Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
File: xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft (raw, json)
Hash identifier: BvuLP9So6zKyTMFq5InJ57B0pPDe/I+46vQoUpRdfbg=
Subject key identifier: 59:B5:77:F6:71:33:26:66:4E:E9:E9:AC:27:C0:86:82:81:F1:18:4E
Authority key identifier: C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
Certificate issuer: /CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Certificate serial: 019E1F7F1110516ED45870431B2605141A28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
Manifest number: 1905
Signing time: Wed 13 May 2026 04:01:21 +0000
Manifest this update: Wed 13 May 2026 04:01:21 +0000
Manifest next update: Thu 14 May 2026 04:01:21 +0000
Files and hashes: 1: eOXpQIA6qLtSRKi37aaBf2fN-Nw.roa (hash: YlsuBpQ4jmohvQqxKmhcIgBvEbbXIh+AX1kjTabOK9c=)
2: xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl (hash: AwYR5JUgjBH7b5kus2PJdaM/fR11Ge6NrUlvMa6OTn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:11:10:51:6e:d4:58:70:43:1b:26:05:14:1a:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Validity
Not Before: May 13 04:01:21 2026 GMT
Not After : May 14 04:01:21 2026 GMT
Subject: CN=59b577f6713326664ee9e9ac27c0868281f1184e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:12:33:d4:1c:1a:b3:39:4f:18:ec:99:74:ed:
44:ae:d8:c6:8c:e8:f9:88:3c:20:ea:47:35:51:ae:
13:98:1a:fc:61:57:d6:fb:e6:71:0f:95:ca:88:7b:
ad:cf:af:f7:bc:f0:52:09:1b:ac:c2:08:0d:64:ea:
87:1b:5f:2d:e2:40:fb:92:34:05:34:15:5a:2b:44:
72:7c:b5:6f:b6:d8:fb:c7:81:61:a7:3c:f8:01:d0:
7d:3f:83:70:9c:0c:d3:9f:6d:92:6b:f4:b6:7a:aa:
cd:a3:f6:32:56:39:e1:49:9d:e2:cd:50:13:85:95:
87:f2:f4:2d:0c:3d:ba:5b:37:75:b9:c3:e1:ae:7b:
19:61:9c:ba:9f:7f:d0:fb:01:13:cf:69:08:79:3e:
01:c4:16:3d:3f:c7:08:85:69:7a:67:b5:73:b8:bb:
bc:9d:af:58:d6:d1:48:57:60:1f:6c:83:00:13:9b:
55:b9:72:79:51:fc:96:b6:f0:c7:7a:44:3d:13:bb:
8f:08:69:29:91:c5:ee:db:00:66:6e:dd:c5:b5:b2:
3f:17:28:c1:0b:8d:3b:2f:ca:37:cb:b3:03:65:f7:
35:c8:8a:a1:52:bf:07:55:24:a6:c8:cc:b5:62:09:
b5:8c:37:36:43:b9:e8:4e:45:a7:1b:7c:c0:c0:b3:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:B5:77:F6:71:33:26:66:4E:E9:E9:AC:27:C0:86:82:81:F1:18:4E
X509v3 Authority Key Identifier:
keyid:C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:88:29:8f:a4:4d:7c:ac:b9:5e:23:a1:5d:64:eb:c4:09:44:
ff:e2:0d:39:ff:2d:a6:79:7c:c0:f7:e4:71:fc:b0:ab:61:b5:
ef:b5:dc:90:e9:4e:02:62:71:70:d4:bb:e3:7b:60:69:61:ce:
97:a0:ef:e1:62:4f:1d:c3:0b:2a:da:4f:4b:48:92:a7:1a:b3:
63:e2:e5:10:31:28:92:c0:c1:be:40:bc:7b:7a:6e:db:a8:2f:
f9:94:8e:4a:f1:36:9e:d4:71:8d:0f:98:55:7d:1c:bd:7b:1d:
d1:92:00:cc:8c:c1:1d:f3:eb:65:02:3b:90:6d:3c:80:81:56:
e0:8a:c2:49:6b:ab:89:8e:8a:84:bf:c5:ee:82:7d:0d:a4:f6:
a4:22:03:19:21:79:80:e7:be:79:a7:3b:39:61:d7:e3:70:4f:
1c:b5:70:d7:b8:08:01:6f:1f:e9:34:85:0d:2d:b5:0b:0f:4b:
24:08:28:07:6e:44:e7:7c:b1:c2:5a:ee:17:b5:92:1e:93:a1:
b0:b6:11:4e:92:28:df:f6:a9:ec:b8:67:ba:67:ad:e8:ed:51:
be:72:78:09:bb:d3:cc:c4:ad:f3:6e:93:5d:4d:d9:0b:c4:c9:
51:02:34:c0:de:aa:8c:a3:ae:59:f2:e9:a8:10:c3:54:b1:af:
43:2a:70:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:27 2026 by rpki-client