Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: UWFwbRRKwmv5qzdZhOwPNmyc1xA+GilR1vHnYa3+jlU=
Subject key identifier: 0E:17:41:53:A5:2B:0C:2D:8B:05:03:5E:C1:4F:17:C8:13:32:B9:17
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 019E20244C4F99EBB8D8D70F60486F667085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: 0406
Signing time: Wed 13 May 2026 07:01:50 +0000
Manifest this update: Wed 13 May 2026 07:01:50 +0000
Manifest next update: Thu 14 May 2026 07:01:50 +0000
Files and hashes: 1: 9t-kj9KSgE_mtJrGu_vF73d0l6Y.roa (hash: 51rv5VaG8OxclhZBSDZarO+xxvZazg5aJ0EVnW1xLb4=)
2: Cp2g6yP8AZxNfoA9Wugu4JCgHtU.roa (hash: dD5+5+i7pHxfaDCaP1GC9Pk/dDoxKx8XSPEPjuWP/AY=)
3: LFwn43xTYGqoLZrK3ArerlmBrjQ.asa (hash: AxTumCJIWLYkfNBVRk61fjyr7ogt1SGEuY0CQ+zm9dQ=)
4: Nc1LVsFzrH3eQcfHMAmDYgj_p64.asa (hash: /m2FPHvyf0O1/JM/QcuY6SFVqTD2GvTjahW6Zjqr3lE=)
5: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: Lkp4OkkcHbvQD4QtnHImKiTJa2fsfjf+om5twJVk4Os=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:24:4c:4f:99:eb:b8:d8:d7:0f:60:48:6f:66:70:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: May 13 07:01:50 2026 GMT
Not After : May 14 07:01:50 2026 GMT
Subject: CN=0e174153a52b0c2d8b05035ec14f17c81332b917
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6f:23:28:ee:7b:fa:4c:e5:0c:56:34:15:71:
d0:87:63:b6:03:0b:e5:18:ce:58:e6:a2:df:dc:9b:
b0:d6:3b:a7:aa:a6:e9:75:02:50:4f:fd:85:e3:8a:
78:3f:9c:0e:1e:0d:b0:c9:2b:99:a5:eb:55:dc:97:
29:f5:57:b2:cc:8a:81:0c:bc:75:d3:17:ff:df:8a:
d5:e9:83:bc:d9:4c:d9:3d:f6:28:eb:ef:1b:67:34:
5d:c7:41:f2:e8:e8:20:7c:77:1b:f1:e5:15:a8:3b:
65:f2:9d:39:66:2b:96:0a:c6:f2:e6:6e:05:c7:e0:
42:6f:86:71:87:25:66:0c:09:c3:78:4b:14:9b:ed:
d7:4f:b0:33:42:5f:62:39:31:74:db:46:df:2a:c6:
42:1a:31:fa:1d:8b:41:b7:89:77:b0:ad:af:3f:24:
d8:74:ab:0a:56:49:20:ea:07:bd:f2:0d:91:9d:08:
82:0a:d3:3a:89:4d:43:f9:4d:1d:56:25:92:7c:7c:
37:86:82:9c:32:23:f9:e2:79:ff:88:b5:0f:12:8a:
23:31:74:e6:20:83:88:a7:00:35:c7:fc:04:21:b2:
d4:8a:6b:32:b0:08:83:32:d5:6e:37:71:dd:e4:e0:
09:3b:29:7e:9b:8c:c3:94:f8:db:c6:d5:15:f6:fc:
d8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:17:41:53:A5:2B:0C:2D:8B:05:03:5E:C1:4F:17:C8:13:32:B9:17
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:10:af:05:81:8f:4c:fe:df:10:c8:76:c3:ef:12:62:14:f6:
c9:18:b9:02:55:09:6a:22:38:ff:cd:4b:d1:c5:2e:9b:57:c9:
21:c5:a7:60:72:a0:a7:d9:17:59:8a:e6:2e:89:68:cf:ab:7d:
93:5f:61:34:92:cc:8e:69:05:62:b3:76:a7:92:a3:02:1a:8e:
17:a4:3b:92:17:e6:c3:2a:8b:2d:b7:17:68:81:9c:ec:3f:2c:
80:ab:03:1f:61:1a:c1:ce:18:68:13:15:21:76:c2:22:a1:f9:
69:96:85:51:f3:3e:d9:b8:aa:f1:8d:ec:17:13:7c:0b:4d:56:
f8:1d:4e:62:0b:7f:26:59:a5:d2:58:48:29:ed:e8:e5:fb:f1:
06:4d:a1:16:5d:32:b3:fd:22:2e:1d:fa:6c:86:c8:c8:eb:ab:
0a:78:dd:33:49:c4:bb:71:4a:93:ad:6d:27:b5:6d:80:72:b7:
e1:b8:80:ac:83:cd:37:fd:e3:1b:61:c7:bd:58:4d:df:ae:8a:
89:56:c1:44:4a:b4:1e:5c:5f:d9:d5:a7:39:d1:4d:23:06:a1:
8e:26:ff:91:55:7b:5c:05:20:3f:2b:43:a7:39:97:25:aa:d1:
75:9d:dc:43:33:33:6b:a0:94:d6:bc:0c:51:c6:99:b1:cf:37:
b2:1d:22:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:59:08 2026 by rpki-client