Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
File: XaWsO7omBTjDM-bIYPI2ASyYZ10.mft (raw, json)
Hash identifier: eM9Y3X7VSnjtRswmWSQhfiPRixfADjgFU8HSoXoXn6o=
Subject key identifier: 3F:08:6F:06:BF:F7:D1:1C:69:56:03:D9:E5:18:BE:05:C3:98:4A:27
Authority key identifier: 5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
Certificate issuer: /CN=5da5ac3bba260538c333e6c860f236012c98675d
Certificate serial: 019E1E6C9D473955D3F6D5F1143D3FBB575B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
Manifest number: 1361
Signing time: Tue 12 May 2026 23:01:35 +0000
Manifest this update: Tue 12 May 2026 23:01:35 +0000
Manifest next update: Wed 13 May 2026 23:01:35 +0000
Files and hashes: 1: GqfcLrP9OkUTy-GX1d-k-vfcOX8.roa (hash: XFhkOuqDVaUrmegmAPvZHJBMmOe4H8O6VpNvMvQVK4k=)
2: XaWsO7omBTjDM-bIYPI2ASyYZ10.crl (hash: wYxuebX0ZMQ2rbJ0Rq1tk+JP9fWNHNPZOmS2+ogC/q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:9d:47:39:55:d3:f6:d5:f1:14:3d:3f:bb:57:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5da5ac3bba260538c333e6c860f236012c98675d
Validity
Not Before: May 12 23:01:35 2026 GMT
Not After : May 13 23:01:35 2026 GMT
Subject: CN=3f086f06bff7d11c695603d9e518be05c3984a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:28:05:77:a4:50:e3:4f:8b:f3:46:b3:c0:
63:3f:c8:aa:7c:82:da:01:23:70:be:19:b3:a8:f2:
4a:27:24:b4:4a:f6:31:2f:b1:51:35:fc:3e:60:1c:
79:a4:10:4e:3b:ee:d6:ea:e6:ae:1d:83:d4:ed:61:
fd:34:60:f3:e7:75:f1:d0:cd:b4:4a:36:13:ee:3c:
4c:14:40:1e:c6:b9:12:50:a5:e9:62:8a:eb:03:d1:
ed:03:fc:2b:42:f8:a8:94:ea:cb:13:52:b6:1b:18:
d0:f1:2c:10:8a:ca:71:b5:21:ba:aa:76:aa:31:7c:
3e:60:3b:2c:40:9a:9d:86:96:4b:9f:3d:16:b5:80:
86:e7:b4:4e:51:91:25:4b:92:10:ee:6d:1c:96:c4:
f0:7c:2d:79:01:78:d5:8e:c0:c8:19:41:d4:cd:b5:
16:6b:33:af:e4:c5:9d:48:19:a4:98:c8:ed:14:e4:
99:b1:20:f2:62:48:1c:e7:97:81:75:2e:8a:99:da:
89:e9:16:ed:c5:24:ce:f5:4a:16:51:25:67:81:ca:
f6:e6:8f:0a:22:a7:ed:8b:dd:9d:7c:79:4a:62:77:
5a:f1:21:d4:d8:5d:2c:1b:ba:f7:20:e2:41:f3:63:
4b:77:49:d0:c8:70:c2:06:fc:ae:0e:d1:eb:95:6d:
24:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:08:6F:06:BF:F7:D1:1C:69:56:03:D9:E5:18:BE:05:C3:98:4A:27
X509v3 Authority Key Identifier:
keyid:5D:A5:AC:3B:BA:26:05:38:C3:33:E6:C8:60:F2:36:01:2C:98:67:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaWsO7omBTjDM-bIYPI2ASyYZ10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/dafef8-e227-42d3-807f-be810a050944/1/XaWsO7omBTjDM-bIYPI2ASyYZ10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:9f:d9:27:d2:2b:24:85:97:a4:4a:6a:67:b8:02:d7:fa:c2:
b7:3f:b2:bc:d8:7f:67:ae:0c:16:25:ef:71:d0:65:01:97:5d:
ab:f2:65:5d:9b:82:e7:d3:4d:4a:6d:a9:94:92:a1:de:fe:21:
6c:4a:0a:e0:b2:1d:62:ee:75:65:36:5f:9a:c1:41:19:65:89:
70:08:cb:d4:f5:47:c8:26:b3:d3:ba:de:60:54:f9:54:14:e3:
ae:2f:b0:84:40:1e:bb:74:6d:67:8a:0d:29:16:e9:d0:6c:c8:
c0:04:6f:51:bb:20:04:e0:59:2d:4f:8e:21:5e:2e:73:a6:56:
d1:7c:b1:0c:b4:1c:43:4b:19:93:b7:ba:76:7b:0b:57:4e:e7:
23:8a:25:d1:0e:72:43:3e:9d:8d:5d:44:d5:4b:28:53:80:a2:
d1:09:7b:31:93:b2:14:02:8e:f4:a6:76:19:8f:05:03:39:8e:
47:f4:9f:6b:c7:30:3c:75:f0:7f:8f:9d:0e:e1:7a:b5:63:20:
05:2a:23:d7:d8:ec:95:67:13:f0:88:39:6e:64:df:b5:53:92:
7e:c3:aa:ca:1a:69:11:31:7a:d7:f0:ae:e4:d3:ef:5a:da:d4:
ef:1c:5a:be:00:70:62:fb:6f:72:f0:b9:03:2d:20:32:52:5d:
d7:83:b9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:28:03 2026 by rpki-client