9:f4:86:9e:14:ab:2d:b8:4f:75:
bb:d8:dd:15:cc:17:5c:3c:d4:47:a3:92:40:4f:2b:a3:54:8f:
fb:36:6c:8f:cc:8c:8e:23:d1:f7:cc:ac:9a:e7:a7:a2:7f:3d:
3f:87:bd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:41:57 2026 by rpki-client