Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
File: Xhd799BDVEHRrbFIoizv4dbcwPs.mft (raw, json)
Hash identifier: wycqBAeHuOtzmpR6XNbWP0fjFT9niFeThVDLUDGtD+0=
Subject key identifier: 38:BC:AA:C1:45:B5:C4:E9:F6:25:54:E9:EB:5B:25:89:9E:7A:5A:66
Authority key identifier: 5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
Certificate issuer: /CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Certificate serial: 019E1FECB9FFA6487DB1C1275055EF18E4B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
Manifest number: 39
Signing time: Wed 13 May 2026 06:01:08 +0000
Manifest this update: Wed 13 May 2026 06:01:08 +0000
Manifest next update: Thu 14 May 2026 06:01:08 +0000
Files and hashes: 1: TYV20I1tmXmrFyD5hD9FE4IPKWU.roa (hash: cuvSEP8hQjrQh4a+NJD6WQS8i4OZ31Rtmx8MtCDraCQ=)
2: Xhd799BDVEHRrbFIoizv4dbcwPs.crl (hash: 9MTvsnuS9l3V08cq7Am4RncvQgUMHN2uDazLdw4ZQV0=)
3: s8rf2tML831KhZ_f-0fAXEJkgew.asa (hash: vKjVcHxuUGRJ3DxPFJJe7VWqTLEgv9kq3d3TeM8pLOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:b9:ff:a6:48:7d:b1:c1:27:50:55:ef:18:e4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e177bf7d0435441d1adb148a22cefe1d6dcc0fb
Validity
Not Before: May 13 06:01:08 2026 GMT
Not After : May 14 06:01:08 2026 GMT
Subject: CN=38bcaac145b5c4e9f62554e9eb5b25899e7a5a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:f8:2c:78:25:32:c5:a0:70:02:04:fa:d1:
bd:ba:7d:db:a6:b6:f3:ec:65:5c:79:68:9d:17:66:
43:f0:b4:ab:eb:bc:0a:18:08:34:dc:5e:ed:9f:23:
b6:c5:77:01:68:02:31:19:78:1b:42:6f:0e:d5:67:
d2:22:b8:dd:53:de:c8:12:3b:6b:e8:4c:1f:54:a8:
11:11:15:e4:7f:80:91:2e:11:76:22:88:0d:68:82:
42:d5:20:11:76:50:fc:ce:64:09:34:fd:5e:8e:5e:
64:2c:ce:d3:68:12:42:35:46:01:5f:52:bc:d4:ab:
ac:32:6d:71:e0:88:72:5d:84:3d:9f:73:e1:c5:ee:
27:9e:46:27:9b:9e:09:fe:a6:9d:22:aa:5b:b7:0e:
1f:3c:49:59:b9:bf:df:11:48:d7:38:59:5e:68:18:
84:1d:dd:f4:39:d8:3d:97:9c:2e:40:0e:85:71:af:
23:00:d6:ca:4c:12:78:17:29:86:de:8d:3e:c1:83:
c5:61:f4:40:a9:19:6e:68:3f:50:7f:58:f5:ad:21:
9d:0d:1b:79:bf:8e:0e:38:2f:12:30:22:ee:5f:e9:
94:31:ca:8e:b9:82:49:7e:65:6a:22:0f:ce:8d:7f:
eb:a4:43:ee:91:d8:cc:1d:e2:c7:52:36:d4:81:e2:
d3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:BC:AA:C1:45:B5:C4:E9:F6:25:54:E9:EB:5B:25:89:9E:7A:5A:66
X509v3 Authority Key Identifier:
keyid:5E:17:7B:F7:D0:43:54:41:D1:AD:B1:48:A2:2C:EF:E1:D6:DC:C0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xhd799BDVEHRrbFIoizv4dbcwPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/7687b5-3498-435d-95c4-62478f0da807/1/Xhd799BDVEHRrbFIoizv4dbcwPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:6c:f2:87:be:69:b4:ac:77:a4:a9:d2:85:52:c7:8d:00:56:
d1:27:e8:1f:f2:86:be:38:fa:75:93:7e:07:92:19:d4:da:95:
ce:04:87:6c:a5:4c:dd:28:07:a8:19:d5:9c:de:78:19:fe:28:
bf:35:0b:18:5c:0f:50:75:9e:77:7d:35:74:4b:10:19:3c:39:
c6:3d:ee:a5:68:3d:f3:07:3b:8f:84:c1:a7:73:8f:c9:c8:b6:
b8:aa:b8:b2:53:61:e2:d0:e3:11:e1:7f:27:a0:63:7e:15:96:
77:ff:96:a0:68:1e:ea:27:41:8e:b8:fb:52:14:c8:1d:c0:e8:
ed:13:86:59:42:e3:f2:3a:5d:bd:c5:7b:17:16:7c:88:d8:bb:
2e:91:3b:f4:72:85:b1:85:20:17:b6:fd:8a:22:87:08:db:c3:
76:6c:62:7b:c8:22:b2:28:87:98:c5:8b:cc:04:9a:e3:23:c7:
6c:25:3f:58:d3:e6:61:8e:c1:be:11:f5:d3:db:b2:fc:66:5f:
aa:7c:35:78:21:2a:50:e8:64:26:ae:0f:8b:7b:70:e7:98:9a:
b4:ff:86:12:39:6d:e1:80:e7:07:32:fd:ee:ff:72:38:fb:eb:
23:88:f3:0c:ab:c3:57:ab:a3:ca:61:bb:7c:1c:99:3f:50:c4:
df:69:ce:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:51:32 2026 by rpki-client