Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
File: XYJmcuaPPaXbUO2ButuNM73M0ro.mft (raw, json)
Hash identifier: n7HmGQFRr5TqmWczTggx0JzfEvdJ5S+RLcOoAaX4bnM=
Subject key identifier: 63:40:95:BC:66:67:F6:21:4C:E2:8F:12:DD:3E:BC:76:C9:60:D9:67
Authority key identifier: 5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
Certificate issuer: /CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Certificate serial: 019E1EA319352CBA7AB5C80D568E986E1952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
Manifest number: 1542
Signing time: Wed 13 May 2026 00:01:05 +0000
Manifest this update: Wed 13 May 2026 00:01:05 +0000
Manifest next update: Thu 14 May 2026 00:01:05 +0000
Files and hashes: 1: XYJmcuaPPaXbUO2ButuNM73M0ro.crl (hash: /xaz2kXSci6EsuWGrcJ3Ruy2EI95I8CRerM9doiMCmg=)
2: fDzIkCC4HQZF8d8gvy277WuuRYM.roa (hash: TzMFdxwnyUIL4oJ9MUVrNEjKX81ekLEZoq92hFxo3V4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:19:35:2c:ba:7a:b5:c8:0d:56:8e:98:6e:19:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d826672e68f3da5db50ed81badb8d33bdccd2ba
Validity
Not Before: May 13 00:01:05 2026 GMT
Not After : May 14 00:01:05 2026 GMT
Subject: CN=634095bc6667f6214ce28f12dd3ebc76c960d967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0f:37:69:fc:0d:0b:0b:57:eb:20:cd:2f:fb:
84:a4:c3:12:ae:3c:46:e1:7c:16:f5:27:c4:b2:0c:
10:4f:f7:78:97:e6:ab:3a:ff:83:7c:64:a5:8a:fe:
84:45:61:db:b1:40:99:b4:44:61:1f:7f:4a:eb:c6:
ef:b2:14:eb:23:a1:57:9b:dd:51:2b:e5:d2:3d:8e:
7a:52:54:e1:5d:8f:45:d8:15:c4:79:a5:db:d2:75:
57:c2:d0:a6:55:06:45:33:a6:a7:8a:eb:b8:93:a5:
19:54:a6:83:05:a3:ce:94:7f:d2:04:65:c4:13:3e:
55:f9:87:2a:2f:06:e1:b3:a4:79:f1:37:e1:b7:a0:
31:23:c5:12:94:f5:5d:f1:7b:f1:d4:d9:a3:4b:cb:
3f:41:84:37:75:b9:ca:30:91:a5:0a:73:25:da:70:
1d:d5:61:5f:12:33:b2:6b:4d:ab:a8:76:8d:4f:25:
d5:4b:63:0a:6a:b1:08:78:83:7e:89:10:cd:7f:ea:
de:ab:25:a5:d5:4d:67:c3:a2:2e:e0:8e:7f:6b:34:
05:1f:fe:fb:ea:46:62:7d:c5:19:e1:25:4f:8d:29:
b2:6a:87:86:97:ed:79:7b:37:16:d8:53:33:1c:79:
4c:cc:97:3b:01:d2:1b:3b:d3:7a:28:2f:1b:fd:08:
3e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:40:95:BC:66:67:F6:21:4C:E2:8F:12:DD:3E:BC:76:C9:60:D9:67
X509v3 Authority Key Identifier:
keyid:5D:82:66:72:E6:8F:3D:A5:DB:50:ED:81:BA:DB:8D:33:BD:CC:D2:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYJmcuaPPaXbUO2ButuNM73M0ro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c79d13-9ea2-4eed-8dd2-cedab463ee5b/1/XYJmcuaPPaXbUO2ButuNM73M0ro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:91:1c:0c:2c:41:07:f1:b3:f4:61:42:23:a2:fa:0e:03:f0:
db:4a:36:58:55:94:14:1a:ad:f3:be:e6:69:90:32:1e:21:23:
66:ab:d3:66:ea:93:a9:bd:8d:6f:47:d9:b5:26:63:3c:c0:af:
62:2b:fb:88:1a:1b:0e:c3:16:cf:0a:8d:b8:4e:7d:d7:4b:5a:
b0:04:96:bd:7d:7b:c7:66:3b:95:ad:74:f3:e2:85:9d:ab:61:
18:51:62:1d:40:8e:73:64:35:27:e4:42:75:07:3a:11:af:2c:
39:cd:4f:9d:53:cd:f5:53:0a:42:ef:04:ad:59:8d:3e:cd:6e:
2d:de:a3:79:99:7e:92:43:84:ad:35:0a:50:89:ef:e6:b6:9d:
3a:e8:b8:bc:ff:77:ce:9c:2a:44:c2:c1:1d:fa:27:e5:11:19:
dd:4a:b1:f7:6b:c3:d6:42:2e:9c:a6:9c:06:94:9c:79:64:1c:
9e:c5:9a:6d:9f:a4:02:a7:d6:1f:61:ff:df:7d:c4:06:4d:4d:
b6:06:8b:2b:8b:af:e7:45:b8:58:20:e1:78:94:c3:1e:31:fc:
69:44:4d:23:dd:09:59:27:df:73:2b:0b:10:67:6e:5c:66:17:
13:5f:2a:23:89:11:d2:cf:ec:64:3d:48:70:6b:8c:bc:ce:f1:
70:e6:1c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:42:47 2026 by rpki-client