Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
File: XdE5iXay9IdyW8E9f66-0-Ftgsk.mft (raw, json)
Hash identifier: MaO05EazgvUl3nFWk9nTa96wmTu5zc+hfVe0y13lTJU=
Subject key identifier: 83:41:85:46:85:17:9B:BE:89:3E:71:E3:31:31:8B:FE:70:0D:E3:AE
Authority key identifier: 5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
Certificate issuer: /CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Certificate serial: 019E216D028552D49597AB58962ED235D1E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
Manifest number: 0728
Signing time: Wed 13 May 2026 13:00:52 +0000
Manifest this update: Wed 13 May 2026 13:00:52 +0000
Manifest next update: Thu 14 May 2026 13:00:52 +0000
Files and hashes: 1: 1yTxuvJTgzp3vueVNPtMM4HSlnE.roa (hash: C3mQ9ASRyTlSwgnHvOngoGQirohvWMvEni68YFNubqo=)
2: XdE5iXay9IdyW8E9f66-0-Ftgsk.crl (hash: NnSgt16l/NSXt3WqgtFX37JzyL6aTda1tIVFt9BBa4E=)
3: xweu5qCO47VIbmMKNVD40EQTVOU.roa (hash: 2Ggr+oJ9NSlt1DGrtrpkA0zHBUc5XOHY+zg99GvfTiw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:02:85:52:d4:95:97:ab:58:96:2e:d2:35:d1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd1398976b2f487725bc13d7faebed3e16d82c9
Validity
Not Before: May 13 13:00:52 2026 GMT
Not After : May 14 13:00:52 2026 GMT
Subject: CN=8341854685179bbe893e71e331318bfe700de3ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:39:2f:1a:ab:c1:ad:14:e4:43:0a:55:3c:f4:
c4:76:03:c3:79:86:e7:c8:95:9d:49:60:52:5e:fb:
fe:25:48:5b:8c:ee:d8:cd:cb:9b:70:bc:8f:5d:c1:
8e:67:da:75:62:d3:f1:3a:06:59:3b:5c:42:35:4c:
e2:ef:da:6f:f0:d1:16:f0:01:9c:ef:59:a2:93:92:
e1:0a:da:54:35:25:3c:a6:a6:3f:a3:1a:d3:f0:ad:
e8:62:5a:26:6a:5d:9d:7a:2f:ee:94:8f:60:04:b7:
d9:10:d2:22:d2:b6:6a:2f:1f:a3:78:65:00:64:e7:
1d:5c:14:30:c4:87:e8:8a:4c:ed:f4:69:46:76:2f:
37:5d:bf:79:1d:9b:dd:a3:bf:f8:4d:ee:83:b5:ec:
3e:c5:ed:42:f2:0f:22:59:20:e9:ba:01:bd:0c:93:
cf:fb:d2:78:ca:92:fb:56:5a:59:98:a3:80:84:f4:
eb:52:09:13:c1:9f:17:3d:03:31:fa:1e:76:a4:4e:
22:65:97:6e:db:7e:9a:5f:c6:08:4f:ca:63:4b:c7:
36:33:7e:c0:cf:24:ce:e4:a0:90:85:08:d1:11:ab:
4a:e4:29:2b:80:a7:3f:08:81:19:77:c5:fd:b2:54:
f5:0b:80:9f:96:00:79:bf:89:f3:31:d0:22:be:36:
be:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:41:85:46:85:17:9B:BE:89:3E:71:E3:31:31:8B:FE:70:0D:E3:AE
X509v3 Authority Key Identifier:
keyid:5D:D1:39:89:76:B2:F4:87:72:5B:C1:3D:7F:AE:BE:D3:E1:6D:82:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdE5iXay9IdyW8E9f66-0-Ftgsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3e8100-988d-483e-bc86-600810634878/1/XdE5iXay9IdyW8E9f66-0-Ftgsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:ac:db:83:25:97:47:3e:09:cf:6c:37:5b:34:17:67:92:99:
