Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
File: XsF2nT_wQhJGmOMcRytju_G7ta0.mft (raw, json)
Hash identifier: t/iK+N4lEAtJzeTBRpahWlHl1pqhd6MdsfGODpJ4Wro=
Subject key identifier: 09:2B:49:0C:D9:F7:CB:25:E1:14:D6:05:E7:25:35:F1:F5:10:57:E0
Authority key identifier: 5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
Certificate issuer: /CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Certificate serial: 019E1DC7562F363C7B9F18591ADC7A569E09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
Manifest number: 06FA
Signing time: Tue 12 May 2026 20:01:03 +0000
Manifest this update: Tue 12 May 2026 20:01:03 +0000
Manifest next update: Wed 13 May 2026 20:01:03 +0000
Files and hashes: 1: Gkzr8cmq5l-SJW535VAbg6PLMB0.roa (hash: Y4hmK6YPKNo9n40cQMscOcZSxtVZskzUJfJT11sn8vQ=)
2: XsF2nT_wQhJGmOMcRytju_G7ta0.crl (hash: MYQdqK5dxqnzsvUGi3RCUMRVRWFjYYRPNqrmrZRD82g=)
3: w0C9G2qPZJv1Tmc5UTZM1QYjS-g.roa (hash: TVbUTMbWNCbl8qQnJCJFREpOLL2oKxR2j6Nt/ivzOnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:56:2f:36:3c:7b:9f:18:59:1a:dc:7a:56:9e:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ec1769d3ff042124698e31c472b63bbf1bbb5ad
Validity
Not Before: May 12 20:01:03 2026 GMT
Not After : May 13 20:01:03 2026 GMT
Subject: CN=092b490cd9f7cb25e114d605e72535f1f51057e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:2c:92:76:35:8c:32:6f:66:0e:21:d1:3b:0e:
a9:bc:78:ec:ed:2f:a0:34:a0:71:4c:7c:30:78:9b:
e3:6b:8f:5e:c7:c9:07:68:e3:07:e1:47:ee:1b:59:
55:12:02:63:ae:82:e7:67:2b:b9:90:23:1b:47:b0:
9a:15:c4:11:0d:43:ae:7f:fc:24:8d:5e:de:fe:c9:
73:cc:e1:ea:1b:82:5c:10:67:be:f7:73:da:2b:a9:
9d:ce:82:86:f1:46:8d:24:38:1b:85:bc:9e:60:64:
2d:46:6c:d2:70:22:df:93:93:0b:96:7d:e7:52:e4:
8a:2d:84:2b:76:66:3e:46:57:9c:78:4d:48:aa:67:
60:5b:56:f5:14:eb:15:23:eb:2b:71:4a:33:88:34:
95:7f:c0:7c:96:69:32:32:c6:70:69:6e:1f:12:5a:
50:df:8e:db:9b:37:e9:bd:72:9c:26:8f:2e:de:de:
2d:59:5e:0c:5e:75:64:e9:26:26:09:43:a8:8b:2a:
20:73:9e:2c:36:7f:b7:0f:22:13:43:fc:20:cb:6a:
8f:d7:6c:ef:74:9a:57:4f:d8:50:52:ce:78:4e:3c:
75:5d:07:ea:9a:fc:c3:ac:8a:d2:5d:1a:78:d2:08:
7b:d6:7b:9b:f0:00:f6:b1:7e:93:b5:53:c6:7d:65:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:2B:49:0C:D9:F7:CB:25:E1:14:D6:05:E7:25:35:F1:F5:10:57:E0
X509v3 Authority Key Identifier:
keyid:5E:C1:76:9D:3F:F0:42:12:46:98:E3:1C:47:2B:63:BB:F1:BB:B5:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XsF2nT_wQhJGmOMcRytju_G7ta0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/29fb04-e07b-4e30-b8f5-54204ddd2ca6/1/XsF2nT_wQhJGmOMcRytju_G7ta0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c4:58:e9:be:c8:85:d3:b1:e4:39:99:86:55:ac:9b:1c:35:
89:c4:91:8a:30:d8:f0:5c:3b:18:c6:b5:4f:1c:0f:1f:91:02:
c6:16:78:5b:bd:c1:68:e2:17:50:27:6f:45:4c:4e:53:2a:4d:
63:6e:c4:3d:99:2c:7b:73:cf:d5:90:c4:f9:d5:a6:77:93:a8:
83:9f:59:8c:b6:e6:98:a6:5e:22:20:11:e5:24:ed:34:03:fe:
81:d7:79:6a:65:23:94:01:62:9f:49:a2:6f:37:21:9d:1a:6d:
ea:e3:35:65:5f:70:d0:4c:62:64:ff:30:7f:79:b0:81:3a:92:
42:d1:1b:db:3f:b2:a9:bd:82:00:33:8c:11:32:ce:d8:ed:e2:
b5:91:9a:80:87:b9:f7:a9:64:12:c3:b0:9e:53:b9:e2:bb:aa:
73:3c:91:6c:8b:b6:cb:e6:09:46:8a:17:49:5f:eb:15:6e:6c:
7f:0c:c6:16:a4:df:82:11:fc:ce:00:3f:86:d9:4a:c9:e1:96:
06:67:d5:b8:06:9d:8e:38:e7:72:88:e0:c9:fc:6e:6f:f9:58:
8b:1d:30:35:1b:bc:03:ab:93:c5:69:b6:62:59:bc:f9:93:c5:
5f:52:32:b3:b2:57:8c:1d:bd:36:b4:95:d2:4f:35:c1:8e:c0:
91:51:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:48:57 2026 by rpki-client