Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: 26XBWEC6D1aSGMFEXu2KwVNwctZOxJiQc6raJfe0ek0=
Subject key identifier: 84:6B:A0:46:F5:BC:97:44:3C:F5:EB:85:3B:1D:AC:EF:22:33:54:57
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 019E1FB5C3FCE1C2AE26DC173C9686927492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 190F
Signing time: Wed 13 May 2026 05:01:06 +0000
Manifest this update: Wed 13 May 2026 05:01:06 +0000
Manifest next update: Thu 14 May 2026 05:01:06 +0000
Files and hashes: 1: L40pPH6TicBG2s3pYm_kCH0QuH8.roa (hash: T9wzscjITMGr1trkfg1j7FXPyni8Fc+OiviUYZ5c/0E=)
2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: 1rFVjRTCG89r2n3fktZVRtJY3pOEtZAM1OutKrR9v1k=)
3: gNRTXqvX6_SOefWF3gs0Zjt3u6g.roa (hash: toLN8jyYGEpflA8o2E1g113inHytd59XB0YwnsonQoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:c3:fc:e1:c2:ae:26:dc:17:3c:96:86:92:74:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: May 13 05:01:06 2026 GMT
Not After : May 14 05:01:06 2026 GMT
Subject: CN=846ba046f5bc97443cf5eb853b1dacef22335457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cc:be:b3:ac:78:b1:e4:cf:10:b0:29:44:0b:
74:2a:71:b8:45:c8:14:5a:6c:03:b3:35:1e:32:ab:
37:39:4c:53:e3:a9:9a:d7:6e:5a:c8:58:73:b1:59:
2d:e7:15:22:c3:d5:40:45:e2:29:f6:aa:d1:d1:25:
bb:e7:c3:3c:1a:75:1d:4d:7e:2e:24:b2:e0:63:a9:
0f:bc:cf:1a:e8:c4:15:54:3b:a8:04:1a:3f:5d:9e:
c6:6f:e6:43:e0:23:0e:c6:8e:8c:61:57:25:01:27:
79:ca:d6:32:91:94:da:d4:f3:8e:95:dd:ee:61:15:
93:10:94:c4:4a:8f:3d:c6:77:3d:81:d7:9a:83:06:
d2:4a:66:36:0d:2f:04:5f:65:f7:2b:60:6e:a6:79:
79:16:c9:ba:24:36:46:54:6a:b1:c3:1a:8d:bc:16:
f4:f1:e4:e4:76:2f:fb:7d:90:36:ac:6a:f0:32:87:
27:47:2a:db:35:52:d8:99:76:7f:f4:9b:89:0e:d8:
68:18:65:d5:e7:af:0b:de:81:89:c7:c4:20:bf:ff:
73:98:8d:c9:4c:8b:ae:a6:65:92:7b:8e:b5:db:e2:
6c:5c:68:b1:46:0e:e5:93:cc:f0:f9:e7:b6:a7:f6:
b5:74:26:c3:49:21:6e:6f:4d:bd:ec:1b:96:13:05:
d9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6B:A0:46:F5:BC:97:44:3C:F5:EB:85:3B:1D:AC:EF:22:33:54:57
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:07:59:89:bb:33:fd:b4:f1:29:ba:0a:de:44:b5:58:bc:ce:
81:52:08:20:91:01:5b:b9:da:5e:a9:bc:7e:ef:6b:b0:79:42:
42:8c:9a:dd:ac:a5:c1:95:c7:5d:90:64:8d:fb:0d:cd:b5:4c:
2b:78:c6:38:ae:4d:ab:85:74:02:c5:78:76:fd:15:32:80:38:
cb:46:3f:17:21:2b:1f:15:4d:9e:75:0c:6c:40:1d:08:c3:93:
16:91:ee:a5:ab:03:d1:39:5a:70:a2:c7:8b:4f:84:22:21:71:
43:13:ec:2b:19:34:e4:43:74:54:42:a5:cd:2a:99:0d:f1:a8:
2d:bb:55:ee:bb:81:01:6c:f3:81:6d:12:d8:fe:6d:33:75:82:
cd:31:12:80:04:79:ca:11:e7:61:7e:8b:8f:6c:e6:6b:c0:c7:
4f:3b:9e:4d:bf:3d:d4:12:d5:09:a9:00:b8:01:92:6f:b9:72:
2d:48:21:86:0b:9f:9b:e4:76:60:37:58:61:2a:3c:9f:67:d9:
12:07:25:aa:4f:af:94:f2:f5:1b:40:dc:8e:2b:ca:14:8c:6e:
13:69:c8:8e:7f:d7:05:c9:9b:ca:80:97:bd:30:1f:89:de:67:
8e:7b:3a:67:73:06:8a:07:cc:33:48:43:a6:52:96:c6:a9:29:
81:14:f6:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:16:50 2026 by rpki-client