Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
File: xtGGU_v7b9VzLclAwdZdd6sLv6M.mft (raw, json)
Hash identifier: V9jcpV5C6+7XdNvg7NGb4+bbREB+jSjADPgxC2N50E8=
Subject key identifier: E1:71:76:74:56:31:CE:68:50:8A:CD:B9:1E:18:19:96:D7:14:E0:41
Authority key identifier: C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
Certificate issuer: /CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Certificate serial: 019E1E6C33BDE5D7C1988EF350B97319943D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
Manifest number: 190E
Signing time: Tue 12 May 2026 23:01:08 +0000
Manifest this update: Tue 12 May 2026 23:01:08 +0000
Manifest next update: Wed 13 May 2026 23:01:08 +0000
Files and hashes: 1: 2S0egMPr-zdQkgAq_bpCVGy4WpA.roa (hash: re4isGbhSWMB6fqoWf7gvs6FB5l6F8k5c1sHfF3v4hQ=)
2: bdjR-oD_Oii7Pli7R8XyAmbHV-o.roa (hash: ggKFIgIElCHZMireZeFZrOPcIaJP8Yn+MeT51gputK0=)
3: xtGGU_v7b9VzLclAwdZdd6sLv6M.crl (hash: aw4lGBMkqSV8C7LUlsqXDow69yBDC0BPNYg/vOpf9lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:33:bd:e5:d7:c1:98:8e:f3:50:b9:73:19:94:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d18653fbfb6fd5732dc940c1d65d77ab0bbfa3
Validity
Not Before: May 12 23:01:08 2026 GMT
Not After : May 13 23:01:08 2026 GMT
Subject: CN=e17176745631ce68508acdb91e181996d714e041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:b1:73:d1:84:12:f0:27:63:fc:ae:96:30:ca:
cc:9a:2c:de:30:6a:bf:f7:96:88:c0:59:2a:53:1a:
b9:db:2c:b9:e3:04:4a:64:ac:fa:d3:e1:0c:71:3e:
11:84:a7:b6:cb:b9:20:1e:a6:b5:cf:fc:10:59:4a:
0e:50:02:f1:2f:e1:62:a9:c9:fd:9d:13:b1:a8:62:
26:f7:71:04:d7:ca:5c:5d:0b:f4:00:3f:46:02:6d:
fd:87:88:37:b5:46:3b:1a:7e:7c:1b:48:c6:aa:42:
b5:8d:78:36:77:1c:02:ee:5d:5f:7a:45:ec:ad:32:
dd:8a:aa:59:a1:be:27:68:fa:ba:d7:ac:44:87:d3:
24:4f:66:8d:09:4f:b4:22:31:a8:56:74:e2:38:4c:
34:9e:47:97:4c:2e:a4:d1:d9:b0:5d:23:86:47:cf:
05:ef:e8:27:99:86:cb:19:ef:18:a7:07:33:91:08:
d7:a2:ce:8b:38:48:03:f0:2c:e5:48:19:73:c4:4b:
cf:a0:8b:fd:82:b9:88:36:77:31:eb:c0:33:49:ad:
55:dc:7e:30:1c:d9:c9:78:c2:59:85:73:82:f0:a7:
9c:49:e3:23:84:07:f1:bc:45:73:18:da:10:1d:31:
fa:01:03:67:48:69:fc:9d:cf:55:7d:74:d7:e4:4d:
b9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:71:76:74:56:31:CE:68:50:8A:CD:B9:1E:18:19:96:D7:14:E0:41
X509v3 Authority Key Identifier:
keyid:C6:D1:86:53:FB:FB:6F:D5:73:2D:C9:40:C1:D6:5D:77:AB:0B:BF:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtGGU_v7b9VzLclAwdZdd6sLv6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d6943-ca75-4372-b77f-5c6502bffa1f/1/xtGGU_v7b9VzLclAwdZdd6sLv6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a6:d4:65:9f:a6:f2:a1:8e:f4:c6:2b:0a:d7:e7:34:aa:cd:
70:df:3b:b2:d3:66:de:2a:c7:97:3d:35:b4:30:4d:b3:8f:e2:
c3:f0:04:49:2a:2c:8d:9c:91:b9:c8:78:a4:e5:54:d5:87:8b:
18:9f:7d:a9:e0:8f:8e:12:de:14:91:64:1c:77:2b:b9:02:2f:
73:e9:bd:ac:73:3d:30:0a:bd:d4:fa:87:83:b1:77:d7:b2:1d:
20:74:43:fe:d5:1f:02:68:14:14:36:3f:e0:c2:25:23:58:a8:
1b:ee:3d:e7:9e:23:9f:cc:23:ca:85:a6:70:35:13:46:6b:e9:
63:ff:1b:e7:52:36:89:ec:64:e7:ec:eb:99:54:b3:28:a7:f6:
17:61:b2:0f:e4:6d:cc:d7:2a:e2:f9:aa:c8:20:46:9a:19:be:
98:ce:b3:70:11:cf:d3:95:1f:ab:58:8c:ad:fc:27:76:23:f2:
d0:e9:d0:24:ec:bd:45:88:3a:19:c2:e8:2f:0a:c0:0d:05:30:
b6:5f:d5:80:a4:0e:e6:82:72:f7:44:bf:f8:9b:fe:50:35:2c:
49:04:d2:73:b8:0d:ae:47:39:88:83:34:9f:f9:30:d4:d6:4a:
c5:91:57:58:e6:61:a3:57:50:b5:96:6c:be:5a:d4:4c:42:12:
f0:9e:3e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:03:12 2026 by rpki-client