f7:a3:06:c5:0d:b2:49:89:c4:f9:cf:86:28:a5:8c:83:07:69:
41:3b:02:39:4c:67:64:c8:61:ef:2f:51:92:d9:b0:2b:9c:76:
15:9f:f1:d3:2e:3e:3a:be:6e:8f:d7:f8:bc:77:df:44:9f:2e:
b1:a3:3f:39:f0:2d:69:ac:a4:8e:76:99:a6:f2:bd:44:53:a7:
04:01:55:d7:e7:ad:4a:09:bc:e3:36:77:7b:d4:87:c9:8b:0c:
f5:e4:e8:14:a1:95:c2:ed:f9:d4:bc:a6:bc:7e:cc:7c:31:70:
44:8d:81:72:be:b7:66:95:87:3b:01:96:b1:b2:80:49:31:5e:
16:6c:e3:04:57:b8:2a:ba:5c:a3:00:86:96:06:0d:2c:d3:be:
c5:c0:50:fd:d1:98:70:b1:09:93:de:a0:1b:97:b7:75:ba:e8:
cc:38:d6:3d:63:ad:9c:1f:d9:28:8e:a7:de:78:ee:b2:2a:46:
1a:2e:0b:6a:53:d8:fc:2f:e0:68:53:fa:d6:68:76:9f:27:83:
41:10:14:36:af:62:88:82:cc:52:29:ea:ab:f0:ac:1c:1d:d3:
30:36:44:7d:06:3d:e6:5a:07:2a:ed:5a:64:99:37:bd:90:e3:
d1:01:48:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4hbQKFUtSVl6tYli7SNdHlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZDEzOTg5NzZiMmY0ODc3MjViYzEzZDdmYWViZWQzZTE2
ZDgyYzkwHhcNMjYwNTEzMTMwMDUyWhcNMjYwNTE0MTMwMDUyWjAzMTEwLwYDVQQD
Eyg4MzQxODU0Njg1MTc5YmJlODkzZTcxZTMzMTMxOGJmZTcwMGRlM2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4TkvGqvBrRTkQwpVPPTEdgPDeYbn
yJWdSWBSXvv+JUhbjO7YzcubcLyPXcGOZ9p1YtPxOgZZO1xCNUzi79pv8NEW8AGc
71mik5LhCtpUNSU8pqY/oxrT8K3oYlomal2dei/ulI9gBLfZENIi0rZqLx+jeGUA
ZOcdXBQwxIfoikzt9GlGdi83Xb95HZvdo7/4Te6Dtew+xe1C8g8iWSDpugG9DJPP
+9J4ypL7VlpZmKOAhPTrUgkTwZ8XPQMx+h52pE4iZZdu236aX8YIT8pjS8c2M37A
zyTO5KCQhQjREatK5CkrgKc/CIEZd8X9slT1C4CflgB5v4nzMdAivja+ZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINBhUaFF5u+iT5x4zExi/5wDeOuMB8GA1UdIwQY
MBaAFF3ROYl2svSHclvBPX+uvtPhbYLJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi8zZTgxMDAtOTg4ZC00ODNlLWJjODYt
NjAwODEwNjM0ODc4LzEvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi8zZTgxMDAtOTg4ZC00ODNlLWJjODYtNjAwODEwNjM0ODc4
LzEvWGRFNWlYYXk5SWR5VzhFOWY2Ni0wLUZ0Z3NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJqzbgyWX
Rz4Jz2w3WzQXZ5KZ96MGxQ2ySYnE+c+GKKWMgwdpQTsCOUxnZMhh7y9RktmwK5x2
FZ/x0y4+Or5uj9f4vHffRJ8usaM/OfAtaaykjnaZpvK9RFOnBAFV1+etSgm84zZ3
e9SHyYsM9eToFKGVwu351LymvH7MfDFwRI2Bcr63ZpWHOwGWsbKASTFeFmzjBFe4
KrpcowCGlgYNLNO+xcBQ/dGYcLEJk96gG5e3dbrozDjWPWOtnB/ZKI6n3njusipG
Gi4LalPY/C/gaFP61mh2nyeDQRAUNq9iiILMUinqq/CsHB3TMDZEfQY95loHKu1a
ZJk3vZDj0QFIIA==
-----END CERTIFICATE-----
Generated at Wed May 13 15:19:01 2026 by rpki-client