Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File: xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier: 2JPLKd32ZqLjJHvr7iId1ISxLFF0opMtfLzY6W2sQg4=
Subject key identifier: D5:D6:38:56:02:A5:C9:64:8B:96:6B:38:C2:42:B5:A9:C2:AE:88:4C
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 019E1D592962AC1F1B9A455711CCE563DB55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number: 09A9
Signing time: Tue 12 May 2026 18:00:43 +0000
Manifest this update: Tue 12 May 2026 18:00:43 +0000
Manifest next update: Wed 13 May 2026 18:00:43 +0000
Files and hashes: 1: 4kyWrT9Xy1B7TLtNDP6HuPz-7hw.roa (hash: sWHWI8IzaliyTyKxy/NPSWlKi/bMUwx2CvIPkFk/56s=)
2: A_J1Iis85mInuYBjqNWnaY64Er4.roa (hash: KG2bwrYCBOkD3k9N+nA/ujMikD/ZloBG8hBsS2kc7cc=)
3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: RxRwPWt4KHBtI69r86+PRaMLlZb1hKFpwMvDbxeG6Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:29:62:ac:1f:1b:9a:45:57:11:cc:e5:63:db:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: May 12 18:00:43 2026 GMT
Not After : May 13 18:00:43 2026 GMT
Subject: CN=d5d6385602a5c9648b966b38c242b5a9c2ae884c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:19:30:bd:f5:03:9c:50:d2:e2:70:da:a4:7e:
be:e4:f5:28:cf:36:2b:8c:33:ae:95:1c:35:de:e1:
53:c8:1f:c0:8d:1c:28:1b:7e:a1:c8:fa:1e:12:56:
d3:44:67:8e:8a:bd:6b:ce:81:e3:f7:10:26:7f:ab:
69:2b:c2:15:3c:f9:b6:6a:49:ba:4e:c3:c3:93:88:
3d:a3:40:87:d0:d9:de:be:e2:2e:f4:f6:ca:dd:38:
19:87:16:bd:c2:fa:39:02:44:26:46:3f:c1:68:4e:
b0:c4:36:8f:ca:e7:b8:cb:4c:6a:7c:46:0e:e3:c0:
6f:e2:85:70:1f:2f:fd:f9:77:63:a5:75:cb:60:b3:
b6:ab:ff:ca:06:6e:e9:7b:0e:7b:33:a3:0d:2c:b4:
f5:70:c8:33:44:b9:99:c8:08:7a:41:4c:53:74:9b:
d3:f4:b4:3d:d7:a1:d6:d2:5a:6b:80:1b:ea:93:29:
ae:aa:c4:94:88:05:9f:46:73:88:9c:78:52:6c:c2:
9e:96:86:b0:22:69:c7:b7:a1:4f:4c:47:a8:4e:2c:
bc:40:e2:cc:aa:4f:8f:78:a9:7b:32:f7:75:e5:27:
4d:8b:9a:34:1a:f1:7f:b9:16:e2:01:b7:e6:94:29:
dc:fe:3d:2c:d0:d4:a0:fc:ec:b0:ab:81:ee:5e:f3:
b8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D6:38:56:02:A5:C9:64:8B:96:6B:38:C2:42:B5:A9:C2:AE:88:4C
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:1c:21:44:73:64:1c:52:1b:5f:1e:b1:95:e2:4a:68:cc:df:
ff:ae:ad:1e:66:3f:f9:1d:57:f7:2b:d8:ac:da:bb:6e:05:88:
94:0f:3e:c4:aa:72:c6:66:4a:de:cc:e2:08:9a:3b:36:9e:a4:
65:72:5b:9a:b7:6a:4e:79:a6:46:b7:1b:c0:42:f9:22:d7:2d:
eb:21:ca:27:88:16:8c:01:cf:c5:a6:9d:d0:f7:3f:28:8a:e4:
5f:e8:6e:f5:09:14:bf:2b:d0:2a:27:a8:46:38:3f:9f:18:56:
df:a6:3c:a5:b2:a0:4d:12:24:2a:9a:88:26:a9:62:e7:28:b4:
7b:61:b4:69:52:75:42:43:ed:aa:3e:67:01:32:bb:05:ae:90:
29:7f:cd:74:83:6d:3c:95:1f:5a:47:ab:4d:74:c5:d5:19:07:
b6:e0:72:5c:9b:77:61:d6:b5:0a:e1:30:3f:ed:5e:28:c6:29:
f5:b7:a2:6e:68:db:e9:58:21:ca:3e:f7:13:45:64:bd:eb:53:
f8:4f:9f:7b:cb:16:b4:bc:80:71:5e:78:17:57:44:5d:6e:58:
6c:7e:8d:a0:06:87:9f:72:81:d0:1c:3e:39:da:9c:e8:5c:33:
74:13:22:41:6d:00:a0:7c:b3:41:13:cd:0a:3d:15:54:39:f3:
04:c8:9a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:29:56 2026 by rpki-client