Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
File: XlFUwaEL4eJaptT4rvpGrTH5uW4.mft (raw, json)
Hash identifier: etwopSdLCKAyAPeegU9dsgeYMqthrqd3UJOIvXy8i78=
Subject key identifier: D1:F6:AA:74:AC:90:C3:63:06:AB:51:81:32:31:39:71:9A:A6:CD:56
Authority key identifier: 5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
Certificate issuer: /CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Certificate serial: 019E1E3554DFE33DC61A4AD48599EC3AEABC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
Manifest number: D7
Signing time: Tue 12 May 2026 22:01:12 +0000
Manifest this update: Tue 12 May 2026 22:01:12 +0000
Manifest next update: Wed 13 May 2026 22:01:12 +0000
Files and hashes: 1: XlFUwaEL4eJaptT4rvpGrTH5uW4.crl (hash: wrOv5CIKZTv/hxIuqPF25SQKKaIz1u0beeJDtqXObfA=)
2: y9CLGthskm4bnZl6iRpadOOvcw0.asa (hash: 4oKFMMI1txxJcbOTwatF9YPUQxB0wLl2gg3DiiRkr5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:54:df:e3:3d:c6:1a:4a:d4:85:99:ec:3a:ea:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e5154c1a10be1e25aa6d4f8aefa46ad31f9b96e
Validity
Not Before: May 12 22:01:12 2026 GMT
Not After : May 13 22:01:12 2026 GMT
Subject: CN=d1f6aa74ac90c36306ab5181323139719aa6cd56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ce:19:e3:8c:b6:21:1f:48:26:a3:ce:c9:fc:
a0:01:69:bf:9e:02:32:95:2d:5f:5a:dd:34:51:16:
2b:2d:8d:58:61:6b:c8:41:5d:82:18:59:b9:2c:b6:
2f:40:ea:23:e8:27:b6:eb:51:c1:3b:48:b5:81:b9:
c2:8b:a2:ee:9f:28:09:cc:60:69:02:f7:c1:80:b5:
69:b8:99:3d:5c:c5:ad:99:69:cc:06:5f:eb:b3:6d:
af:e6:63:4f:39:f9:ad:aa:f3:f3:ad:35:0b:99:07:
22:c1:73:52:8d:fc:f8:e6:5f:5f:9a:5a:a2:ca:78:
17:8a:81:fe:08:b2:09:5c:19:58:38:eb:71:b1:30:
6a:78:9a:58:d2:0e:dc:df:6d:55:6f:60:10:0d:8b:
ba:97:a7:8d:95:9a:0f:34:c1:49:58:3c:6d:b9:c0:
cf:84:93:97:97:09:c6:5f:fb:99:30:60:6b:f6:18:
39:7f:50:9f:a3:39:a4:8e:d6:cc:14:3b:6a:d6:87:
db:90:74:99:10:9b:51:d5:05:9d:21:35:9b:90:20:
2d:7c:8a:69:7d:3b:95:1c:5d:59:59:7f:f4:5d:a6:
59:7c:d3:d6:39:a9:df:c7:5a:54:45:b6:1a:ae:56:
01:09:53:cb:43:77:34:21:65:f7:a4:3f:0a:85:84:
65:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F6:AA:74:AC:90:C3:63:06:AB:51:81:32:31:39:71:9A:A6:CD:56
X509v3 Authority Key Identifier:
keyid:5E:51:54:C1:A1:0B:E1:E2:5A:A6:D4:F8:AE:FA:46:AD:31:F9:B9:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlFUwaEL4eJaptT4rvpGrTH5uW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/3a7ef8-5770-448a-a12c-dc8e90f6292c/1/XlFUwaEL4eJaptT4rvpGrTH5uW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:67:ca:a4:b4:3e:d5:ed:b5:69:34:b0:a0:6a:28:2e:26:b0:
50:fc:b2:40:68:a9:f5:63:e1:05:88:7d:99:17:ff:5b:dc:07:
18:49:4c:f3:29:ad:45:97:6b:17:03:e3:3d:8d:52:3c:29:d3:
dd:50:49:95:f4:6a:cc:29:13:39:37:f4:d3:96:2f:a1:25:2a:
96:45:2c:43:5a:d7:d2:fd:f0:74:ce:7e:a0:95:33:70:10:cc:
01:b5:b8:ac:17:0d:ce:15:aa:cb:4b:6f:2e:aa:40:a7:ee:f3:
30:b6:f8:80:05:e1:f0:82:e9:b9:a5:43:2f:a8:24:f1:4c:81:
9b:6a:79:94:c6:17:3e:04:df:0a:04:66:00:98:b7:31:88:f0:
ac:13:72:af:20:d0:21:20:13:c2:7e:f2:ff:c6:e7:1c:7a:6b:
bf:09:9b:5c:fe:3f:2f:4d:f3:63:8d:f3:2f:92:c3:7a:da:c1:
5a:5b:d6:1d:77:47:09:32:1b:6b:65:d0:72:40:85:5c:25:7f:
47:a9:1f:94:44:26:cf:2e:40:50:e7:a1:c7:80:a0:f8:a0:ab:
92:4c:d4:40:5b:84:ef:5f:bc:c7:40:d4:4c:81:95:a5:31:63:
e8:5a:f5:d0:6a:81:c7:54:c6:25:e2:13:0f:c9:6a:92:c4:cc:
70:ab:dc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:06 2026 by rpki-client