Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
File: xSJOpF0IHUAv_Wv03ZXj_28txIE.mft (raw, json)
Hash identifier: JVD3T0391NQopUswxjY+WBTnGAguxHwUv8XBDOfsDAA=
Subject key identifier: A4:43:8A:33:D0:CE:A4:F6:D0:94:3C:66:0C:FF:ED:02:5C:2E:0C:04
Authority key identifier: C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
Certificate issuer: /CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Certificate serial: 019E1D90C5DB420D8DBBC13C34E44617F0B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
Manifest number: 0DBF
Signing time: Tue 12 May 2026 19:01:27 +0000
Manifest this update: Tue 12 May 2026 19:01:27 +0000
Manifest next update: Wed 13 May 2026 19:01:27 +0000
Files and hashes: 1: LpqEZBj1hD6LUjiFVP5RJmbjDc0.roa (hash: MkMyhvMq/UW3J/dY/hJ1MwyOPfnqAuGRvt2LQG0g8xw=)
2: xSJOpF0IHUAv_Wv03ZXj_28txIE.crl (hash: PzFq4jCEMrkyMGBZfgtfsFXFAiWSvw7/saCPUBEQE4s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:c5:db:42:0d:8d:bb:c1:3c:34:e4:46:17:f0:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5224ea45d081d402ffd6bf4dd95e3ff6f2dc481
Validity
Not Before: May 12 19:01:27 2026 GMT
Not After : May 13 19:01:27 2026 GMT
Subject: CN=a4438a33d0cea4f6d0943c660cffed025c2e0c04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:28:7a:7b:7e:45:31:31:11:74:8e:77:21:e5:
0d:99:97:fd:05:ab:e2:11:b8:fc:ae:c6:d8:ca:32:
4b:4e:3c:42:23:33:91:47:a5:89:b4:c9:97:40:b8:
1a:bd:ff:57:0f:dc:98:a5:31:a2:98:b4:de:f4:32:
44:53:01:9b:68:f9:16:b1:bb:0f:ed:14:85:2d:97:
f3:65:d5:e6:6f:63:e4:18:87:57:2e:c3:00:2a:07:
b3:19:1d:28:4a:ad:c0:bf:c0:0f:d4:67:84:75:2e:
55:89:39:1c:a1:34:3c:a5:4d:a4:ab:bd:8e:1a:52:
39:6c:69:7b:06:11:a2:e5:60:fe:19:5f:0a:0d:8f:
26:8d:59:1e:3a:de:d7:fb:d0:02:7f:07:41:d0:57:
79:ed:e3:32:5e:49:51:05:b1:1f:09:b3:d9:5f:d8:
9d:26:6c:f1:09:68:09:05:51:8f:d2:90:a0:7d:d3:
a4:57:8e:31:0c:1c:13:6c:6b:a6:ef:2e:96:ae:ff:
fa:07:bf:00:82:31:a3:52:f1:3e:26:dc:95:62:ca:
9d:56:83:9d:7d:cc:34:b2:1a:64:e1:72:37:01:fb:
3f:e2:2f:2b:f7:d2:bd:e1:9c:ea:93:12:ac:c7:12:
95:2b:aa:61:df:81:e8:9b:ff:93:0b:73:31:50:96:
1a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:43:8A:33:D0:CE:A4:F6:D0:94:3C:66:0C:FF:ED:02:5C:2E:0C:04
X509v3 Authority Key Identifier:
keyid:C5:22:4E:A4:5D:08:1D:40:2F:FD:6B:F4:DD:95:E3:FF:6F:2D:C4:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xSJOpF0IHUAv_Wv03ZXj_28txIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/8154e3-286b-46a3-b8a5-52356cd5da90/1/xSJOpF0IHUAv_Wv03ZXj_28txIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:a2:c2:1f:29:e5:2c:51:ca:a0:3c:27:f3:f3:b3:b6:dd:32:
9b:1f:51:10:37:c8:52:4f:c7:d3:8f:df:43:1a:82:1a:91:23:
ee:03:50:f2:3d:8d:32:63:f2:55:83:94:8e:10:da:77:13:b0:
4a:af:25:5d:7d:b7:aa:19:d5:8d:9b:71:f1:46:c0:f2:59:ea:
68:61:06:87:f0:2c:78:a2:9e:66:1d:20:1f:38:36:5b:04:81:
62:ed:b0:01:51:cc:6c:7d:9b:f3:cd:5c:12:96:81:bb:71:af:
40:dc:5f:18:e8:87:8a:18:a7:e8:54:d7:16:15:f6:6b:71:88:
17:4d:6b:b6:a8:71:33:76:c0:c6:20:a1:f4:d7:48:b7:0a:fe:
cb:d2:90:4d:76:28:8c:51:82:db:bf:f5:2d:53:20:30:07:f3:
6d:57:c2:5a:27:1c:8a:ec:36:53:c2:ef:f4:cb:e4:52:ea:a3:
3a:76:66:77:1f:5c:17:3b:b6:57:6e:71:08:a9:42:dd:39:55:
02:f9:e8:b1:3a:c2:99:30:f1:53:d6:5f:8c:a1:03:67:b2:91:
06:87:67:9a:47:2f:6b:9e:f5:0c:58:5e:7f:66:4a:0c:4c:4c:
fd:ce:36:4b:d3:f0:01:90:69:69:52:47:e3:67:42:60:e4:95:
a2:99:b9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:32:46 2026 by rpki-client