Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
File: XeFelYoRQmpVYoXiiuNA8KJdKgM.mft (raw, json)
Hash identifier: c+QtyDIJLZDJoxANIMrbX+txs3XvGedxrJdhx3An/oQ=
Subject key identifier: 0C:17:5B:EA:21:EC:42:0C:9A:81:A5:D0:A8:2D:24:4B:AB:0C:B5:6E
Authority key identifier: 5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
Certificate issuer: /CN=5de15e958a11426a556285e28ae340f0a25d2a03
Certificate serial: 019E1F47B2DE734B3EFE272FC99A57575965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
Manifest number: 04D5
Signing time: Wed 13 May 2026 03:00:52 +0000
Manifest this update: Wed 13 May 2026 03:00:52 +0000
Manifest next update: Thu 14 May 2026 03:00:52 +0000
Files and hashes: 1: RKz3IJpK3tLGmxT3W9hM3i7PGMs.roa (hash: RoVqVK5DIJNCCPA2hRYkxQFyuiyebRh/F8G7DU407FU=)
2: XeFelYoRQmpVYoXiiuNA8KJdKgM.crl (hash: ZM3UXQsLX2r9WqvcAbD4HZ8XXWGv9oXxSMVHigl45e8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:b2:de:73:4b:3e:fe:27:2f:c9:9a:57:57:59:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5de15e958a11426a556285e28ae340f0a25d2a03
Validity
Not Before: May 13 03:00:52 2026 GMT
Not After : May 14 03:00:52 2026 GMT
Subject: CN=0c175bea21ec420c9a81a5d0a82d244bab0cb56e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6e:9a:0e:e9:0a:46:d2:f9:b7:0f:4e:99:ee:
71:be:97:87:22:cd:9e:6b:3b:ee:36:30:55:5b:e5:
15:8f:ed:29:b0:fd:e2:bb:a4:49:20:e8:92:6c:dc:
ce:32:32:cc:e2:6e:69:13:6d:19:4b:67:c2:52:bd:
fe:b0:55:ff:60:c5:ca:86:38:e9:a4:cd:b1:96:ae:
65:45:07:2c:50:23:39:02:67:5b:f5:5f:80:c4:b3:
e1:7e:83:bf:16:ea:5f:7e:16:12:2c:0a:13:a9:77:
f3:b3:cf:d3:da:b5:df:aa:a4:90:95:50:ee:59:b3:
14:b7:a5:55:11:fa:1f:ed:84:98:3a:99:1a:65:21:
23:01:d4:d8:3c:d7:3a:83:33:b7:21:aa:c1:ae:db:
a2:92:dc:27:f6:0f:25:a6:12:42:65:36:06:65:90:
5e:92:78:18:47:eb:b2:cd:13:63:94:1d:2b:ee:11:
ad:3c:f8:c7:2d:eb:8c:0c:52:f6:b6:7a:6b:02:34:
e9:01:7b:93:e3:84:42:0c:07:51:bf:8a:4f:1a:cc:
63:80:aa:da:19:54:25:29:a5:db:73:2e:e7:b5:ed:
e9:90:64:ba:75:d5:4a:47:91:bf:e4:10:88:21:52:
33:a1:18:8a:a3:d4:ea:b0:38:c5:fa:bd:56:d2:ba:
15:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:17:5B:EA:21:EC:42:0C:9A:81:A5:D0:A8:2D:24:4B:AB:0C:B5:6E
X509v3 Authority Key Identifier:
keyid:5D:E1:5E:95:8A:11:42:6A:55:62:85:E2:8A:E3:40:F0:A2:5D:2A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XeFelYoRQmpVYoXiiuNA8KJdKgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9e4958-9f28-48b4-851a-82eebdc458fe/1/XeFelYoRQmpVYoXiiuNA8KJdKgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:82:e8:80:33:28:be:50:e0:22:66:29:ed:73:d6:81:cb:62:
