Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
File: xZR6QUqIMFFWVtc4p4OCiQFgN30.mft (raw, json)
Hash identifier: AK2p2EW6tVBy/HbySBg4zSlGraLh/x32Ass7A62k5co=
Subject key identifier: 67:78:C8:41:C3:6E:ED:5C:0A:E5:FC:0C:3F:90:CC:4E:13:D4:A1:35
Authority key identifier: C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
Certificate issuer: /CN=c5947a414a8830515656d738a78382890160377d
Certificate serial: 019E1F11C8D298389DBB4ECBB89F3881B479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
Manifest number: 0845
Signing time: Wed 13 May 2026 02:01:59 +0000
Manifest this update: Wed 13 May 2026 02:01:59 +0000
Manifest next update: Thu 14 May 2026 02:01:59 +0000
Files and hashes: 1: xZR6QUqIMFFWVtc4p4OCiQFgN30.crl (hash: axorokiOd/L9ic1UcttGSBBi3OZB/F14F9/LCreQhY8=)
2: yPfyngOSudI1ySWIfQxdWtyiNIs.roa (hash: 5dFd12MxUEVgWmbdpshfSJRZnDjbazIniCXkVZMmEDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:c8:d2:98:38:9d:bb:4e:cb:b8:9f:38:81:b4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5947a414a8830515656d738a78382890160377d
Validity
Not Before: May 13 02:01:59 2026 GMT
Not After : May 14 02:01:59 2026 GMT
Subject: CN=6778c841c36eed5c0ae5fc0c3f90cc4e13d4a135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:2f:5f:5d:34:53:c9:d1:c1:00:b8:b6:d4:e0:
af:b1:ed:78:00:e3:53:07:ab:13:11:93:25:c0:71:
22:eb:0a:95:1a:f7:b5:59:7f:c0:63:08:47:e0:83:
d2:39:e4:33:d5:13:84:6a:ce:50:94:64:ba:e2:7c:
be:87:c0:c7:02:da:50:81:09:cf:78:4c:c1:c1:f9:
ed:2c:2d:11:00:6e:f2:32:61:12:cc:11:36:4a:f3:
2e:ab:f1:d9:19:6e:61:93:87:66:24:55:16:21:ea:
27:90:cb:e0:54:bb:f6:77:aa:32:57:c8:a7:ab:a3:
4a:30:de:64:79:f5:d2:28:9d:91:3f:40:06:36:6a:
d8:04:cb:38:ed:fc:dc:48:a4:ae:ff:09:e0:9d:db:
b3:2d:a7:2c:eb:f8:d4:7e:80:f6:09:82:94:cf:18:
ec:e6:04:e5:c2:8d:72:8f:f1:6f:e4:d7:f1:8f:85:
67:4f:33:c7:f5:94:07:fc:c8:40:89:47:10:af:ab:
8d:21:1e:d8:6f:1c:3b:82:f2:76:77:1f:bc:c1:ca:
0e:4c:55:78:b9:70:29:97:fc:22:94:c5:b1:99:a5:
2c:54:98:4e:26:4d:8a:61:68:eb:ff:f9:bc:b7:c3:
f6:c7:84:d9:7f:cb:cf:dc:23:8c:07:c7:21:2f:e6:
4b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:78:C8:41:C3:6E:ED:5C:0A:E5:FC:0C:3F:90:CC:4E:13:D4:A1:35
X509v3 Authority Key Identifier:
keyid:C5:94:7A:41:4A:88:30:51:56:56:D7:38:A7:83:82:89:01:60:37:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xZR6QUqIMFFWVtc4p4OCiQFgN30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/92e0a6-b3e3-455d-92cf-0e5494af5840/1/xZR6QUqIMFFWVtc4p4OCiQFgN30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:3e:3e:ca:f4:b2:c9:ca:a5:93:6f:85:95:09:d5:fa:48:0b:
f3:fb:d6:b9:7a:76:80:20:63:84:75:b2:46:bc:52:ba:5d:c5:
88:a2:6a:de:20:3e:3f:86:65:80:e4:be:72:94:9c:57:0d:25:
c4:20:b8:2f:7e:9e:0b:f9:b4:89:32:40:e3:d2:30:88:8a:6e:
70:99:1e:41:34:4b:e5:e7:03:98:7d:0b:de:66:5b:b6:96:a1:
4f:59:ad:47:40:62:99:55:49:ca:b6:17:09:dd:97:97:19:26:
3b:c2:f0:b8:5d:3d:be:f6:87:d0:69:15:ae:b1:91:a6:ec:b8:
2f:96:91:81:91:e6:96:e5:21:47:20:d9:77:f6:60:25:ca:fd:
39:16:df:67:09:4c:8b:74:72:2d:36:01:84:a1:11:9c:df:89:
86:79:e0:86:fd:2c:62:c0:7a:f1:cc:ef:9a:5a:a4:c5:49:6e:
25:b4:d6:c7:dc:1e:ec:b5:8e:7d:d4:bb:4f:82:64:b1:23:50:
b5:0f:40:6c:48:36:03:36:66:bd:84:a8:06:ba:31:95:98:f7:
1a:47:97:3b:41:61:f5:9d:1f:8f:bb:e6:07:76:bb:f9:b1:ff:
96:c9:2e:26:dc:3b:0c:bb:3c:e4:d3:93:d8:dd:4c:4a:55:d2:
cb:3a:00:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:21:24 2026 by rpki-client