Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
File: xhMz0OgQeIbQMFx72BvdNUiVJ64.mft (raw, json)
Hash identifier: 8lEYCEXgeShcTvOcVdovmqwvVPGJ5c+nPoqxrcTJMak=
Subject key identifier: 4C:D6:0A:84:C3:8A:20:32:B3:9F:6F:AC:FA:7D:6D:13:D2:1D:3D:8F
Authority key identifier: C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
Certificate issuer: /CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Certificate serial: 019E1D90CEBD6A66FB25CCA0923FCE5CF7CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 19:01:29 +0000
Manifest this update: Tue 12 May 2026 19:01:29 +0000
Manifest next update: Wed 13 May 2026 19:01:29 +0000
Files and hashes: 1: 5ie9J9ix6eo_LjO_d-h0wTlK5sY.roa (hash: hY4eQy4LzjSe1EFCcdEhDwEocsy77V2cxczGFy9ZGiM=)
2: D0Omi7eTzuK_0HEfZBlA62fHv-s.roa (hash: 0MjChUFTQrOrybRBrDN8jiZf3suuubHFJss7LSX+W2A=)
3: xhMz0OgQeIbQMFx72BvdNUiVJ64.crl (hash: VpQYb373qifC0gRQr5jdG+5iJU01YeakttjA7d1L5B4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:ce:bd:6a:66:fb:25:cc:a0:92:3f:ce:5c:f7:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c61333d0e8107886d0305c7bd81bdd35489527ae
Validity
Not Before: May 12 19:01:29 2026 GMT
Not After : May 13 19:01:29 2026 GMT
Subject: CN=4cd60a84c38a2032b39f6facfa7d6d13d21d3d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:42:88:0e:03:10:55:34:e3:29:30:08:d5:a3:
17:9a:20:4b:e2:5e:02:b0:38:d0:fb:e7:62:77:57:
cb:0b:90:ba:6e:ca:0c:c9:f0:67:eb:7b:33:4e:4d:
7f:04:5f:bc:f7:8c:41:36:e2:c3:6c:5f:6b:e1:e2:
b0:4f:b3:5b:84:a3:c1:03:29:28:5f:14:6b:d7:a2:
a5:9d:88:a2:ae:e0:21:8a:5d:d8:14:87:2c:02:20:
c3:1e:e7:a1:e1:ee:4d:ca:2c:e4:3b:1d:72:59:82:
5a:aa:41:26:b6:22:55:9b:f9:bf:39:3a:26:3f:e6:
17:d7:44:12:e9:7b:43:61:65:41:a5:fb:90:6a:ca:
9b:d9:1c:c1:8d:08:de:45:0b:ec:2c:e5:a6:27:cf:
5b:32:e6:e3:9b:e3:e1:26:78:66:79:24:8f:5e:0e:
57:fd:c0:fb:29:b3:29:07:4b:6b:e6:88:2d:dc:bf:
34:d1:a2:c9:34:00:25:12:51:7c:c4:43:0d:55:40:
00:61:a8:7a:87:ea:b0:f6:de:da:af:5a:83:cd:29:
e2:96:bb:58:54:a1:b5:0d:ff:34:ca:7c:6c:5a:81:
9f:c2:d5:64:47:e9:bd:3b:e6:e4:7c:9d:1c:be:cb:
b7:04:92:0a:f8:b5:24:cc:a7:4f:e7:d3:f8:d2:0c:
c7:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D6:0A:84:C3:8A:20:32:B3:9F:6F:AC:FA:7D:6D:13:D2:1D:3D:8F
X509v3 Authority Key Identifier:
keyid:C6:13:33:D0:E8:10:78:86:D0:30:5C:7B:D8:1B:DD:35:48:95:27:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhMz0OgQeIbQMFx72BvdNUiVJ64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/dd32c3-fe8f-4047-b68a-8ec5f0eea045/1/xhMz0OgQeIbQMFx72BvdNUiVJ64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:85:85:55:a5:cc:ca:60:87:f6:ba:dc:32:2a:03:d7:ad:28:
48:d2:69:3e:ac:09:ed:cb:ec:95:8b:11:e7:97:5c:26:4c:a1:
8a:e0:40:f4:07:63:36:98:9a:ec:54:37:28:53:8a:65:1e:0c:
5b:35:09:37:ef:e6:d3:ec:f5:fe:e8:b6:e7:22:6d:c1:2a:99:
c8:f2:d2:18:2e:a9:d3:ff:c8:69:cc:19:67:42:22:31:0c:df:
a8:31:bb:7a:a4:86:fc:f5:51:d3:27:a7:c9:62:f2:5b:19:dd:
2b:50:cd:6e:13:04:43:b5:ca:54:f8:d5:08:6a:ad:e0:9c:f8:
14:e9:6f:01:5d:f6:bd:2a:67:cf:af:9c:c8:cc:8d:65:29:37:
2e:91:2c:87:1f:c6:9b:3c:7d:a5:61:d1:d5:59:58:ab:11:28:
7a:fe:b9:24:55:26:7b:54:62:92:41:b3:91:11:f3:d2:fa:e5:
e7:85:ef:89:7c:7a:e4:95:a1:06:02:0b:ca:0a:9b:90:1e:a5:
3e:09:1f:19:e4:84:52:18:b3:f4:dc:7a:c0:eb:e2:51:f8:34:
09:6d:02:ac:63:39:a9:8d:bf:99:7f:65:b8:36:9e:c8:2b:c1:
77:e9:67:de:96:d0:05:3a:98:7d:75:14:74:0f:73:12:2b:f5:
77:d8:7a:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:59:16 2026 by rpki-client