Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
File: xcgmUInL3eamxXnNd2tfgMD4rdQ.mft (raw, json)
Hash identifier: 7/VTwf9oCvOaQSSJySgss9ABsryCmhYuloUkgKv2AK0=
Subject key identifier: 76:83:2D:F7:0B:21:C8:DC:0A:CD:56:E6:D3:58:1C:D1:FF:03:D3:F8
Authority key identifier: C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
Certificate issuer: /CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Certificate serial: 019E1EA3B6746337C657D07E3B679E227745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
Manifest number: 041E
Signing time: Wed 13 May 2026 00:01:45 +0000
Manifest this update: Wed 13 May 2026 00:01:45 +0000
Manifest next update: Thu 14 May 2026 00:01:45 +0000
Files and hashes: 1: m7FhPhHs11a2vSve5xnlsfFohsw.roa (hash: hMpM0IenW1hqeUpQGO4ux70XpFaz54EzPiQ0jMGVOds=)
2: xcgmUInL3eamxXnNd2tfgMD4rdQ.crl (hash: Kw1CadwgmjHetEXg5DB+CM2EGkVQagifw4zLH4li39k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:b6:74:63:37:c6:57:d0:7e:3b:67:9e:22:77:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5c8265089cbdde6a6c579cd776b5f80c0f8add4
Validity
Not Before: May 13 00:01:45 2026 GMT
Not After : May 14 00:01:45 2026 GMT
Subject: CN=76832df70b21c8dc0acd56e6d3581cd1ff03d3f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:12:e9:36:70:ac:9f:ec:7b:11:f3:9a:a1:a8:
63:b1:7c:82:4d:c1:23:78:4c:8c:89:fd:29:18:6c:
62:7e:6a:03:d6:8e:42:ca:e5:89:37:6a:7b:5e:2d:
c1:f4:8e:7f:c7:2a:3e:d9:6b:59:c9:6f:32:f4:1e:
82:35:91:0b:76:ac:6f:c0:78:f9:78:dd:62:45:d8:
13:38:a9:cb:41:12:8e:4d:0f:c4:cb:c8:8e:b6:54:
ed:c4:75:39:b2:42:42:dd:78:f3:c1:1d:4f:11:17:
75:04:f8:e7:c3:36:b9:83:61:eb:5d:5f:86:10:40:
ed:fb:86:20:e1:8a:a3:87:3b:26:89:0a:61:17:6f:
80:cd:8f:44:d0:54:26:55:7b:64:c9:1a:62:7d:a2:
a1:4f:14:1b:9e:bd:5c:e0:43:f9:1e:cd:e3:7e:90:
8e:f5:d8:c0:d5:f8:b9:8a:3f:ba:74:ea:96:16:8f:
94:a8:47:6f:25:bf:47:56:d5:90:1c:a5:70:e3:b9:
b7:8d:a8:b7:88:32:b8:68:6a:61:db:a4:93:6c:3d:
b6:16:8a:55:56:48:b0:91:b2:04:b4:68:99:1c:80:
22:4d:a4:7c:d2:ac:7b:84:c2:cf:ef:ff:20:0d:89:
c2:e1:9a:b7:2f:49:3e:03:26:bc:ea:ea:12:31:a2:
8e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:83:2D:F7:0B:21:C8:DC:0A:CD:56:E6:D3:58:1C:D1:FF:03:D3:F8
X509v3 Authority Key Identifier:
keyid:C5:C8:26:50:89:CB:DD:E6:A6:C5:79:CD:77:6B:5F:80:C0:F8:AD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xcgmUInL3eamxXnNd2tfgMD4rdQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/48c7ec-0c75-41c4-85aa-438820fba254/1/xcgmUInL3eamxXnNd2tfgMD4rdQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:00:6c:58:0a:79:e0:f7:ee:db:9b:3e:64:63:d8:c6:80:ca:
5a:35:fa:a7:1f:21:cb:19:63:b2:50:7c:db:79:16:5f:12:47:
7c:ca:43:49:5d:98:bf:d9:96:3c:6b:5b:48:89:33:d0:78:6a:
ee:f7:97:b2:82:57:46:cd:e3:39:eb:db:b2:ef:96:bd:e1:f0:
94:20:99:ac:7c:96:c1:ec:a4:4f:66:00:eb:78:db:73:07:2b:
72:99:ad:d8:f7:f6:64:80:9c:e5:79:4c:bf:09:31:b7:e2:1c:
28:b8:ac:d1:e8:d3:ce:2f:bb:32:72:76:05:0a:29:fa:01:03:
d9:1b:e8:27:b8:88:c1:bb:e4:14:9c:ed:2a:31:f2:50:31:4a:
c7:25:39:ea:25:30:ff:b9:73:eb:0e:93:13:6c:cb:df:3a:bb:
72:42:6e:5c:68:93:d4:d7:cb:fb:11:08:d3:3d:dc:f9:0c:f3:
09:a6:92:e9:ce:59:6c:ea:bc:ee:51:2b:c7:60:00:8c:6b:b1:
67:f6:ad:ea:bb:4f:e1:4c:78:ee:13:59:39:a9:c6:8f:4e:32:
58:7c:ba:d7:53:a0:ca:bc:f9:d9:b6:67:9a:cf:57:96:77:d8:
ae:53:85:47:28:30:22:3f:7f:ea:09:8b:5d:9b:d4:f5:1d:d7:
33:92:05:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:59:13 2026 by rpki-client