Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File: xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier: 0QzbkamVg327LMoko1pcT7nbizur+iXE2lycdsHH1Og=
Subject key identifier: 4C:D7:A0:CD:91:15:F5:19:9C:7E:B8:8D:6F:A5:B1:CB:39:3E:CB:71
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 019E1F7F1FDAB3B7B5EE95AB2E71BCF3DDDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number: 1569
Signing time: Wed 13 May 2026 04:01:25 +0000
Manifest this update: Wed 13 May 2026 04:01:25 +0000
Manifest next update: Thu 14 May 2026 04:01:25 +0000
Files and hashes: 1: 9EktXdyZJh18u-aW7yKS4HoPavo.roa (hash: rjDqPIBakWvnRieCU3x6qlMyDbDmiCMZb+0A8kLnWdc=)
2: cPX1K7h-wlaCr7zmE40f44WojxI.roa (hash: Q/KPZCaK+pTYPECUWe3LbMeOLvb3gqHt7TrGMiKZCx4=)
3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: CC6mgh2swLhtD4HBVTyNsBmBQay9wKrXw302i3bF8aE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:1f:da:b3:b7:b5:ee:95:ab:2e:71:bc:f3:dd:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: May 13 04:01:25 2026 GMT
Not After : May 14 04:01:25 2026 GMT
Subject: CN=4cd7a0cd9115f5199c7eb88d6fa5b1cb393ecb71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:76:51:36:b9:52:f3:25:a8:84:c0:0a:3e:b9:
e0:52:b7:b3:70:b9:5a:80:0e:f0:9e:d8:15:cb:04:
1d:bc:22:d5:b5:c0:70:1c:59:4b:58:55:e3:e6:e5:
97:d2:d8:0a:ef:9a:7b:19:f6:a2:11:c6:ae:7f:4a:
84:75:09:75:4b:3f:64:e9:7d:31:3f:30:89:31:f1:
97:7d:39:cc:65:51:bb:2c:72:40:0e:b5:e2:42:c3:
ad:17:f8:39:92:46:ab:fb:02:49:34:2a:06:b5:e4:
12:32:9e:b6:2c:3b:66:e2:38:23:96:b2:d4:97:94:
79:4f:83:00:6f:0d:35:ec:4f:e7:f7:11:57:ef:12:
49:d1:a4:e4:a0:58:b0:c6:b5:96:87:ca:d1:8b:32:
b7:d9:55:83:43:1d:08:31:e3:5c:d6:5b:dc:ff:40:
91:88:7a:af:b6:7b:f5:04:2e:01:e8:f2:57:41:55:
3a:ba:ed:80:e0:2e:2e:7d:12:a7:12:32:c7:d1:fe:
44:49:58:6e:4c:de:a1:88:8d:d5:4e:02:52:c5:32:
d4:68:4f:dc:73:b4:bd:a3:f5:46:2a:28:08:9e:ad:
bd:0c:a8:9a:62:01:b0:a5:12:e1:93:06:c7:c4:38:
9c:d4:01:c0:5e:f7:73:a6:23:c4:ed:a4:17:72:e4:
24:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:D7:A0:CD:91:15:F5:19:9C:7E:B8:8D:6F:A5:B1:CB:39:3E:CB:71
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:97:60:e2:51:e9:bb:7f:b7:36:11:9c:3c:ac:46:05:bf:b1:
c3:6d:e3:77:98:7c:19:69:4a:23:f2:6a:00:ee:98:cb:56:3e:
b5:ce:22:76:fc:0c:65:7e:bb:e4:46:4e:df:0d:6c:3a:fa:b6:
86:1d:21:a6:c8:a3:da:aa:32:d3:10:48:e1:6a:04:c4:3b:3b:
56:b9:4a:05:3f:7f:9b:93:38:2f:7f:44:7f:b3:8e:98:05:4d:
0f:9b:61:2a:fc:12:fe:5f:d7:51:04:43:7b:51:ea:85:bf:20:
9c:a2:ed:46:5e:65:1f:d4:b2:07:89:fd:1b:15:11:a4:7e:8e:
fb:48:5d:35:0d:d5:b5:d3:68:1e:90:29:85:64:69:05:93:e1:
d0:9f:22:34:76:e8:73:0b:e5:77:d1:b0:35:e0:2e:83:7d:ac:
9f:f6:5b:bd:8d:76:48:39:18:3f:96:53:f5:b0:04:ae:62:21:
05:a3:0d:bb:8e:f6:73:0c:2f:55:01:a8:fb:1f:ba:f3:f6:23:
e7:bb:94:1c:c7:2f:7c:4d:03:2f:4f:98:a9:f8:1f:ff:0f:de:
6f:11:d0:c1:cd:2f:de:b3:eb:97:70:7a:28:08:14:8d:be:9b:
63:4c:89:a3:93:73:b6:c0:5c:2b:62:f3:47:b7:73:77:60:cd:
51:a1:21:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ffx/as7e17pWrLnG8893cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTk2OGVkYjcyYzE1ZjVmOTU2N2ZkMzQyNjdiODc0ODVl
ZjM2ZDEwHhcNMjYwNTEzMDQwMTI1WhcNMjYwNTE0MDQwMTI1WjAzMTEwLwYDVQQD
Eyg0Y2Q3YTBjZDkxMTVmNTE5OWM3ZWI4OGQ2ZmE1YjFjYjM5M2VjYjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HZRNrlS8yWohMAKPrngUrezcLla
gA7wntgVywQdvCLVtcBwHFlLWFXj5uWX0tgK75p7GfaiEcauf0qEdQl1Sz9k6X0x
PzCJMfGXfTnMZVG7LHJADrXiQsOtF/g5kkar+wJJNCoGteQSMp62LDtm4jgjlrLU
l5R5T4MAbw017E/n9xFX7xJJ0aTkoFiwxrWWh8rRizK32VWDQx0IMeNc1lvc/0CR
iHqvtnv1BC4B6PJXQVU6uu2A4C4ufRKnEjLH0f5ESVhuTN6hiI3VTgJSxTLUaE/c
c7S9o/VGKigInq29DKiaYgGwpRLhkwbHxDic1AHAXvdzpiPE7aQXcuQkqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEzXoM2RFfUZnH64jW+lscs5PstxMB8GA1UdIwQY
MBaAFMWpaO23LBX1+VZ/00JnuHSF7zbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMt
YjJjMGRmYThhMGUxLzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC8wZGU2ODMtNzMxNi00MGMyLWI4OWMtYjJjMGRmYThhMGUx
LzEveGFsbzdiY3NGZlg1Vm5fVFFtZTRkSVh2TnRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJdg4lHp
u3+3NhGcPKxGBb+xw23jd5h8GWlKI/JqAO6Yy1Y+tc4idvwMZX675EZO3w1sOvq2
hh0hpsij2qoy0xBI4WoExDs7VrlKBT9/m5M4L39Ef7OOmAVND5thKvwS/l/XUQRD
e1Hqhb8gnKLtRl5lH9SyB4n9GxURpH6O+0hdNQ3VtdNoHpAphWRpBZPh0J8iNHbo
cwvld9GwNeAug32sn/ZbvY12SDkYP5ZT9bAErmIhBaMNu472cwwvVQGo+x+68/Yj
57uUHMcvfE0DL0+Yqfgf/w/ebxHQwc0v3rPrl3B6KAgUjb6bY0yJo5NztsBcK2Lz
R7dzd2DNUaEh9A==
-----END CERTIFICATE-----
Generated at Wed May 13 08:16:35 2026 by rpki-client