b2:f8:21:de:ae:1f:c5:fd:51:13:dd:fd:59:3e:ef:ff:45:c9:
39:d3:09:9c:6b:a6:92:ce:88:21:16:29:7b:d9:20:ac:64:cd:
23:37:f3:94:02:b7:95:84:16:b2:49:11:ed:ca:63:5e:27:63:
b0:81:d0:bb:b2:5f:76:41:8b:97:01:4b:82:5b:72:64:89:ac:
02:e1:55:b3:af:3c:bc:b4:6f:a9:63:99:38:bc:98:89:e7:f9:
cb:be:4b:d6:a5:8e:3b:77:9a:3d:bd:f2:8b:f8:e6:85:0f:51:
5b:09:76:ae:f2:83:7e:b9:16:73:c4:f3:7d:41:43:c0:b2:6e:
c1:82:54:cd:12:75:d4:bd:72:89:35:44:3a:d1:46:0e:50:95:
7c:09:12:d3:2a:5c:73:5d:24:56:c7:93:17:0a:5a:cb:d2:a6:
62:28:e3:d0:7a:9d:48:2c:d8:ae:f2:49:b8:ec:88:97:58:1e:
4d:1b:ca:86:b3:56:17:eb:32:ed:64:53:11:63:b8:77:29:7f:
1c:7c:5d:5e:71:16:ed:7c:eb:b1:4f:da:b4:52:17:d8:38:5a:
67:b7:9c:ed:36:41:85:3b:7c:f2:8c:e3:7d:3f:43:f9:27:03:
43:07:f9:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fR7Lec0s+/icvyZpXV1llMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZTE1ZTk1OGExMTQyNmE1NTYyODVlMjhhZTM0MGYwYTI1
ZDJhMDMwHhcNMjYwNTEzMDMwMDUyWhcNMjYwNTE0MDMwMDUyWjAzMTEwLwYDVQQD
EygwYzE3NWJlYTIxZWM0MjBjOWE4MWE1ZDBhODJkMjQ0YmFiMGNiNTZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnW6aDukKRtL5tw9Ome5xvpeHIs2e
azvuNjBVW+UVj+0psP3iu6RJIOiSbNzOMjLM4m5pE20ZS2fCUr3+sFX/YMXKhjjp
pM2xlq5lRQcsUCM5Amdb9V+AxLPhfoO/FupffhYSLAoTqXfzs8/T2rXfqqSQlVDu
WbMUt6VVEfof7YSYOpkaZSEjAdTYPNc6gzO3IarBrtuiktwn9g8lphJCZTYGZZBe
kngYR+uyzRNjlB0r7hGtPPjHLeuMDFL2tnprAjTpAXuT44RCDAdRv4pPGsxjgKra
GVQlKaXbcy7nte3pkGS6ddVKR5G/5BCIIVIzoRiKo9TqsDjF+r1W0roVHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwXW+oh7EIMmoGl0KgtJEurDLVuMB8GA1UdIwQY
MBaAFF3hXpWKEUJqVWKF4orjQPCiXSoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEt
ODJlZWJkYzQ1OGZlLzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC85ZTQ5NTgtOWYyOC00OGI0LTg1MWEtODJlZWJkYzQ1OGZl
LzEvWGVGZWxZb1JRbXBWWW9YaWl1TkE4S0pkS2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAboLogDMo
vlDgImYp7XPWgctisvgh3q4fxf1RE939WT7v/0XJOdMJnGumks6IIRYpe9kgrGTN
IzfzlAK3lYQWskkR7cpjXidjsIHQu7JfdkGLlwFLgltyZImsAuFVs688vLRvqWOZ
OLyYief5y75L1qWOO3eaPb3yi/jmhQ9RWwl2rvKDfrkWc8TzfUFDwLJuwYJUzRJ1
1L1yiTVEOtFGDlCVfAkS0ypcc10kVseTFwpay9KmYijj0HqdSCzYrvJJuOyIl1ge
TRvKhrNWF+sy7WRTEWO4dyl/HHxdXnEW7XzrsU/atFIX2DhaZ7ec7TZBhTt88ozj
fT9D+ScDQwf5ug==
-----END CERTIFICATE-----
Generated at Wed May 13 07:22:40 2026 by rpki-client