Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
File: Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft (raw, json)
Hash identifier: QTCPN8npNlJs2s9YQKVXhlQOzxS4uTeDqifflXKhQ34=
Subject key identifier: E6:83:84:87:04:15:7A:E8:ED:FD:59:00:90:FE:73:35:B7:38:44:BF
Authority key identifier: 5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
Certificate issuer: /CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Certificate serial: 019E1EDA0A1240B0D591D4D9A6D749891040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
Manifest number: 190A
Signing time: Wed 13 May 2026 01:01:06 +0000
Manifest this update: Wed 13 May 2026 01:01:06 +0000
Manifest next update: Thu 14 May 2026 01:01:06 +0000
Files and hashes: 1: 7_n1YNS1aUe0Bo_pCtHt0pUhIqw.roa (hash: xzYsTyhKWQal1xfqWksT1weyCxFWFp7bUNSd2LqW3lA=)
2: Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl (hash: u033A/69Mv+MDeBGLdFDDfE1XsFtpjgGYtXjH1Sun5A=)
3: qMmguo9Z2V-BC5t7evoX7K1Fbss.roa (hash: V408yrY8gn/eWE6bGQXHDcnC3POLPttI1BvbFvBLTFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:0a:12:40:b0:d5:91:d4:d9:a6:d7:49:89:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3a62f1347c1742e5b6e3740244d398b53a513c
Validity
Not Before: May 13 01:01:06 2026 GMT
Not After : May 14 01:01:06 2026 GMT
Subject: CN=e683848704157ae8edfd590090fe7335b73844bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1a:41:66:46:7f:64:62:95:a3:fe:00:43:e9:
8f:ec:a5:41:2e:b4:0b:05:25:04:c8:22:21:5e:57:
34:46:ee:ec:98:42:8b:cd:49:20:85:e4:61:e1:b3:
ef:91:84:68:82:77:0a:c5:02:27:c5:bd:c1:e5:a4:
b7:b1:dd:28:0b:8c:f0:30:e5:84:98:62:b8:eb:a3:
ca:30:40:b1:84:45:8a:5e:54:a9:47:60:13:6c:75:
b0:3e:e1:0f:fa:c1:c7:b9:4f:dc:1b:35:bf:fc:44:
5e:4b:c3:3c:d8:64:36:97:af:7f:ed:1e:39:78:e9:
69:d8:7c:bd:ef:6f:8b:51:9e:6a:ad:65:d4:c0:43:
de:53:5f:87:9a:47:a2:01:f8:c1:aa:93:2a:41:7d:
06:ea:bc:a5:3b:b1:53:82:28:b6:98:fa:15:11:23:
ab:b5:f3:43:f4:b3:53:62:94:04:31:7a:8e:d5:68:
a6:ee:71:61:d7:87:8a:7c:13:a3:c3:a4:d1:33:da:
bb:54:e1:da:45:b1:18:ae:b5:b0:2b:6f:93:46:9f:
cf:7c:08:16:f2:43:b9:8d:7b:3f:af:23:bd:dd:0b:
da:13:a4:4a:23:66:2c:57:16:11:4a:f4:92:f0:11:
5c:e0:aa:7f:51:ec:a1:b5:10:08:7c:ae:77:d2:8e:
15:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:83:84:87:04:15:7A:E8:ED:FD:59:00:90:FE:73:35:B7:38:44:BF
X509v3 Authority Key Identifier:
