Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
File: XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft (raw, json)
Hash identifier: Jmy7jiSiGD/qrN9cDITaR+AY7+UaY47JtvCuMMaNJ9A=
Subject key identifier: 4D:86:9D:68:46:30:8D:B1:4D:E4:28:7B:11:16:32:6E:C8:05:3A:8D
Authority key identifier: 5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
Certificate issuer: /CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Certificate serial: 019E1F7EF2B578637C40D77AEDD04D81D099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
Manifest number: 0EC2
Signing time: Wed 13 May 2026 04:01:13 +0000
Manifest this update: Wed 13 May 2026 04:01:13 +0000
Manifest next update: Thu 14 May 2026 04:01:13 +0000
Files and hashes: 1: JjBO1amjFaXKhp_BY_wamVGillY.roa (hash: EPoONpabQiLm+XMuLyPiJhdjDRYBEoJAyi19e3SuWu8=)
2: XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl (hash: 8yckmbsfoWkIMYjIBwgc6QBoeuFc9OcbLU4qaFRYlck=)
3: lskIdwRbHzMZEWLGTNl2U0zpcVc.roa (hash: KELAneudQMw0Lv1CUTTdAguNyi2AXca3YtUqnwbLd4U=)
4: s1w-A0JQ7-GP22Qs9TMP-YC29-g.roa (hash: UbNWOkKqq7RPWPwsnO7EB9cjjZaqtck3tiM3zDy2/V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:f2:b5:78:63:7c:40:d7:7a:ed:d0:4d:81:d0:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cb90fd62bcc0fe929dae53036fc55e511c54b45
Validity
Not Before: May 13 04:01:13 2026 GMT
Not After : May 14 04:01:13 2026 GMT
Subject: CN=4d869d6846308db14de4287b1116326ec8053a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:51:4f:ee:61:f3:3c:0a:13:79:8d:27:ce:
6e:a1:be:5e:15:39:26:9c:3e:99:c2:7f:2b:f9:05:
89:70:13:a5:bf:24:c0:86:a3:98:56:33:07:1c:5c:
db:cc:4c:bf:f3:6e:e6:73:e7:44:1f:cd:9a:08:de:
75:26:7c:68:90:32:f2:55:76:09:2a:26:9a:9b:b3:
40:dc:00:67:20:ef:ea:da:a3:2f:e2:78:de:35:27:
48:11:9b:a7:45:54:27:3f:3c:9c:f0:4f:5a:ff:47:
6e:2e:bb:5d:23:88:ca:97:1b:8f:43:61:35:b2:d1:
b4:7f:cb:63:ea:d1:47:13:bd:70:9e:e7:36:49:6b:
64:54:0b:5a:79:c6:9d:65:97:bb:4a:59:52:06:40:
4d:de:5b:c0:b6:04:cc:1b:07:48:58:d3:be:47:bf:
76:ed:72:e0:ca:16:56:42:9e:7e:d9:96:c4:77:8b:
ea:3b:9b:e2:94:83:a3:29:4b:2e:ff:57:74:df:22:
52:7c:26:2e:42:6e:54:f0:9c:d5:2c:aa:4b:dd:ad:
2c:d3:87:18:6d:90:93:5b:f0:5f:31:1d:06:50:b3:
5e:7b:f6:8e:22:38:6e:80:a3:b2:a4:9d:24:f4:71:
93:30:69:bc:ec:0f:e8:e9:0e:fa:ab:ee:66:48:e1:
d0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:86:9D:68:46:30:8D:B1:4D:E4:28:7B:11:16:32:6E:C8:05:3A:8D
X509v3 Authority Key Identifier:
keyid:5C:B9:0F:D6:2B:CC:0F:E9:29:DA:E5:30:36:FC:55:E5:11:C5:4B:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XLkP1ivMD-kp2uUwNvxV5RHFS0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3dac73-d7c7-40bb-ab55-95135daf5147/1/XLkP1ivMD-kp2uUwNvxV5RHFS0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ec:31:aa:2c:48:19:c8:8d:e7:bf:3a:2e:31:10:58:39:a4:
6e:fc:f9:4e:89:c0:fd:47:5a:4d:03:a1:25:93:86:df:2f:a5:
e1:74:a5:46:1d:ef:09:0d:e3:f2:ae:fd:32:0e:5b:2f:f4:9f:
5f:67:41:1a:d5:b8:9d:14:56:1d:11:7a:1c:24:f0:7d:29:ce:
8c:fb:19:82:51:e4:7a:6b:fd:c5:4e:4a:16:73:6a:13:ba:7b:
c3:56:cb:42:ab:32:40:dd:70:2e:cc:92:14:1a:3c:80:87:06:
26:d8:8c:b7:21:82:35:56:b7:bf:3a:d4:c0:d8:91:04:b8:37:
fe:f0:79:84:c4:80:b6:b7:ca:18:90:16:67:f0:c8:f8:a2:2d:
ea:d2:f6:8d:fc:93:83:34:c3:88:86:be:5d:ec:ca:4e:26:90:
6b:25:b6:da:41:a7:79:eb:72:cd:85:13:3f:d7:74:2c:52:1c:
b3:0d:01:f5:a1:3d:e5:b6:28:90:57:d9:33:99:2d:00:bc:19:
51:d1:4c:da:31:97:1e:56:13:6f:ed:f9:ff:8a:2c:e7:ae:24:
85:27:0c:be:b0:29:3a:77:49:95:c2:c1:16:b2:d8:60:7a:a9:
fb:50:7d:cb:84:a0:c0:23:86:c1:3c:42:59:30:ed:98:3c:65:
55:1a:14:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:06:46 2026 by rpki-client