Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
File: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft (raw, json)
Hash identifier: KjYgZbT/0HmBGYA5Xz+GBXTKP5piddB9tIw8x/T1Q8M=
Subject key identifier: 43:81:2D:24:6D:A7:4D:51:23:90:DE:2E:94:43:82:A1:48:9C:5C:46
Authority key identifier: 5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
Certificate issuer: /CN=5e8e581537e7aa66783c3403822a1181a3168d08
Certificate serial: 019E205A736BC63A104C13EE5D5C50C7705E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
Manifest number: 0D32
Signing time: Wed 13 May 2026 08:00:59 +0000
Manifest this update: Wed 13 May 2026 08:00:59 +0000
Manifest next update: Thu 14 May 2026 08:00:59 +0000
Files and hashes: 1: Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl (hash: ApmUHh+TZUv2ZGbpv25N9gtjkRZVBkWunnkht/A3Uo0=)
2: zUPOhxihYzhbcX4tok2wWWwFbw4.roa (hash: MhLBWRoR0j43G7PjNgF2nCiYDlCAe2m1lXi02+T0zpM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:73:6b:c6:3a:10:4c:13:ee:5d:5c:50:c7:70:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e8e581537e7aa66783c3403822a1181a3168d08
Validity
Not Before: May 13 08:00:59 2026 GMT
Not After : May 14 08:00:59 2026 GMT
Subject: CN=43812d246da74d512390de2e944382a1489c5c46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:bc:d0:3c:1f:cb:7e:dd:22:3f:f1:97:62:44:
89:6f:9a:26:b5:e0:7a:c5:d0:1a:85:38:96:be:9b:
87:cd:07:49:20:3d:cb:40:01:7c:f9:e3:94:9a:38:
51:84:82:d8:17:65:19:67:0d:47:b8:ef:01:e4:db:
35:c3:a0:f2:33:0f:33:dc:78:f5:01:40:de:a6:c0:
ff:4d:f3:c4:35:d8:72:fd:d3:8a:36:f4:11:cc:c3:
fb:dd:1b:2b:0f:e5:91:fa:73:4c:f3:6d:9f:75:0a:
c5:9f:83:9c:50:f0:47:ad:ce:73:b1:6f:0d:bd:a2:
32:cb:68:74:97:b8:cb:a1:07:fc:f3:4e:65:73:c2:
c6:eb:16:b4:69:3c:70:24:04:10:c0:d7:ba:8f:03:
bb:ac:c9:42:33:50:e6:3c:7a:75:13:65:00:40:94:
d7:a0:34:8b:22:e8:51:54:4e:f7:25:47:9f:04:30:
b0:6a:2b:2c:5a:fc:b6:a8:32:3e:4c:9c:1e:67:15:
e7:b4:4a:75:09:ee:76:4e:81:6a:b4:1a:36:1b:fa:
1d:ff:c7:e0:b7:9c:e0:52:f3:33:5c:d7:bd:7e:ca:
2c:b3:29:29:d8:45:96:44:f5:91:5a:e7:5f:28:d9:
ca:e3:ef:07:29:34:4a:61:f0:1a:00:8e:85:aa:3b:
88:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:81:2D:24:6D:A7:4D:51:23:90:DE:2E:94:43:82:A1:48:9C:5C:46
X509v3 Authority Key Identifier:
keyid:5E:8E:58:15:37:E7:AA:66:78:3C:34:03:82:2A:11:81:A3:16:8D:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3f424e-262c-4077-8849-7418ac110c83/1/Xo5YFTfnqmZ4PDQDgioRgaMWjQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:50:b7:a3:cd:42:3f:58:18:58:f2:c4:53:b4:7a:e4:cc:67:
03:15:40:63:8d:9f:1b:cf:00:ff:f0:bc:62:3f:38:e9:37:4a:
6e:99:bc:40:53:3d:8f:e7:e0:89:de:57:32:df:20:86:d8:f7:
c3:c9:bf:4b:ea:98:ab:1f:3f:e7:44:45:27:77:2f:41:f6:d4:
c4:21:1b:7f:f4:a2:50:ac:dd:de:a9:f4:84:e6:4c:34:d3:cd:
44:98:ef:fd:18:18:0a:d3:60:f1:36:62:05:25:9f:43:f3:b3:
78:51:10:ae:27:98:99:ed:9e:1c:7a:16:9b:ac:1b:32:e7:77:
df:77:02:99:51:d2:34:ac:a7:b4:fc:0a:82:a2:ad:77:8b:20:
5c:0c:93:f4:0d:3e:21:08:d2:e2:4d:21:e5:6b:94:b2:75:61:
57:50:45:f2:4a:ff:0f:99:bc:50:f8:05:c8:46:b2:d1:c3:11:
54:c6:24:bc:29:1b:b6:0d:8f:21:ae:ea:f7:ea:c7:aa:43:04:
cf:fb:a2:e2:7f:10:fe:aa:35:00:01:a1:a8:89:a1:53:d0:34:
a0:a3:98:ec:48:c9:ee:4b:3a:cc:4e:18:77:cc:8b:ca:67:6d:
da:c5:dc:a4:52:e7:99:f8:b3:48:b8:3e:cd:17:35:88:c1:6f:
b6:d9:61:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:37:08 2026 by rpki-client