Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
File: xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft (raw, json)
Hash identifier: OZ4ZfLH6JliXFbZyInvb8tDvRjzMIbjTaw0AeQBHKnY=
Subject key identifier: F4:81:94:B8:06:3D:E9:00:9E:6C:33:C7:37:F7:53:F5:5D:3E:2D:4B
Authority key identifier: C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42
Certificate issuer: /CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
Certificate serial: 019E1D907286F6B4D88354F4CF90243107F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
Manifest number: 4C
Signing time: Tue 12 May 2026 19:01:06 +0000
Manifest this update: Tue 12 May 2026 19:01:06 +0000
Manifest next update: Wed 13 May 2026 19:01:06 +0000
Files and hashes: 1: YPZjGGUztC1i2ZNYvGgdAsuXTgo.asa (hash: K4CEQz/XSFN1g13QszcoyDmffxNfF6QeHPnFTt4rvN8=)
2: xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl (hash: Kz94zgrsjf55nRntYpu2kJSggQbUjpwpftNfJGwF+hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:72:86:f6:b4:d8:83:54:f4:cf:90:24:31:07:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c568ef78c3cfe985e01e753d5f45ea67511b9e42
Validity
Not Before: May 12 19:01:06 2026 GMT
Not After : May 13 19:01:06 2026 GMT
Subject: CN=f48194b8063de9009e6c33c737f753f55d3e2d4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:07:dc:d1:27:39:6b:41:d5:90:1a:fd:2a:89:
f8:57:e2:02:bc:80:99:88:6b:b8:9e:cc:e5:98:90:
d1:cc:19:f7:7a:7b:9a:e1:69:ce:34:06:e6:00:7f:
ee:32:84:20:09:09:76:32:70:d2:94:af:06:7a:18:
dc:68:73:76:5e:1b:56:51:58:35:94:4a:f6:37:37:
c3:b2:19:27:94:be:37:aa:4c:8f:46:ff:fb:98:28:
c8:b0:6f:1e:59:4e:71:80:3c:b6:69:fe:b5:42:ac:
a4:86:0f:be:8e:ba:55:31:88:a8:80:17:78:7c:7d:
3e:46:0f:61:83:4e:f1:6d:51:e5:95:70:08:9b:f1:
43:dc:86:65:00:d4:64:67:94:50:f3:b1:e4:77:f4:
dd:a2:04:4e:2b:b0:86:f1:93:2f:22:be:3c:ca:17:
53:dd:32:db:2c:46:8a:be:93:0b:0d:da:f0:4e:f5:
b0:b5:dc:a0:1e:72:f6:60:19:8e:b3:3d:47:4b:80:
b9:a4:81:b6:c7:1d:83:bb:7e:27:8e:57:06:ba:a1:
59:8e:4d:ac:bf:44:d4:a7:13:b5:9e:02:7c:93:83:
e1:b8:51:4e:66:97:65:2a:5e:e8:fc:9a:0a:06:52:
7b:f0:e1:2d:30:e6:57:33:1d:c7:2f:51:fb:ab:3b:
11:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:81:94:B8:06:3D:E9:00:9E:6C:33:C7:37:F7:53:F5:5D:3E:2D:4B
X509v3 Authority Key Identifier:
keyid:C5:68:EF:78:C3:CF:E9:85:E0:1E:75:3D:5F:45:EA:67:51:1B:9E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xWjveMPP6YXgHnU9X0XqZ1EbnkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/af0620-dd9e-47e6-a874-265011f104d6/1/xWjveMPP6YXgHnU9X0XqZ1EbnkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:a3:8a:c5:01:4a:62:5c:cf:27:d5:3f:98:90:a7:b6:87:e8:
79:54:22:28:af:43:08:c4:78:94:de:f2:3b:aa:05:5d:1c:5a:
78:2f:b1:5c:b6:6e:8e:ba:a4:ef:a6:7d:f6:fb:69:30:34:ed:
8b:c5:48:bd:62:7f:d8:52:e7:3b:85:28:ea:5f:69:14:c4:e6:
a9:9c:9e:89:f5:d9:99:0d:56:a4:87:69:26:20:c4:46:8e:17:
9a:8a:d8:a2:34:2f:57:b1:8d:c5:fc:5a:5f:63:bb:62:74:df:
5f:c3:12:5c:18:a2:13:cd:4b:c7:23:cd:99:15:96:ec:57:6c:
88:4e:09:98:38:ea:20:b2:93:65:2d:90:32:4d:d3:8d:ef:db:
ce:fb:cd:d9:aa:4c:d4:74:b8:8a:32:68:99:16:a5:fb:b9:de:
fc:de:3a:5d:5d:e4:42:fc:df:48:96:54:a6:e3:3a:f2:99:6a:
3d:95:b8:b8:a2:c7:38:96:de:02:53:bd:30:9a:1b:35:46:b1:
7e:83:dd:e2:cc:10:3d:00:0e:dc:08:cb:b4:05:26:5a:90:ea:
5e:ce:39:fb:5e:c3:cd:ec:50:8e:9d:57:2b:e4:25:86:d9:34:
a1:6c:bf:32:b0:b2:7b:ec:62:ba:b0:68:b8:73:ce:a5:26:86:
ca:64:c2:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:42:04 2026 by rpki-client