Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
File: 500-XZlL7NPyWMQd858fY-xWPh0.mft (raw, json)
Hash identifier: 6k9YqZV48AuBpHPs60FsD2unWD4OsOOGyJ+x1MareGk=
Subject key identifier: 29:73:07:E1:B2:C2:B2:E0:26:3E:EC:94:E1:B0:9A:7F:71:BA:B4:87
Authority key identifier: E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
Certificate issuer: /CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Certificate serial: 019E1D22FF2B4C8D8A2A3D520407A3B9FC67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
Manifest number: 12B0
Signing time: Tue 12 May 2026 17:01:33 +0000
Manifest this update: Tue 12 May 2026 17:01:33 +0000
Manifest next update: Wed 13 May 2026 17:01:33 +0000
Files and hashes: 1: 500-XZlL7NPyWMQd858fY-xWPh0.crl (hash: 0ad5WQ1kvSIcufdKMXLCl/cLQIKFuteGXZ1xJBdFbnc=)
2: xJQkEE-myuee2xusX84h4jOXGkk.roa (hash: bgfimRITzgygmGvHr8W4DzraqoP9/oX3mukFAiSIHn4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:ff:2b:4c:8d:8a:2a:3d:52:04:07:a3:b9:fc:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e74d3e5d994becd3f258c41df39f1f63ec563e1d
Validity
Not Before: May 12 17:01:33 2026 GMT
Not After : May 13 17:01:33 2026 GMT
Subject: CN=297307e1b2c2b2e0263eec94e1b09a7f71bab487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:88:d4:81:a0:d0:d4:33:03:d0:8a:c0:d6:44:
7a:fe:f0:6e:0d:53:26:d6:d7:5a:43:d8:9e:df:23:
bd:dd:bf:c0:42:f3:4d:30:1f:b4:8f:41:76:1e:e5:
f3:74:79:0a:f2:12:10:f6:39:5f:ea:79:73:59:66:
e1:3a:43:a9:ec:a1:b0:f9:6a:84:4a:2c:e8:a0:b3:
44:22:8f:b1:a5:17:d2:d0:5b:4c:fb:fe:19:26:34:
45:8d:a7:b6:8d:3c:7c:2b:cb:9f:61:32:df:ae:10:
88:a5:c0:49:31:40:cc:55:e7:01:00:f2:fb:7f:4c:
ed:a4:24:9f:05:ee:90:54:5f:b9:a5:0a:4e:3d:40:
2c:e4:cc:a6:5b:16:39:4b:a7:8f:1a:c8:9f:1b:dc:
5a:b1:9a:03:84:72:55:fe:04:f3:1b:df:31:07:a3:
04:7a:6c:49:e3:aa:b7:2c:35:2d:a2:1e:20:44:0f:
04:4f:0f:58:bc:cc:d7:16:87:4f:70:20:1d:09:66:
9e:20:77:32:4e:d5:d0:1e:db:c7:3e:9f:16:34:bc:
92:c6:0e:5a:ad:50:62:76:76:89:ad:1c:73:09:16:
55:7f:f1:f1:0d:2a:f6:d7:ba:a3:55:f1:ee:4b:8b:
50:a7:21:42:da:12:f8:86:8b:b7:67:bd:65:9f:32:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:73:07:E1:B2:C2:B2:E0:26:3E:EC:94:E1:B0:9A:7F:71:BA:B4:87
X509v3 Authority Key Identifier:
keyid:E7:4D:3E:5D:99:4B:EC:D3:F2:58:C4:1D:F3:9F:1F:63:EC:56:3E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/500-XZlL7NPyWMQd858fY-xWPh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/42e24c-21f5-441f-b6bc-c23d7adbebdc/1/500-XZlL7NPyWMQd858fY-xWPh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:09:d2:54:ea:68:5d:d7:eb:5a:9b:68:c1:03:c2:90:f8:68:
88:9d:81:2c:70:0d:df:2b:2f:59:bd:b6:cf:4c:91:29:7c:e2:
13:6d:36:48:65:9b:b8:74:89:cc:f6:b5:13:fa:a5:be:b0:19:
43:47:a0:8f:5e:11:13:d2:6b:dc:cd:56:c1:4c:d4:38:b2:41:
cd:02:9b:b5:42:ec:ad:7e:f4:4d:fd:6b:c7:98:0c:ff:5a:59:
58:e8:c9:5c:6c:2e:38:ed:09:ca:da:e9:c8:1f:dc:12:91:97:
99:c2:71:d2:f5:b2:8e:86:5a:bb:26:6f:05:0e:f5:be:a8:63:
44:59:de:af:2f:b2:84:d5:51:28:07:94:08:b5:24:99:c2:2e:
24:c7:ed:e5:e0:d5:06:3f:8b:e8:dd:83:e0:27:32:7f:fc:1d:
21:af:2c:50:83:de:50:20:8d:c2:77:2d:7c:3c:75:9d:2c:51:
26:e3:dc:b8:75:b5:92:70:e1:33:ac:9a:6e:13:e5:2b:b1:68:
8e:9c:6d:5d:5b:92:ec:dc:4f:af:8b:01:b8:df:33:8b:28:d9:
e0:d7:7a:68:61:f2:6e:ff:79:e4:81:73:c7:51:39:ab:5d:7d:
18:db:33:06:8a:09:bb:7a:66:31:77:07:7e:e1:21:79:85:c0:
c7:1e:95:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:17:16 2026 by rpki-client