Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
File: xK3VunZitzHdCLz4c48TXZOu1FE.mft (raw, json)
Hash identifier: RWgzBX7wcnkbWiWv9MemgQjf5nvEhwxsw1ZYTU7BQL8=
Subject key identifier: B4:9C:61:2C:B1:65:AD:7F:6A:A3:1F:DE:BA:29:41:56:41:F7:BA:68
Authority key identifier: C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
Certificate issuer: /CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Certificate serial: 019E20243049B37FC7334699F969B6178166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 07:01:42 +0000
Manifest this update: Wed 13 May 2026 07:01:42 +0000
Manifest next update: Thu 14 May 2026 07:01:42 +0000
Files and hashes: 1: 1-8oUTWUAuLAV-0eAuYQDr-5uUjg.roa (hash: j/xhG+Ho5blnFZVSciVE3ALUT+d6u+iQqAAWN+Se5oY=)
2: MHchnxV8uLs8pcvJTcOPLL-Bbbc.roa (hash: vPV8+4NZsXrCq8XvABi4c8I9ILlUiPMubO8YOy17XOc=)
3: xK3VunZitzHdCLz4c48TXZOu1FE.crl (hash: e7eMgA4ITLJ/dvyxc5eOXaiG2J8rAouxqbJlQlCGm3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:30:49:b3:7f:c7:33:46:99:f9:69:b6:17:81:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4add5ba7662b731dd08bcf8738f135d93aed451
Validity
Not Before: May 13 07:01:42 2026 GMT
Not After : May 14 07:01:42 2026 GMT
Subject: CN=b49c612cb165ad7f6aa31fdeba29415641f7ba68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9f:ce:25:69:21:d3:c8:76:d6:48:b2:a2:1f:
70:88:97:c0:c0:b4:76:f9:18:0c:c9:24:dc:0a:e7:
ce:ef:d9:1c:d7:69:f6:e3:1e:14:0a:4b:0f:21:db:
83:3f:fd:5a:4c:55:16:70:8b:da:26:8f:30:ba:3a:
72:63:b9:d3:93:66:5a:41:a2:80:d4:84:59:a2:e7:
94:41:8b:52:af:5a:a4:26:25:6e:4c:b8:cc:79:c2:
48:08:97:e9:3b:ea:f2:8e:a2:cb:65:82:e9:f3:ec:
d3:a1:3c:6d:0c:aa:2d:cb:71:7a:4d:2b:f2:36:50:
10:45:e3:2c:d7:e6:02:1e:4e:6c:c5:3d:a7:d7:fb:
6c:f1:6c:43:74:2c:d6:25:90:72:81:37:38:ba:e6:
09:0f:47:54:38:f9:d9:d6:66:58:29:17:ed:9c:bc:
3a:f7:81:d2:1c:3d:5e:70:87:bf:01:8e:5f:da:9a:
22:4c:48:b0:80:44:24:de:fb:b0:d7:0d:2f:97:71:
9c:ea:46:45:ea:81:fb:61:50:62:96:5f:4e:6a:f3:
12:28:74:d1:c9:04:36:9b:fe:63:7f:c3:e4:dd:f8:
ca:32:84:0a:20:21:7e:49:93:e4:24:32:84:dc:51:
61:82:bc:c2:3c:48:58:11:a5:a2:33:d9:99:f3:c1:
bf:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9C:61:2C:B1:65:AD:7F:6A:A3:1F:DE:BA:29:41:56:41:F7:BA:68
X509v3 Authority Key Identifier:
keyid:C4:AD:D5:BA:76:62:B7:31:DD:08:BC:F8:73:8F:13:5D:93:AE:D4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xK3VunZitzHdCLz4c48TXZOu1FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/346a23-1181-4a80-9f55-dd7d47cf5c18/1/xK3VunZitzHdCLz4c48TXZOu1FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:eb:c6:43:97:8b:32:3d:b4:60:ba:ad:94:ef:db:1e:20:c6:
01:99:7d:b6:12:89:45:cb:66:08:0e:a4:5b:7c:2a:cc:4d:cd:
23:a5:eb:11:4c:f6:64:e0:44:af:6b:6a:bb:77:26:b2:07:0f:
aa:fd:63:92:d1:60:c1:66:6e:9e:14:f8:9a:8e:e1:2f:89:4a:
69:d0:f9:9a:00:09:f7:fa:b7:1b:e4:ee:e7:b1:e9:c9:5d:52:
e7:10:fa:6f:51:6b:60:87:2b:e5:ce:32:03:05:82:21:d4:11:
a3:4c:9e:e7:7f:32:23:0a:93:04:ea:b6:0e:7f:17:8e:d3:75:
d3:ad:f4:50:d9:7b:1e:1e:25:df:0f:69:5e:7c:30:85:d1:0e:
b4:9b:ad:d3:37:99:88:49:c1:88:e4:93:68:1c:bf:a7:e4:dc:
e6:e3:1a:17:6f:94:9f:8b:ea:6b:c7:fe:05:52:03:19:39:10:
a0:5a:6c:7d:2a:12:ca:07:3a:a6:5c:e7:70:dd:41:de:1f:4a:
e0:a1:d4:d4:bd:97:a1:45:dd:49:2a:ca:21:17:d0:7e:b2:61:
79:9a:23:78:3d:35:85:17:85:ab:84:cc:31:da:4d:98:ae:9f:
c9:bf:98:5f:1b:77:f2:41:e5:19:24:ff:5f:f7:52:8d:3a:a1:
98:63:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:16 2026 by rpki-client