Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
File: xrbwexczYPIV8VGMhxKksFTYXAc.mft (raw, json)
Hash identifier: sTI+iZmcApJqGlplY7r8IgJFuPKRTXbHiRepol9Zs2w=
Subject key identifier: 9B:C3:BC:B3:F2:D1:3B:BC:47:52:FE:C2:D6:E9:DC:A7:B8:9D:1F:B1
Authority key identifier: C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
Certificate issuer: /CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Certificate serial: 019E21360BBF311275E9EBA6E9826948AF8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 12:00:50 +0000
Manifest this update: Wed 13 May 2026 12:00:50 +0000
Manifest next update: Thu 14 May 2026 12:00:50 +0000
Files and hashes: 1: lXZ70sH06yN7K7WcAZYGhagQGQU.roa (hash: eJ37tNCDP1cEuP29zNg/vJT6DSno9tiJhEXL9Ek6IDY=)
2: xrbwexczYPIV8VGMhxKksFTYXAc.crl (hash: Kz+xMoJihwxeTY/ozIQyAL7l0PQUbL5V5vSjOobPF9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:0b:bf:31:12:75:e9:eb:a6:e9:82:69:48:af:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b6f07b173360f215f1518c8712a4b054d85c07
Validity
Not Before: May 13 12:00:50 2026 GMT
Not After : May 14 12:00:50 2026 GMT
Subject: CN=9bc3bcb3f2d13bbc4752fec2d6e9dca7b89d1fb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:74:ad:a3:2b:8e:3d:1c:5f:91:d0:21:5e:58:
a5:42:46:c8:e5:b3:73:be:15:7f:c3:eb:f7:c4:d9:
2e:01:94:c5:b7:f4:24:15:bc:8f:21:d9:5a:2e:b1:
08:4b:45:a2:54:8c:f8:0b:6f:ff:de:d2:4b:64:e5:
f6:9c:3b:ba:20:20:23:b9:06:39:35:5c:8c:ad:71:
dc:9f:64:0b:c8:37:40:25:23:96:13:73:d8:40:07:
2a:15:89:76:05:21:29:0c:90:96:2d:78:4d:b3:f9:
0e:05:7b:4b:b7:e2:d8:e5:bc:2c:45:fb:81:56:98:
64:1a:c1:53:65:b9:c6:6a:36:08:04:3c:9a:19:f8:
1d:a7:fe:ae:f7:17:da:33:80:cb:ee:1c:89:d1:bd:
8b:e7:6d:30:ea:26:d7:4f:d2:93:c0:f9:0a:35:88:
76:69:b9:72:21:10:38:82:70:a8:85:70:d4:40:fe:
77:e5:c5:64:93:0a:87:37:03:8f:62:c5:39:6c:db:
a0:75:9b:b5:b8:ae:7f:3e:76:b6:67:ea:56:93:ab:
a5:41:22:66:33:93:74:0f:64:9d:0b:2e:9e:65:f6:
0a:b1:59:16:4e:93:50:15:40:2e:d9:32:7a:b2:a0:
da:03:3a:85:95:91:91:b9:5e:6d:9b:c5:4f:79:88:
50:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C3:BC:B3:F2:D1:3B:BC:47:52:FE:C2:D6:E9:DC:A7:B8:9D:1F:B1
X509v3 Authority Key Identifier:
keyid:C6:B6:F0:7B:17:33:60:F2:15:F1:51:8C:87:12:A4:B0:54:D8:5C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrbwexczYPIV8VGMhxKksFTYXAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/b872b6-c30a-4616-b5a7-28d94fcb1088/1/xrbwexczYPIV8VGMhxKksFTYXAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:41:af:04:7a:73:c2:65:55:0a:39:b5:49:4c:07:11:be:fc:
e4:1f:d0:8e:5c:e7:1a:ac:ad:c5:92:a5:77:9b:81:82:fe:f2:
fc:12:52:d6:34:bd:55:bf:6a:49:78:bc:f8:9a:f7:6f:4b:39:
97:fa:02:92:d5:61:ec:35:74:2b:35:4e:39:5a:60:14:47:02:
79:a7:e6:bd:de:56:53:f2:0f:40:df:d9:72:bf:28:17:15:b9:
30:b6:2e:e3:58:d6:c0:62:e4:d4:1e:16:ab:30:88:49:43:37:
09:c2:8b:43:aa:e9:89:e7:ed:a1:77:32:4e:62:eb:14:7e:26:
bf:be:72:81:cb:1f:7d:67:10:65:8e:08:ef:34:f6:43:0b:ba:
ef:70:82:7a:8d:61:79:67:43:10:e1:c0:2b:13:aa:aa:8c:42:
55:3a:3a:7e:36:23:ef:61:9f:6e:79:02:b9:99:3f:f3:2b:f7:
7a:b3:e5:15:d7:1a:43:e3:f5:8f:4e:35:89:66:92:07:d3:18:
30:2f:55:a6:24:08:3f:bd:77:80:f9:42:f2:99:a4:12:1d:28:
e2:e3:84:a0:bd:37:be:42:15:8a:aa:a4:07:65:70:5d:3d:f7:
6c:5f:8b:9d:23:de:22:56:e4:91:04:fa:83:d2:cc:24:f0:5a:
93:21:74:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:42:32 2026 by rpki-client