Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
File: XmFA8XMSeE72KuO-AwwMLMZhpwI.mft (raw, json)
Hash identifier: 0fJdPZw9Js8OOpg6MIHHvnKH9rQU4I26nMBmed+UhlU=
Subject key identifier: A6:3D:7E:E6:5A:EC:E1:FC:8C:DD:DD:6D:7E:4F:5C:98:3B:D8:5E:D8
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 019E1EDA36D65FC491A65802568A3F3DCCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
Manifest number: 0DF0
Signing time: Wed 13 May 2026 01:01:17 +0000
Manifest this update: Wed 13 May 2026 01:01:17 +0000
Manifest next update: Thu 14 May 2026 01:01:17 +0000
Files and hashes: 1: XmFA8XMSeE72KuO-AwwMLMZhpwI.crl (hash: AuWE4rimTN7dbbJ2iea3VGl9e5mTODlLOOzNeWRkrkc=)
2: vSKxJft-YrfZTgTcPvrZEBw-s-o.roa (hash: fXlVBWLEGWm5OQD/WI5lmOPHwN/6Yh6slPhBeiX8hgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:36:d6:5f:c4:91:a6:58:02:56:8a:3f:3d:cc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: May 13 01:01:17 2026 GMT
Not After : May 14 01:01:17 2026 GMT
Subject: CN=a63d7ee65aece1fc8cdddd6d7e4f5c983bd85ed8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a2:f3:ba:90:71:0b:d9:e0:9e:cd:4a:e8:fa:
56:1b:74:c0:94:74:e4:7e:dd:a4:6d:aa:46:d5:65:
37:8b:ae:de:37:14:d9:dd:28:4f:99:90:ee:bf:3f:
86:ab:b5:51:1b:3c:25:73:3e:32:3e:aa:c6:f5:4c:
be:ea:67:6e:67:55:9b:8f:77:c4:62:9a:3b:92:19:
31:c2:68:ea:12:78:fa:89:93:8a:86:d2:91:91:6c:
a2:c7:30:ee:5f:26:da:b8:46:36:6f:bd:e8:64:8a:
24:3a:4d:b3:f2:48:6b:6a:17:f1:4b:5d:fa:7e:6e:
db:19:6b:21:f2:3d:e2:bb:0d:2f:4b:fe:65:b0:22:
a4:c6:63:bc:c8:01:e6:3a:28:4f:cb:11:86:3d:d9:
a9:37:7a:c9:51:94:28:4e:02:de:6e:e3:14:f6:1a:
47:19:ec:32:8b:cd:ca:77:1e:42:03:6b:21:83:b7:
be:2b:88:1d:bb:1a:64:2b:41:f2:58:99:03:4e:4f:
be:c0:56:e2:51:58:f7:e8:46:3e:a5:ab:4f:7f:55:
4f:1a:4e:a8:c7:47:37:b3:a4:91:24:49:4f:89:e8:
b5:6e:2b:4b:f9:c7:d4:6c:95:6e:0a:5e:e0:f2:0a:
98:d3:5c:c2:f1:c1:34:8c:fd:9f:3b:10:62:49:3a:
45:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3D:7E:E6:5A:EC:E1:FC:8C:DD:DD:6D:7E:4F:5C:98:3B:D8:5E:D8
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:5f:d6:03:1b:5f:ff:dc:b0:75:1b:72:90:72:f7:4d:b8:6c:
7e:da:bb:97:62:94:96:2e:74:67:31:de:da:37:63:0f:7a:11:
e3:f4:c8:07:67:52:bb:95:d8:e4:46:ac:40:30:98:c8:ab:2b:
b1:37:29:49:56:8d:ce:1b:1d:7b:d4:b1:f4:cc:29:a0:a8:5c:
3b:64:fc:2c:d6:ed:d4:47:a4:22:4f:40:bd:27:c0:2e:a1:54:
52:02:0d:78:12:cc:1c:f1:12:a6:69:62:51:9c:42:5d:f9:23:
19:61:e3:39:38:4f:52:1b:5d:d3:d8:02:a4:cd:78:0b:56:db:
b9:cf:6a:29:9c:82:70:58:81:4b:1b:8d:cf:f3:d5:81:8d:2d:
9a:e9:3b:af:50:66:13:5e:59:1f:ea:88:9c:82:54:36:64:98:
66:44:cb:3e:d5:bf:ff:fd:02:32:7e:7e:46:2f:be:3d:73:09:
cd:46:fc:10:9b:a7:73:45:8b:dc:a7:8d:e1:76:61:ac:de:fa:
d2:bf:27:80:38:0b:b0:ac:b6:36:c4:c8:e9:b4:da:c0:b2:cd:
de:81:b5:d8:f0:5b:a7:08:21:e1:62:dd:41:43:9f:7c:45:6c:
88:10:f5:60:e4:4a:13:1f:44:bf:c6:3f:73:37:69:1f:05:17:
8c:8e:e9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:41:55 2026 by rpki-client