Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
File: XiZI8SkNRHG821C4K-TtkyADCU0.mft (raw, json)
Hash identifier: 1iGd7kHjrspro3A3+hl42n6m9rB9rGqUm5O7Lgn13vY=
Subject key identifier: 0F:20:E2:56:17:AC:74:46:0C:2B:07:83:9C:99:5C:26:9B:06:E2:B7
Authority key identifier: 5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
Certificate issuer: /CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Certificate serial: 019E1FED03CFE5F669EBF7999098E2FF3F22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
Manifest number: 1899
Signing time: Wed 13 May 2026 06:01:27 +0000
Manifest this update: Wed 13 May 2026 06:01:27 +0000
Manifest next update: Thu 14 May 2026 06:01:27 +0000
Files and hashes: 1: XiZI8SkNRHG821C4K-TtkyADCU0.crl (hash: imsRzAp8UUfilktY7VIf6Us1ccP2Q7IUDtI2UyT7rto=)
2: sq8rzyi0UVog1iS5Ju1CZc-6dl0.roa (hash: hTNSZci/jvQbgI5g6zcbraZud5VHWLa8WEC2pVISMYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ed:03:cf:e5:f6:69:eb:f7:99:90:98:e2:ff:3f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e2648f1290d4471bcdb50b82be4ed932003094d
Validity
Not Before: May 13 06:01:27 2026 GMT
Not After : May 14 06:01:27 2026 GMT
Subject: CN=0f20e25617ac74460c2b07839c995c269b06e2b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:15:78:bc:00:3c:1f:31:1a:24:a8:3d:1e:ad:
ed:02:9b:09:ff:9e:d5:e5:5a:3f:23:ab:94:98:41:
b6:cb:b2:e6:78:49:8c:0f:e4:6c:3e:b5:74:ca:3a:
ac:20:e1:88:63:eb:fc:04:df:f3:dd:47:0b:7d:c8:
63:c5:40:5b:b7:df:1d:d1:a3:f4:b6:7e:20:e4:4f:
4b:7b:7d:40:a9:02:33:ca:6b:7d:c9:67:8d:96:f9:
0b:bd:4d:41:08:cf:b1:cd:33:b5:64:f4:b7:b4:8f:
85:f9:16:e7:2e:1d:05:43:dd:de:29:be:b5:2f:1c:
e8:0f:b3:c7:da:b9:70:c0:87:1d:6d:a5:9c:c2:3a:
22:52:b3:33:f1:30:c6:5a:1f:85:30:04:ae:ff:ed:
ef:b3:79:88:9a:db:63:8a:e9:61:4e:a4:9d:ce:88:
e4:90:f6:d3:33:16:0d:4c:99:9a:20:2f:c0:c7:b3:
d6:e3:0d:75:c8:cd:91:05:f8:6c:26:02:d4:97:b8:
62:01:ca:ed:a5:6c:e4:54:f5:f6:ee:64:34:e2:7d:
22:ec:15:9d:ec:a6:de:22:0a:89:47:85:1a:6f:6b:
a6:1d:1e:91:bf:8c:33:16:5f:aa:55:ac:97:4f:a7:
49:14:d2:a8:1d:98:04:7e:a4:5c:ab:a1:b7:a1:3c:
ab:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:20:E2:56:17:AC:74:46:0C:2B:07:83:9C:99:5C:26:9B:06:E2:B7
X509v3 Authority Key Identifier:
keyid:5E:26:48:F1:29:0D:44:71:BC:DB:50:B8:2B:E4:ED:93:20:03:09:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XiZI8SkNRHG821C4K-TtkyADCU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bc4c53-0db5-4f11-84f6-f55fcdf97846/1/XiZI8SkNRHG821C4K-TtkyADCU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:51:dd:ac:0f:5b:df:98:6c:26:54:85:40:69:cf:0b:d7:37:
12:a1:02:d3:a4:28:05:1e:8b:7f:23:a7:52:16:40:26:f2:b2:
8a:f2:f9:60:5f:5e:17:40:b7:38:c1:2e:b1:12:7e:6d:e7:84:
a4:d3:45:dd:79:b2:70:06:29:f8:6c:84:5f:85:25:bd:b0:45:
39:0c:07:f5:a7:34:35:da:68:da:e7:0f:c2:2d:9c:13:f2:9c:
6a:59:f5:82:50:57:13:a5:fc:16:53:2d:57:89:74:ee:1c:bf:
ad:5b:9b:53:86:35:b7:63:41:c4:46:4b:86:1e:5e:67:fc:8c:
e4:4a:2c:a0:49:4f:d5:4f:44:32:4b:74:3f:89:a8:6f:4d:6c:
95:48:f8:26:b1:23:1e:39:b5:c0:05:a6:54:c6:29:b4:30:17:
27:1e:f9:39:b3:bb:2a:76:ce:89:00:7a:ff:17:d3:03:c6:a2:
29:d3:1e:5c:58:25:f0:a0:25:bb:ac:e1:8b:18:36:cf:a8:2f:
67:9e:42:cf:20:f9:25:c2:8b:c0:b3:98:d3:00:97:27:fd:e0:
d8:1c:e7:be:1a:b3:e5:98:26:f7:98:07:77:b9:ef:91:63:e5:
e3:d4:82:21:09:5b:c0:6d:f0:af:ff:01:1d:f1:71:18:c6:4c:
b4:96:7d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:36 2026 by rpki-client