Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
File: XYLKb462haVz5dHZH48GEhqwKjc.mft (raw, json)
Hash identifier: S+gs0DxIt+QuqtjV/z+UqQO71AfWKko7IYVd/8lP0Eo=
Subject key identifier: E5:8A:44:BF:AA:BC:A9:B1:9E:69:27:30:C8:71:AA:65:27:A9:FB:51
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 019E20912C494228D20282274C8772B2F86C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
Manifest number: 153F
Signing time: Wed 13 May 2026 09:00:45 +0000
Manifest this update: Wed 13 May 2026 09:00:45 +0000
Manifest next update: Thu 14 May 2026 09:00:45 +0000
Files and hashes: 1: Sg_4XUAI-4zoY2AzgRoGFITRYgE.roa (hash: J1EWDPsgpuehOfFX0CglsLJx+tt5cw97sY3WgurbJXo=)
2: TeQy6kFDHKNYmWvI94KK1SajumM.roa (hash: 9uvICF7tqz4KyCQG2zRzp+9JspsGn3aZOu1Zg1a40nY=)
3: XYLKb462haVz5dHZH48GEhqwKjc.crl (hash: vfv7Ec/RyUxFT9XsSQ7K2cK+lgDhHBFisBPqihx4SZw=)
4: dhOZf_4fAgQZi4_moQSI8o9EFj0.roa (hash: 5T/3rUQwrhAAxuFwErHVP6jvrc57b61OVidSPKCnMBE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:2c:49:42:28:d2:02:82:27:4c:87:72:b2:f8:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: May 13 09:00:45 2026 GMT
Not After : May 14 09:00:45 2026 GMT
Subject: CN=e58a44bfaabca9b19e692730c871aa6527a9fb51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:75:93:99:56:bd:26:99:d9:56:e6:17:70:
b8:fd:6b:27:82:e1:06:ee:fb:6e:5c:e7:23:78:a0:
3a:4b:e8:c2:db:59:2c:23:64:d8:dd:9f:08:25:cf:
be:62:a2:e2:b4:44:95:b5:31:75:1c:cf:78:79:aa:
42:e7:96:2f:69:85:0c:5a:ed:fd:2d:9f:55:9a:76:
9f:76:81:45:26:c8:28:73:af:88:6f:06:34:ce:05:
87:c1:96:20:d6:18:af:f2:92:a2:14:1f:f9:1f:4f:
0b:e1:48:24:24:c5:83:3c:5f:e3:dd:38:47:0b:52:
e4:99:e6:f6:46:c8:ee:99:63:39:9f:a1:af:1c:9d:
7e:1c:18:ae:4a:16:81:95:0b:2e:67:4b:75:3f:b7:
cf:15:b2:61:c9:79:8c:cf:04:cc:d4:fb:ca:28:d5:
a3:4f:5b:18:b3:1a:6f:c5:14:09:6f:4b:b2:8d:7f:
e8:d9:75:fd:fe:54:99:5e:63:61:e2:c7:df:3f:20:
41:ac:34:ae:b1:65:cc:48:4d:15:f6:f5:2f:ca:29:
5e:c5:aa:34:e1:b6:f4:af:88:0b:be:6c:78:a6:4b:
e8:e3:a3:61:2f:96:d5:54:6c:b6:d9:93:ab:e5:2e:
a7:cf:cc:d2:5c:b2:2a:9a:62:de:13:a6:75:1f:59:
70:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8A:44:BF:AA:BC:A9:B1:9E:69:27:30:C8:71:AA:65:27:A9:FB:51
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:96:77:24:95:42:cc:7c:78:64:44:6b:ef:ae:42:0f:ec:6e:
70:a5:66:04:bd:b1:fa:ac:a4:5d:3b:28:fd:66:f7:58:8d:1f:
2b:48:05:9a:91:7c:69:6d:b5:32:ba:16:24:4d:06:ef:7c:1b:
5b:61:0b:be:85:41:57:85:cc:a5:6e:58:9d:17:fe:a0:6a:8a:
9c:c9:76:1e:61:a6:b6:c3:12:db:56:e6:74:7e:36:55:fc:9c:
02:82:ef:1e:d2:d0:69:4e:1e:9b:79:ed:d1:ca:8d:65:68:1e:
b3:73:e8:24:5a:bd:f6:d5:ae:01:59:88:9f:3c:71:cc:d4:92:
78:d8:87:74:c4:38:c4:d2:68:28:10:3b:0d:d9:96:c7:26:35:
5a:20:83:31:3e:8c:67:b2:7c:2d:51:65:e7:7a:40:e7:c4:05:
72:40:90:89:47:05:c7:8e:87:be:2a:d3:db:39:18:cb:a8:e2:
fc:e5:cf:6c:e4:8c:f8:c2:09:0d:f1:79:84:df:66:95:d8:66:
65:df:a9:1e:fe:80:1e:9f:cb:e7:54:70:79:cc:a2:b2:fd:24:
00:4f:61:51:3f:dd:93:f6:23:3b:b2:a8:25:f4:dd:bb:a9:62:
91:13:fa:dd:bb:3c:ac:1c:ec:63:cc:d4:89:10:8c:dc:f2:6c:
42:06:ab:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:31:44 2026 by rpki-client