Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
File: XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft (raw, json)
Hash identifier: 1p8Wu/OrH2ECijnuhfpIq7T7xdTT+7w+Rxt+YRcjJHg=
Subject key identifier: 3B:37:BE:99:CA:00:C8:D7:00:10:33:B7:4E:40:3E:4F:DE:A5:F4:8F
Authority key identifier: 5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
Certificate issuer: /CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Certificate serial: 019E1CB4599BE9A52C0AD32151E36B5AA111
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
Manifest number: 04E3
Signing time: Tue 12 May 2026 15:00:41 +0000
Manifest this update: Tue 12 May 2026 15:00:41 +0000
Manifest next update: Wed 13 May 2026 15:00:41 +0000
Files and hashes: 1: XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl (hash: sQGTTEptT9Q+dqIMx4vkqqtMdzsPuZktOS7UQC6xk48=)
2: ua_e8PovLDNf56za3RBEa7cuuaQ.roa (hash: AeMBv+klAL3WpkSagPgkjuVi+j0J2ixa7AC/uv/cJ9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:59:9b:e9:a5:2c:0a:d3:21:51:e3:6b:5a:a1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df9e856f0495c8490d5124e8cfbaf08d70dfb17
Validity
Not Before: May 12 15:00:41 2026 GMT
Not After : May 13 15:00:41 2026 GMT
Subject: CN=3b37be99ca00c8d7001033b74e403e4fdea5f48f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:85:24:d1:80:67:63:a6:3c:83:c0:03:12:90:
2e:59:cd:76:27:ce:30:c2:37:06:18:73:8f:cb:be:
f9:c4:99:fb:20:6f:d6:71:93:65:65:70:87:7e:56:
ef:c6:d9:33:06:99:90:91:78:0e:00:0b:68:ea:56:
7a:dc:80:6a:23:ce:d0:08:11:36:8f:f6:42:81:21:
5e:0e:e4:3d:d4:b5:bb:8e:bc:b1:64:8f:82:46:59:
38:30:b4:61:c8:1e:b0:0d:70:c8:8f:05:05:f5:98:
a5:9c:b1:a6:ab:5e:5c:35:48:14:15:d8:cd:b5:6b:
fb:67:15:bd:12:89:34:ba:53:de:11:e5:99:3b:c3:
21:b9:a1:d6:7d:a0:cc:ee:8b:16:b1:ef:ae:dd:43:
d0:94:44:a2:1b:9e:14:02:8a:71:c6:a4:83:be:df:
c9:1b:05:1f:7c:7c:7b:1b:ca:2e:14:26:1e:1b:2d:
1e:eb:70:26:6c:43:58:90:89:90:b2:e1:b2:07:b5:
dc:34:54:6a:c1:21:28:f1:02:45:b4:96:12:74:fd:
26:ed:b5:4f:53:6a:ce:7a:d5:23:41:9e:ce:ec:bb:
da:6d:5d:a6:12:9f:1c:72:cc:e0:29:87:ac:b4:f9:
4a:00:26:3e:88:e9:a4:55:56:e1:a6:68:ad:04:ce:
63:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:37:BE:99:CA:00:C8:D7:00:10:33:B7:4E:40:3E:4F:DE:A5:F4:8F
X509v3 Authority Key Identifier:
keyid:5D:F9:E8:56:F0:49:5C:84:90:D5:12:4E:8C:FB:AF:08:D7:0D:FB:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfnoVvBJXISQ1RJOjPuvCNcN-xc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/13dc38-2e75-4b07-bef0-e1ea453c5257/1/XfnoVvBJXISQ1RJOjPuvCNcN-xc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:dd:44:c2:03:c0:60:39:63:21:9c:34:ad:15:a8:2d:4d:45:
f0:e3:e5:e4:25:04:16:6c:4c:b4:a6:f5:12:9c:aa:0e:d9:a9:
2e:56:a1:17:a8:4d:b1:60:58:10:c1:fe:aa:66:66:20:9a:2c:
ad:ef:4a:9c:32:d9:4d:3f:cc:67:67:b6:7f:80:88:42:9b:c0:
8a:99:d0:ce:0e:b0:02:92:e5:a0:17:3c:0e:76:b8:2b:f1:33:
57:8a:21:8a:ff:76:9e:04:a2:96:b5:7b:5f:c5:a1:3d:4a:15:
9e:90:78:73:da:b1:52:20:98:47:0d:50:e2:85:ff:13:7b:2a:
2d:a7:23:30:0c:43:78:a7:d2:ef:22:bd:b2:ee:d1:8c:de:d5:
3c:c0:b3:b6:60:07:a6:5c:10:c7:e1:0b:ef:fb:b7:27:65:4c:
34:a1:09:cc:87:46:8e:b1:b9:03:19:df:fb:fd:2e:74:b9:0c:
f8:98:af:b7:98:eb:84:49:02:f3:f9:3a:5d:91:b6:72:eb:80:
7d:fc:38:f8:99:ab:df:f6:ba:f2:d4:76:67:81:76:99:44:57:
a5:72:f7:63:e1:aa:43:61:c9:b5:83:22:cf:23:a9:d9:90:0f:
a9:e1:4a:5d:fe:07:8f:31:5c:69:2a:85:49:04:60:8f:4f:75:
5e:f4:94:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:04:27 2026 by rpki-client