Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
File: xhKt-r-RXfMxmJNYCM8N-XONyoc.mft (raw, json)
Hash identifier: S5hVv+ISoQVYbnQfCBWd3nqt943rzgfNim+zeRNje/k=
Subject key identifier: 01:D8:74:24:49:A1:E0:10:9E:20:92:E8:D9:33:9B:EB:30:BA:82:90
Authority key identifier: C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
Certificate issuer: /CN=c612adfabf915df33198935808cf0df9738dca87
Certificate serial: 019E1DC6F6B078656A5B3CF6BB3D97F34756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 20:00:38 +0000
Manifest this update: Tue 12 May 2026 20:00:38 +0000
Manifest next update: Wed 13 May 2026 20:00:38 +0000
Files and hashes: 1: 8bjq5CLAkMYnJtGthdYrockLCPY.roa (hash: eDG4zg9ilYUKjh0gJA5+ITJl6INuXH1V6df209hapIs=)
2: xhKt-r-RXfMxmJNYCM8N-XONyoc.crl (hash: nbyMTqb7PA2o7BNRGEacMXtmUqok+NPBMKDdUd3hvpY=)
3: y6q-4aOfHflX0pozAnd7z21SiEw.roa (hash: BNrcMKA3+AgY/9eYfHPZuG3AM/va4c4zSTiZb/uHiLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c6:f6:b0:78:65:6a:5b:3c:f6:bb:3d:97:f3:47:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c612adfabf915df33198935808cf0df9738dca87
Validity
Not Before: May 12 20:00:38 2026 GMT
Not After : May 13 20:00:38 2026 GMT
Subject: CN=01d8742449a1e0109e2092e8d9339beb30ba8290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:f0:6e:44:c3:ef:42:10:95:5c:b9:60:65:
45:2d:ed:ad:a3:19:73:b8:47:c1:ce:fe:f7:61:5f:
5c:54:8f:1a:ed:c5:2b:3e:1a:54:35:3c:d3:df:38:
8f:a0:e2:c1:53:1e:ec:b6:d4:be:c3:72:52:29:f7:
9d:3c:6d:ed:1a:92:c4:95:e6:b0:4b:59:3a:00:50:
fb:f7:9b:75:b1:b2:8d:87:29:5f:77:d8:27:22:ca:
96:8e:6b:13:bd:0d:60:cf:93:d5:40:ed:d7:cd:63:
b2:72:3e:e2:c0:66:e6:68:0c:50:de:69:28:40:88:
e5:5a:1e:bc:25:0e:36:68:83:5b:4e:c7:ab:75:de:
14:b4:f2:f3:46:d5:ff:17:4a:6c:cd:f7:24:aa:3f:
da:43:9d:38:9e:1d:00:b9:ff:57:e3:dc:a0:d0:62:
a7:82:1a:28:ee:07:1a:c3:3b:d1:22:f8:fb:7b:fa:
07:c9:a7:57:35:b2:48:8b:1c:0a:3a:29:2e:74:88:
11:19:1a:59:8f:dd:26:c9:fe:73:91:c3:e3:dc:96:
4a:9e:0a:8d:be:b1:ec:1f:de:d1:c0:a1:14:91:26:
e3:aa:1b:f2:18:a0:82:20:2d:66:c5:80:99:6c:65:
86:ef:50:a7:f2:31:d5:28:25:7b:49:bf:4c:92:a5:
51:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D8:74:24:49:A1:E0:10:9E:20:92:E8:D9:33:9B:EB:30:BA:82:90
X509v3 Authority Key Identifier:
keyid:C6:12:AD:FA:BF:91:5D:F3:31:98:93:58:08:CF:0D:F9:73:8D:CA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhKt-r-RXfMxmJNYCM8N-XONyoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/30ab18-d379-4ac7-a908-81a46f4f6d5a/1/xhKt-r-RXfMxmJNYCM8N-XONyoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:63:74:85:a7:a9:a9:f6:7d:0d:79:db:98:99:88:09:42:ba:
4d:df:b6:a4:2b:8e:41:c6:cc:a3:45:69:d2:d0:a2:54:0d:de:
9a:b2:93:99:e7:73:ca:5c:c7:e1:a5:ce:34:e3:97:ab:41:4b:
b2:bf:af:cf:94:48:6a:85:17:e6:6f:26:9e:80:73:84:ee:e8:
a9:d1:ea:5d:2c:89:b1:06:33:1a:e8:fb:cf:f2:6e:36:95:69:
ce:bb:8c:f7:68:c1:1b:5e:97:df:d5:54:77:ce:b6:97:13:4f:
ec:c8:96:5e:48:9f:e8:8d:90:55:ef:9b:42:56:0c:f4:f1:d1:
d2:05:2a:76:82:1e:83:18:dc:60:20:c5:b9:2b:6e:e1:c3:93:
a1:82:a5:e1:48:b0:a0:bc:7a:6b:cf:29:83:04:90:92:34:37:
0b:25:2d:d9:87:35:3f:30:0c:2b:ad:b3:d3:75:23:65:8d:1f:
dc:ba:f5:8f:0c:ee:41:9a:c9:f1:83:4d:26:70:e3:f6:19:fa:
30:d8:91:80:df:22:e4:3f:05:7f:9b:59:54:98:86:09:17:33:
81:56:66:32:11:f7:1c:f9:ca:b3:78:62:c1:67:ab:9b:1f:83:
2d:63:76:d0:91:d6:47:95:c3:29:b9:8c:f7:3f:33:ea:d1:2a:
7f:6a:46:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:10 2026 by rpki-client