Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
File: XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft (raw, json)
Hash identifier: GlEPbIBFp4aYsFsXGNTmlmwOP4iA9gPgQtve1J/GrHc=
Subject key identifier: FA:3F:6B:1D:8B:81:36:77:17:EC:88:5B:AE:2C:8C:8B:F8:17:3C:DC
Authority key identifier: 5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
Certificate issuer: /CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Certificate serial: 019E1E6C226D36B4B575611A8FAB0A2717E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
Manifest number: 190C
Signing time: Tue 12 May 2026 23:01:03 +0000
Manifest this update: Tue 12 May 2026 23:01:03 +0000
Manifest next update: Wed 13 May 2026 23:01:03 +0000
Files and hashes: 1: BVjAALpJvxuQy2GyePspuTkr6KE.roa (hash: n2Oqqyn+P3DE0EdI3BsAkGnYPcIXpRm9D9/3qqS3Klw=)
2: XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl (hash: cEFecQdYPofXqU47r+N/bna7db6/FN9B1BHkenK6FY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:22:6d:36:b4:b5:75:61:1a:8f:ab:0a:27:17:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df5ed040efe2e581754deb5c3cd82d99dfee8d9
Validity
Not Before: May 12 23:01:03 2026 GMT
Not After : May 13 23:01:03 2026 GMT
Subject: CN=fa3f6b1d8b81367717ec885bae2c8c8bf8173cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d2:07:04:44:ae:a5:79:aa:8f:cb:ae:e5:05:
2b:0a:57:95:5f:31:4a:d6:c2:07:39:77:3e:e5:65:
42:93:9e:d7:fc:85:84:76:68:57:49:9c:13:02:0b:
63:df:09:fc:f3:f1:9b:e1:9a:63:4d:4c:e7:8b:81:
8a:6b:68:c5:a5:0c:45:8f:38:b5:08:c9:8a:23:62:
73:85:4f:c4:55:66:15:e8:62:c9:5e:ef:b1:f8:04:
01:37:94:f7:e6:df:96:4f:7f:ab:d8:a9:cc:2c:5c:
2c:08:0d:43:23:ca:42:1c:7d:f0:b3:4f:9f:d0:ce:
6c:0f:e6:8c:ac:43:c9:cd:d5:86:8c:12:f2:ab:f2:
82:1c:d6:2f:28:56:57:f8:19:0e:95:0e:d5:c5:73:
dc:74:e4:46:99:96:54:88:f2:0b:ef:03:f2:d9:74:
f3:19:bd:93:31:10:80:4a:03:b4:2c:f7:cf:04:17:
52:20:ee:92:e9:05:81:9c:8d:b6:72:d0:b8:de:e7:
85:42:44:2c:9f:50:c5:31:02:a5:25:f0:b7:af:da:
5b:1f:51:09:6e:31:36:b5:a0:61:c2:5a:dc:95:fd:
30:13:b4:54:25:fe:ab:62:a8:ac:fe:0c:08:c5:48:
21:ff:8f:54:c1:ad:d4:54:dc:b3:98:03:3d:05:31:
91:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:3F:6B:1D:8B:81:36:77:17:EC:88:5B:AE:2C:8C:8B:F8:17:3C:DC
X509v3 Authority Key Identifier:
keyid:5D:F5:ED:04:0E:FE:2E:58:17:54:DE:B5:C3:CD:82:D9:9D:FE:E8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfXtBA7-LlgXVN61w82C2Z3-6Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b3d76f-6ef9-4c4a-812c-befe4b34c6f0/1/XfXtBA7-LlgXVN61w82C2Z3-6Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:64:21:91:d1:5d:d2:09:28:b8:0e:87:d0:ab:75:eb:98:d6:
47:81:ab:fe:ca:7e:f5:ef:5f:ab:e9:1e:0d:d4:80:2f:62:40:
7d:ce:71:1e:da:7b:9b:91:1d:f9:9c:9f:c7:4f:5d:ed:d3:9d:
92:e6:d2:6f:ef:e6:c4:d5:06:13:96:36:36:23:48:51:94:6d:
ff:12:53:3f:5b:58:c2:10:db:f4:0b:a0:62:9d:55:84:91:8a:
f7:3c:d0:b9:8e:d4:39:49:6f:6f:3f:4a:74:66:a8:be:4b:94:
6c:10:18:dd:ae:fe:88:cb:d0:72:0a:96:c5:24:f5:c0:50:3b:
e4:89:cf:67:8a:24:de:02:3c:05:6d:f4:c6:fb:a1:ef:b9:d9:
df:af:90:fa:f0:92:9a:4d:f3:a0:d6:68:61:c6:b7:39:8e:61:
c6:d9:47:9f:f5:02:1a:41:bd:a9:ae:ed:70:19:e2:85:db:ae:
b9:7d:38:43:97:1e:2c:99:9b:35:c9:16:be:15:88:d6:d5:a4:
5b:ee:49:82:4f:58:f3:38:0c:43:c3:3e:98:3e:1e:72:74:f7:
8e:91:b1:7f:ad:49:1d:19:76:97:2f:22:a2:52:9b:2b:19:8e:
6b:fb:51:56:fd:31:d0:80:68:ce:19:b6:7b:8b:58:85:2b:78:
28:ac:9b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:21 2026 by rpki-client