Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
File: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft (raw, json)
Hash identifier: s9SpfsMH+uQqGIPfvTG5wYLpt79lGZE5YLUaJeNI0I0=
Subject key identifier: 3E:C7:9F:C0:4C:72:09:36:33:F0:E7:6B:DF:55:BA:95:09:5D:A7:02
Authority key identifier: C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
Certificate issuer: /CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Certificate serial: 019E1D2344F22879493605791942A28C2C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
Manifest number: 1899
Signing time: Tue 12 May 2026 17:01:50 +0000
Manifest this update: Tue 12 May 2026 17:01:50 +0000
Manifest next update: Wed 13 May 2026 17:01:50 +0000
Files and hashes: 1: a3vqBzTeMihaLI7nX3YXTwT9QXM.roa (hash: YtcSgTlR3L7xs2ulbON7vgzLF5ftnMrGCR+z8FjX7OE=)
2: xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl (hash: Nh4t4Y5uzH/zZw7Pb6jS4WmOQ5QHjOoyy7NMc4HuoVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:23:44:f2:28:79:49:36:05:79:19:42:a2:8c:2c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a019cb54d700a1b1c50e8f90ebee2a5eea57bb
Validity
Not Before: May 12 17:01:50 2026 GMT
Not After : May 13 17:01:50 2026 GMT
Subject: CN=3ec79fc04c72093633f0e76bdf55ba95095da702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:67:cb:98:30:68:62:74:73:a6:a1:54:93:ce:
14:9d:76:3e:af:dd:f6:fe:57:59:4f:9c:08:a1:6a:
ab:42:94:5d:9b:de:15:dd:51:dd:47:0f:78:74:c3:
50:fb:52:de:99:bf:68:2f:9b:37:2f:83:06:e5:e0:
88:30:45:94:7a:21:1f:a6:31:67:31:16:71:5d:1b:
9c:5a:7b:1d:8f:36:87:89:4e:5c:ce:67:a1:04:8d:
9e:50:7f:d2:13:4d:62:17:8a:0b:36:36:c6:e4:70:
2e:95:95:86:c6:75:16:fc:32:f1:d6:42:28:e7:50:
10:a2:e6:b1:c1:17:81:03:47:9e:40:ec:d6:da:6a:
8d:3b:ad:d2:bc:04:20:35:d0:e3:1a:c2:54:4b:cb:
6d:31:c9:bb:b2:d1:f7:58:50:2d:3d:86:8e:69:51:
df:79:7f:11:d4:37:c5:87:43:d0:34:d2:c8:b4:6c:
98:81:bf:e7:7e:52:9c:8e:bd:6a:dd:e1:a3:a8:d5:
9c:eb:87:c7:46:1a:d8:92:1a:7d:ac:f0:81:f7:7f:
70:bf:d6:9b:ed:71:fa:35:7b:8b:af:ab:96:c0:5d:
20:86:97:29:5d:cb:eb:f6:63:8b:47:43:80:73:19:
2b:75:2e:62:77:f8:33:73:8c:58:81:40:82:38:73:
84:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C7:9F:C0:4C:72:09:36:33:F0:E7:6B:DF:55:BA:95:09:5D:A7:02
X509v3 Authority Key Identifier:
keyid:C5:A0:19:CB:54:D7:00:A1:B1:C5:0E:8F:90:EB:EE:2A:5E:EA:57:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/2434f8-0566-45fc-b714-31a3ecf1bdb6/1/xaAZy1TXAKGxxQ6PkOvuKl7qV7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a0:45:aa:56:7b:f8:86:d6:ce:71:4a:0d:5c:9f:78:e7:aa:
96:a0:43:eb:e8:21:80:05:2d:20:48:83:77:eb:62:c8:b3:87:
07:b4:7a:3b:cd:0a:e3:14:38:51:54:c7:23:04:ef:5f:38:94:
74:bb:6b:4c:fa:d5:00:c3:fe:d1:07:21:6d:3a:98:c6:1d:b1:
7e:34:dd:cd:9c:8b:24:5c:09:af:8c:ab:fe:a2:06:be:d9:3a:
ed:d8:91:83:c5:59:f4:f6:f3:d2:04:79:cd:bf:1e:a3:77:7a:
81:24:fa:ea:85:8d:e0:ad:46:8b:e7:09:4e:18:ec:f1:9b:fe:
35:f7:86:d4:f5:de:7c:56:c9:77:3a:94:1c:d2:88:f7:e0:61:
a2:e8:50:6b:cf:e9:69:37:5c:f1:f1:58:ba:1d:61:c0:11:2a:
34:71:51:da:5f:c0:83:c0:41:8d:a6:ad:6c:b3:02:6c:78:11:
df:fe:37:08:b1:e9:d1:52:ca:0c:43:00:bb:2b:64:92:e0:c2:
a6:b3:45:21:8b:4b:fe:90:5c:f8:53:58:10:8e:4b:83:9c:70:
47:96:a2:1a:0c:29:f4:76:2d:e4:42:9e:d4:b7:9e:3e:94:8d:
fb:41:7e:77:d7:e1:57:0b:2f:bf:2b:66:39:e8:42:b9:22:45:
07:95:af:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dI0TyKHlJNgV5GUKijCwgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTAxOWNiNTRkNzAwYTFiMWM1MGU4ZjkwZWJlZTJhNWVl
YTU3YmIwHhcNMjYwNTEyMTcwMTUwWhcNMjYwNTEzMTcwMTUwWjAzMTEwLwYDVQQD
EygzZWM3OWZjMDRjNzIwOTM2MzNmMGU3NmJkZjU1YmE5NTA5NWRhNzAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WfLmDBoYnRzpqFUk84UnXY+r932
/ldZT5wIoWqrQpRdm94V3VHdRw94dMNQ+1Lemb9oL5s3L4MG5eCIMEWUeiEfpjFn
MRZxXRucWnsdjzaHiU5czmehBI2eUH/SE01iF4oLNjbG5HAulZWGxnUW/DLx1kIo
51AQouaxwReBA0eeQOzW2mqNO63SvAQgNdDjGsJUS8ttMcm7stH3WFAtPYaOaVHf
eX8R1DfFh0PQNNLItGyYgb/nflKcjr1q3eGjqNWc64fHRhrYkhp9rPCB939wv9ab
7XH6NXuLr6uWwF0ghpcpXcvr9mOLR0OAcxkrdS5id/gzc4xYgUCCOHOELQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD7Hn8BMcgk2M/Dna99VupUJXacCMB8GA1UdIwQY
MBaAFMWgGctU1wChscUOj5Dr7ipe6le7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFBWnkxVFhBS0d4eFE2UGtPdnVLbDdxVjdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi8yNDM0ZjgtMDU2Ni00NWZjLWI3MTQt
MzFhM2VjZjFiZGI2LzEveGFBWnkxVFhBS0d4eFE2UGtPdnVLbDdxVjdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi8yNDM0ZjgtMDU2Ni00NWZjLWI3MTQtMzFhM2VjZjFiZGI2
LzEveGFBWnkxVFhBS0d4eFE2UGtPdnVLbDdxVjdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaBFqlZ7
+IbWznFKDVyfeOeqlqBD6+ghgAUtIEiDd+tiyLOHB7R6O80K4xQ4UVTHIwTvXziU
dLtrTPrVAMP+0QchbTqYxh2xfjTdzZyLJFwJr4yr/qIGvtk67diRg8VZ9Pbz0gR5
zb8eo3d6gST66oWN4K1Gi+cJThjs8Zv+NfeG1PXefFbJdzqUHNKI9+BhouhQa8/p
aTdc8fFYuh1hwBEqNHFR2l/Ag8BBjaatbLMCbHgR3/43CLHp0VLKDEMAuytkkuDC
prNFIYtL/pBc+FNYEI5Lg5xwR5aiGgwp9HYt5EKe1LeePpSN+0F+d9fhVwsvvytm
OehCuSJFB5WvDg==
-----END CERTIFICATE-----
Generated at Tue May 12 21:33:11 2026 by rpki-client