Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
File: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft (raw, json)
Hash identifier: KAhaf+7KFql+25Z99CwJEBAnUtsMS4NCD/LCSOX16LY=
Subject key identifier: E3:5E:94:42:D8:3F:6B:95:35:66:91:AE:E8:4F:36:71:00:78:CD:D0
Authority key identifier: FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
Certificate issuer: /CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Certificate serial: 019E20C82F307F54278F68FA903A7E025DBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
Manifest number: 0721
Signing time: Wed 13 May 2026 10:00:50 +0000
Manifest this update: Wed 13 May 2026 10:00:50 +0000
Manifest next update: Thu 14 May 2026 10:00:50 +0000
Files and hashes: 1: _xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl (hash: xg+6RRtCEawcLHDu9S+ktLLpbsdiMe1Iv9tk3ekjlj0=)
2: zIooxkz42P8_5ReZHQIQQDyh_E0.roa (hash: vHG8nX4oJh4/M/Rbe7SvWBLoOWc7PYioObPqt6DtUuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:2f:30:7f:54:27:8f:68:fa:90:3a:7e:02:5d:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1a0a7554385703974ae15ef947bc54c0b89c95
Validity
Not Before: May 13 10:00:50 2026 GMT
Not After : May 14 10:00:50 2026 GMT
Subject: CN=e35e9442d83f6b95356691aee84f36710078cdd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:50:8e:ff:bb:57:5e:3e:aa:74:51:5e:ba:
bc:6b:13:19:6e:81:e0:cf:a9:fb:8a:15:31:73:a2:
1f:96:f9:16:86:38:b1:5e:f5:d7:fb:14:18:0d:9b:
58:c8:a9:05:fa:fb:e6:07:1a:1a:bd:44:3a:ec:e8:
16:88:2f:38:cd:57:97:da:b9:69:1f:d5:93:49:fc:
f2:a1:80:4f:a8:44:dc:d7:97:1f:7f:e7:af:a5:bb:
ef:be:60:a6:72:16:ff:e9:fe:9f:1f:6d:f8:95:e8:
df:a3:5b:67:bc:72:e2:16:d6:df:51:ae:0d:0b:51:
21:83:01:c2:d5:ee:1f:33:a8:13:05:09:d7:54:a9:
4b:73:06:3d:4c:93:49:3d:e9:7f:6f:12:ce:51:6b:
38:b9:21:1f:2c:89:ac:80:ee:c9:d6:f9:fe:64:01:
71:c2:14:1b:87:1a:4c:44:72:1c:3b:1e:80:51:47:
a3:33:4c:ea:26:5f:c2:af:f6:73:b5:9b:af:45:fd:
dd:41:27:f6:ba:46:c5:bd:d7:b8:0f:54:9d:60:f0:
4d:6c:8f:f8:80:8d:07:d0:a5:34:d8:f9:55:61:42:
c8:82:7d:b3:00:31:3c:4f:76:57:c5:e4:3d:b9:17:
80:98:ae:42:71:b0:8a:24:04:93:c2:69:a1:21:40:
9a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:5E:94:42:D8:3F:6B:95:35:66:91:AE:E8:4F:36:71:00:78:CD:D0
X509v3 Authority Key Identifier:
keyid:FF:1A:0A:75:54:38:57:03:97:4A:E1:5E:F9:47:BC:54:C0:B8:9C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/269290-59ff-4233-8fa0-27550b219507/1/_xoKdVQ4VwOXSuFe-Ue8VMC4nJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:5c:28:b1:14:4d:f6:57:aa:ea:6b:37:25:db:5a:4d:12:93:
35:56:3c:a4:5b:f3:ef:64:67:f0:2f:1f:51:0b:2f:57:61:12:
74:d5:bd:57:8d:94:18:e8:19:8b:83:aa:fc:1a:2e:f3:b5:72:
be:7d:b0:20:cf:1c:ed:53:35:c6:e7:85:7e:8e:eb:c2:eb:d1:
58:37:c4:a7:f0:c4:89:8b:52:37:be:29:ad:ce:80:41:18:73:
a6:ad:cd:ed:17:1a:91:48:ac:b3:03:f8:e0:04:3d:f6:79:4d:
cc:c5:19:3e:09:58:2f:f2:e4:a6:c4:67:88:7c:67:34:d5:65:
f5:be:28:51:6e:ac:92:e8:0d:a5:a7:0e:8f:86:97:aa:1a:1a:
e5:75:a5:f4:c3:83:2e:b2:58:d1:bb:86:dc:6a:21:4c:cf:bd:
7e:0f:98:c0:0d:84:04:9b:05:5a:89:f8:3b:82:6b:2b:12:5f:
59:66:98:e5:df:cf:be:5e:a4:55:6b:3b:a9:c2:6f:e6:56:4b:
b4:c7:b1:69:b5:07:c3:60:bf:81:44:43:7f:08:be:4d:b1:16:
76:be:21:2f:58:91:d6:86:cd:f4:68:5b:8f:ae:4b:db:3d:7f:
4f:cc:ad:16:6b:e1:68:a1:bc:cb:10:56:19:90:fd:85:50:c6:
a9:9c:68:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:12:51 2026 by rpki-client