keyid:5E:3A:62:F1:34:7C:17:42:E5:B6:E3:74:02:44:D3:98:B5:3A:51:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjpi8TR8F0LltuN0AkTTmLU6UTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/425cc1-5014-4979-84eb-025540aff15d/1/Xjpi8TR8F0LltuN0AkTTmLU6UTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ea:e5:fb:f9:dd:a3:3f:2e:2d:cd:7a:15:a1:f3:1f:48:3a:
6e:04:bc:32:7c:79:24:97:e9:53:31:50:58:74:ef:10:03:4a:
07:f6:31:63:3a:22:08:3d:ec:b8:c4:8a:0d:e9:34:0e:12:03:
cc:1b:2a:c7:f8:10:c4:f3:f4:32:22:d9:0b:0f:0b:1e:49:f5:
e7:d6:30:1f:e5:8f:55:4b:f4:57:d8:75:9a:f7:fb:fb:80:2b:
08:3c:01:e4:6a:9d:cd:03:a9:21:67:ea:d9:9e:20:63:a4:5f:
e9:23:0a:fb:f1:53:74:49:04:38:72:e3:6e:e3:ce:82:5b:97:
e7:5c:01:d5:d6:98:8a:dc:a5:59:03:5b:68:2a:2d:44:cc:42:
f1:eb:0c:b8:99:74:9c:b0:e5:a2:f4:d4:c7:2d:0a:38:c9:78:
6d:9c:92:d0:17:be:56:09:5f:58:75:34:24:1d:49:2e:2e:d8:
85:a5:fc:ea:e7:47:fd:01:99:d5:39:a9:14:7d:f8:d0:42:47:
e7:4a:1d:88:d4:30:69:0d:17:2c:c6:6b:17:60:36:6d:e4:be:
2d:63:e0:34:f7:09:da:83:cb:86:5a:2d:ce:96:2d:ac:1c:54:
db:15:3c:f0:ec:7f:60:34:65:b8:55:c2:63:72:bc:00:b8:d4:
32:39:bb:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2goSQLDVkdTZptdJiRBAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlM2E2MmYxMzQ3YzE3NDJlNWI2ZTM3NDAyNDRkMzk4YjUz
YTUxM2MwHhcNMjYwNTEzMDEwMTA2WhcNMjYwNTE0MDEwMTA2WjAzMTEwLwYDVQQD
EyhlNjgzODQ4NzA0MTU3YWU4ZWRmZDU5MDA5MGZlNzMzNWI3Mzg0NGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshpBZkZ/ZGKVo/4AQ+mP7KVBLrQL
BSUEyCIhXlc0Ru7smEKLzUkgheRh4bPvkYRogncKxQInxb3B5aS3sd0oC4zwMOWE
mGK466PKMECxhEWKXlSpR2ATbHWwPuEP+sHHuU/cGzW//EReS8M82GQ2l69/7R45
eOlp2Hy972+LUZ5qrWXUwEPeU1+HmkeiAfjBqpMqQX0G6rylO7FTgii2mPoVESOr
tfND9LNTYpQEMXqO1Wim7nFh14eKfBOjw6TRM9q7VOHaRbEYrrWwK2+TRp/PfAgW
8kO5jXs/ryO93QvaE6RKI2YsVxYRSvSS8BFc4Kp/UeyhtRAIfK530o4VRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOaDhIcEFXro7f1ZAJD+czW3OES/MB8GA1UdIwQY
MBaAFF46YvE0fBdC5bbjdAJE05i1OlE8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS80MjVjYzEtNTAxNC00OTc5LTg0ZWIt
MDI1NTQwYWZmMTVkLzEvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS80MjVjYzEtNTAxNC00OTc5LTg0ZWItMDI1NTQwYWZmMTVk
LzEvWGpwaThUUjhGMExsdHVOMEFrVFRtTFU2VVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYerl+/nd
oz8uLc16FaHzH0g6bgS8Mnx5JJfpUzFQWHTvEANKB/YxYzoiCD3suMSKDek0DhID
zBsqx/gQxPP0MiLZCw8LHkn159YwH+WPVUv0V9h1mvf7+4ArCDwB5GqdzQOpIWfq
2Z4gY6Rf6SMK+/FTdEkEOHLjbuPOgluX51wB1daYitylWQNbaCotRMxC8esMuJl0
nLDlovTUxy0KOMl4bZyS0Be+VglfWHU0JB1JLi7YhaX86udH/QGZ1TmpFH340EJH
50odiNQwaQ0XLMZrF2A2beS+LWPgNPcJ2oPLhlotzpYtrBxU2xU88Ox/YDRluFXC
Y3K8ALjUMjm78g==
-----END CERTIFICATE-----
Generated at Wed May 13 06:34:21 2026 by rpki-client