Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
File: xr--8nm_ne1uNlHgYo05unkpT3g.mft (raw, json)
Hash identifier: sRzuCxlxPHHIpVbSeqUvFIlr7SRZpKe0fNeRA2KtdXA=
Subject key identifier: AE:B7:E2:08:AD:11:25:43:00:D3:DB:DA:85:85:B5:F0:A0:C8:E4:61
Authority key identifier: C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
Certificate issuer: /CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Certificate serial: 019E1F47954F8CBFD1B9AFBB47424AA69BEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 03:00:45 +0000
Manifest this update: Wed 13 May 2026 03:00:45 +0000
Manifest next update: Thu 14 May 2026 03:00:45 +0000
Files and hashes: 1: E8RgfAnRQ_MkPzEQzExnrRGS9bk.roa (hash: Uscjfda3vNy/cunwHUUok4ph0ZEvFOV3pV/NuXcyZJ4=)
2: jQxMjcdrhmgG348-FC6ZQ2XBhWA.roa (hash: zzN6qYWykA9k6vddc6gAA5bY2rFVt0NTvTAU0BcNrqQ=)
3: xr--8nm_ne1uNlHgYo05unkpT3g.crl (hash: lRef9nkWNj28eHYbFdrKJC9Zz48hLkJyOUexc6qFSCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:95:4f:8c:bf:d1:b9:af:bb:47:42:4a:a6:9b:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6bfbef279bf9ded6e3651e0628d39ba79294f78
Validity
Not Before: May 13 03:00:45 2026 GMT
Not After : May 14 03:00:45 2026 GMT
Subject: CN=aeb7e208ad11254300d3dbda8585b5f0a0c8e461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:94:d9:89:90:47:ca:18:6a:8e:6b:ce:e0:eb:
91:d2:db:8a:7c:98:7c:76:70:98:e1:e8:04:7e:01:
8b:09:ad:6a:c5:68:f3:29:49:d2:e5:0b:d4:52:24:
3b:5f:37:50:d5:4d:95:f0:2e:24:17:a0:30:25:30:
59:96:94:e1:b9:b0:fd:75:5d:8b:51:8e:a3:12:d7:
2f:a7:e2:32:86:74:25:96:9d:e9:4a:cf:fb:fc:18:
db:97:3f:f8:e3:27:43:70:a6:14:15:27:d4:dc:0b:
20:46:50:b6:0a:bc:76:b7:2a:e7:de:c3:a3:1a:80:
b7:85:14:80:0e:d0:2a:1e:5d:38:b8:4e:61:68:84:
fa:28:cb:76:c5:6c:7c:36:90:e4:d7:94:01:da:78:
9a:f8:8a:8a:23:1c:9f:cd:7c:4e:cb:46:2c:2b:0d:
1e:d6:3f:b0:5b:50:5b:bb:e2:b8:ff:bb:c1:19:f6:
d6:ad:92:70:09:2f:86:6a:1a:bb:27:f7:0f:e0:91:
f7:a7:a2:87:28:82:ef:76:b4:80:1a:ba:e7:86:19:
18:99:ce:55:f9:6c:fa:f4:ad:c4:87:8b:26:6a:03:
5b:05:27:75:f4:93:ed:09:3d:99:d9:75:ff:97:f6:
51:b2:84:0b:db:d8:bb:18:70:ad:e5:f2:25:ce:91:
26:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B7:E2:08:AD:11:25:43:00:D3:DB:DA:85:85:B5:F0:A0:C8:E4:61
X509v3 Authority Key Identifier:
keyid:C6:BF:BE:F2:79:BF:9D:ED:6E:36:51:E0:62:8D:39:BA:79:29:4F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xr--8nm_ne1uNlHgYo05unkpT3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/28462c-2c23-4f95-8e8d-ade530d7c41b/1/xr--8nm_ne1uNlHgYo05unkpT3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:c9:01:50:ce:75:86:fd:20:55:3b:4d:9f:d0:eb:94:ab:ff:
a1:2c:63:08:83:06:8c:88:6c:9e:4c:77:90:a8:f1:c7:01:5c:
cb:b0:54:9e:89:b2:c8:db:56:03:ec:6a:fa:a4:57:cf:ae:eb:
ff:6d:c6:16:6f:f0:7a:62:00:b6:53:17:e8:31:34:64:49:57:
42:41:10:e2:08:17:7b:98:ce:63:8a:03:6b:2b:fc:67:15:50:
bd:24:bf:3e:c2:d6:37:61:4a:cf:4a:41:0f:5b:fb:29:b7:67:
9a:37:d6:9a:d9:59:1b:5b:1b:89:ee:42:c1:40:df:a8:f6:39:
50:7c:1e:db:3c:0c:8f:aa:2b:b9:69:50:54:bb:c0:b0:c1:62:
73:5e:b0:ee:97:27:7f:07:ef:3a:a8:74:f7:b1:4e:a5:0f:a6:
dd:df:fb:c5:6d:46:71:78:72:e7:1c:69:4c:98:4f:ac:2d:0d:
1e:fe:71:71:61:b1:9e:a2:f4:90:a3:70:a6:bc:cc:da:ed:53:
65:70:d5:5b:ce:0f:a8:de:cc:92:93:a6:03:c5:bf:a6:c8:05:
1f:6f:d5:06:40:b0:b9:55:60:fc:94:fb:c2:60:9c:03:df:0c:
0e:32:a6:32:23:b3:1c:b1:72:92:40:9b:0a:f2:0e:d8:cb:f3:
35:a9:9b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:21:07 2026 by rpki-client