Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
File: XPVjIet-o-5Fze0ChmhCDjf6L6w.mft (raw, json)
Hash identifier: 2dfhc+g3S1tjjUFwzR6CSNugF/OBlkvdsOFGUwXESPA=
Subject key identifier: 15:BC:55:29:99:0D:43:1F:F8:9C:07:F9:11:C4:E6:5B:57:68:BD:0F
Authority key identifier: 5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
Certificate issuer: /CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Certificate serial: 019E1DC7221CEF8EB29E764AADF64E68FA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
Manifest number: 1617
Signing time: Tue 12 May 2026 20:00:49 +0000
Manifest this update: Tue 12 May 2026 20:00:49 +0000
Manifest next update: Wed 13 May 2026 20:00:49 +0000
Files and hashes: 1: F7EvqKPuCJrRbauscLqXiKU0tSU.roa (hash: Rn1QP+hzXdWW26eL4q5uEtv+FD1RDx8ao69irkAES9U=)
2: XPVjIet-o-5Fze0ChmhCDjf6L6w.crl (hash: kcINI+mwE7O98lM5hTV+5tZt8dUUGnpvX+y5nZRnaLc=)
3: a7oKAtXpujbjcSp7xIWIBbpbuwo.roa (hash: uOToHNzKGxHUJP96PSZDBVfJ0h4D91Ag2KcuZFpXViQ=)
4: bklYzzrT2LyqE_eolbd4uJqpn88.roa (hash: hL8JImvIqT8exdBOwwwQRZtRNMgq3QcD8ZDf3TXxPgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:22:1c:ef:8e:b2:9e:76:4a:ad:f6:4e:68:fa:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cf56321eb7ea3ee45cded028668420e37fa2fac
Validity
Not Before: May 12 20:00:49 2026 GMT
Not After : May 13 20:00:49 2026 GMT
Subject: CN=15bc5529990d431ff89c07f911c4e65b5768bd0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:11:7f:71:9b:d5:4c:ad:fb:fc:32:d8:d9:26:
56:9e:50:18:85:1c:9a:11:85:ff:c7:0a:70:be:12:
4f:2f:ab:8a:ee:60:bc:1b:bd:f6:cf:c9:4b:3f:02:
b7:b5:53:b9:ef:fa:3b:20:47:9c:76:08:38:a0:4e:
9a:a2:2e:cd:14:d5:a6:26:58:72:0f:61:fd:2a:74:
25:7c:94:ae:bd:56:3e:8a:38:5d:23:b6:bd:fe:0d:
dc:6f:aa:f9:45:21:83:fd:81:b4:46:77:11:62:31:
d5:cc:d8:d3:3c:44:c5:13:a0:34:75:6c:79:7f:f9:
4c:05:4d:4e:13:80:58:47:ec:66:6c:8e:75:4a:51:
68:69:78:e7:60:4b:39:73:b3:9d:3b:63:b3:08:35:
f2:87:40:f7:d4:b1:dd:e6:16:14:e7:95:42:b5:62:
a9:7e:da:76:b4:ab:0a:fd:95:88:94:e6:cf:73:94:
13:7c:df:b4:2a:2b:25:2d:01:51:2f:df:70:bb:aa:
1d:2c:15:5b:ef:e1:ac:42:e4:6d:ae:90:15:4e:6e:
47:80:2e:af:be:92:8d:52:20:23:ef:ea:f1:37:0b:
0f:2f:bb:de:bd:41:e6:ea:1d:b8:70:49:d1:d9:29:
e4:1f:1f:c2:1b:87:8b:56:b2:87:2d:e8:8b:ac:d4:
3c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BC:55:29:99:0D:43:1F:F8:9C:07:F9:11:C4:E6:5B:57:68:BD:0F
X509v3 Authority Key Identifier:
keyid:5C:F5:63:21:EB:7E:A3:EE:45:CD:ED:02:86:68:42:0E:37:FA:2F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XPVjIet-o-5Fze0ChmhCDjf6L6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dfa4a8-38b0-461b-a082-843e262dd8dc/1/XPVjIet-o-5Fze0ChmhCDjf6L6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b3:fb:28:bb:3d:6c:16:bd:d8:f6:92:c2:66:a7:9b:f9:dc:
d2:7a:c5:02:15:61:72:02:9a:53:64:fa:9c:52:a3:fd:2b:7f:
03:44:b6:8b:8f:61:08:53:82:94:74:32:19:4a:11:88:a0:4f:
92:e4:e1:44:1a:55:55:c6:b9:7e:f3:a4:69:04:d7:b5:69:f8:
9a:52:7a:20:e0:eb:b6:97:74:84:f5:24:3a:8f:a1:74:e8:1e:
3c:d0:98:a1:a6:dd:bc:85:de:36:1b:bc:b6:3a:07:60:fb:4b:
5a:73:33:fe:10:ae:26:2b:24:06:f3:5a:f6:85:23:a9:c4:8d:
8b:4e:2c:28:2a:b7:69:9f:d7:c8:95:2a:18:41:05:35:da:c1:
61:d1:29:70:e2:3e:49:45:e3:f5:c4:42:02:c9:5c:27:ee:2f:
53:78:ce:70:cb:b2:22:d6:28:44:3a:9e:30:d1:50:28:54:19:
98:c0:11:1e:76:27:ed:24:c0:d3:a7:d5:2c:0d:c8:67:45:a8:
e6:ef:ef:36:23:df:4e:52:f8:5f:ce:ad:a1:23:2b:7d:24:dc:
a5:c7:39:37:8f:0e:ba:1f:c0:27:ed:8b:0f:97:c9:69:c8:f3:
58:f3:0d:fc:f3:3d:58:4f:e7:90:5a:b3:dc:b6:4c:57:03:33:
7a:d8:20:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:41 2026 by rpki-client