Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
File: XZxbcz-6cemMB-E7A6fFWrhMyO0.mft (raw, json)
Hash identifier: hXD4Ay++npa5x6mX6QVrGA6I61UWz50851ShW4fA8oo=
Subject key identifier: DB:95:66:90:4D:AD:2D:E5:C5:11:0C:94:F0:75:F0:58:9D:B3:20:13
Authority key identifier: 5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
Certificate issuer: /CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Certificate serial: 019E205ABDEEA4AA2304752066ADB62B770E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 08:01:18 +0000
Manifest this update: Wed 13 May 2026 08:01:18 +0000
Manifest next update: Thu 14 May 2026 08:01:18 +0000
Files and hashes: 1: D7RyDh7lTL4H2jBeI3MtODxeB2w.roa (hash: j4FPb00AEU8sTGz7vN2WFChjUdkqXvKYmGt4w0kqQbw=)
2: XZxbcz-6cemMB-E7A6fFWrhMyO0.crl (hash: AFZ3CyUUxUesu7wOMHX6ByM4+chPCWv86zWzbOz148Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:bd:ee:a4:aa:23:04:75:20:66:ad:b6:2b:77:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c5b733fba71e98c07e13b03a7c55ab84cc8ed
Validity
Not Before: May 13 08:01:18 2026 GMT
Not After : May 14 08:01:18 2026 GMT
Subject: CN=db9566904dad2de5c5110c94f075f0589db32013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:b6:20:41:d8:4f:3d:7b:67:37:5e:b4:c0:
64:f5:30:5f:8c:73:03:f6:05:3e:19:83:0f:53:78:
08:3b:98:1a:ac:81:5b:27:be:ea:c4:c3:2b:85:64:
bd:a6:9e:ac:61:55:22:4c:2f:2d:9d:8f:1c:a5:6a:
87:0f:b9:9e:ec:91:92:9e:02:56:6e:ee:4b:9a:32:
91:7c:53:68:6a:ae:f5:03:83:a0:d9:64:15:5a:e7:
e8:70:df:48:b2:d0:fc:50:93:4e:7c:c9:0d:a6:d9:
1e:92:a8:0e:3b:d6:60:58:bd:ee:99:69:91:f0:66:
20:a5:0c:ab:88:f1:3b:08:3a:8c:c5:7f:21:3d:5d:
0f:ec:8a:8b:a7:1c:0f:24:44:df:83:f8:37:35:f7:
8c:c1:53:33:0f:c3:12:59:f7:66:88:46:a4:aa:3e:
26:8f:ef:90:bf:2e:d7:af:8d:34:91:c7:e6:68:87:
e6:ee:12:8c:22:fa:79:cc:37:62:24:f4:68:1b:28:
06:5c:4a:0e:97:87:3f:51:cb:c9:c4:16:1e:9c:79:
f4:90:7f:04:4f:94:95:f8:91:b6:9a:59:36:3f:e3:
13:04:28:3a:b5:e5:46:63:8c:46:60:a1:7a:ca:2c:
a5:29:97:9c:38:ac:23:29:e9:05:79:e7:d9:4c:44:
bb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:95:66:90:4D:AD:2D:E5:C5:11:0C:94:F0:75:F0:58:9D:B3:20:13
X509v3 Authority Key Identifier:
keyid:5D:9C:5B:73:3F:BA:71:E9:8C:07:E1:3B:03:A7:C5:5A:B8:4C:C8:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XZxbcz-6cemMB-E7A6fFWrhMyO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/a2d4cb-923a-4e04-8d85-ad9d5db0f099/1/XZxbcz-6cemMB-E7A6fFWrhMyO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c1:75:80:f9:c5:28:35:a4:cd:15:7e:29:c9:6a:97:e5:54:
7b:d7:5a:63:b1:03:87:73:2d:48:8d:66:9d:9f:2b:53:0a:12:
24:a2:a6:e8:72:07:d2:d2:97:86:80:ce:75:95:67:de:f2:d0:
6d:44:e5:4d:38:9c:33:84:07:6e:f6:19:b3:b9:c2:7a:cd:f9:
ea:d7:02:c5:a9:d9:b9:da:e5:c4:06:f9:d3:b0:8b:0f:96:66:
98:0e:b2:44:76:33:a8:3c:da:a7:f0:f4:5f:1a:e9:fc:07:ca:
12:80:c6:ea:9a:be:df:3c:2b:ea:2a:41:94:4c:f9:0d:dd:d7:
90:a9:ba:b7:03:b2:de:05:88:d0:4d:4c:4e:38:ef:c7:dc:af:
c4:07:8c:37:3e:fe:77:18:dc:b4:00:73:a4:4e:52:ce:a8:fe:
50:44:c6:ea:4b:6d:41:5c:29:19:2e:dd:61:4d:73:e8:c5:5c:
f4:fb:a7:05:ae:31:80:5b:63:9e:ff:bc:df:a9:a7:7e:8e:61:
d0:98:ef:c5:18:32:f2:30:ac:fa:bd:f6:d7:7f:4c:a2:d8:40:
f7:e2:a7:29:0f:22:40:85:4f:20:f0:a7:e8:1e:0b:3c:59:b4:
7c:ca:a4:af:19:ff:10:39:29:bc:7a:62:5d:dd:7a:60:60:e0:
e7:b1:a7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:32:16 2026 by rpki-client