Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
File: XxSk5lWLq4nTbjuiHJXir91o--o.mft (raw, json)
Hash identifier: 2Z2AYJ+nMDUPlH4qg4jm6gPijNFcIEkwptyL13umiV4=
Subject key identifier: 8A:D9:AD:A9:BD:45:34:AA:E3:92:5F:AD:B2:2D:E8:D6:E1:93:D7:1A
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 019E1F7F4C3BE79E7FC77F2AE978208FC7DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
Manifest number: 1878
Signing time: Wed 13 May 2026 04:01:36 +0000
Manifest this update: Wed 13 May 2026 04:01:36 +0000
Manifest next update: Thu 14 May 2026 04:01:36 +0000
Files and hashes: 1: 4GacYlC1xTXBA2gZGI4h12SFY-0.roa (hash: NjXRgF24DIZuh863duD3ZThupdmVygwzxLiXyqu402Q=)
2: E0wwloupObPs9_O7vd7bSguVl6w.roa (hash: db081CMNM92GGYGAY4P5+DovYW2JE0c6H2IK3KWF7l0=)
3: XxSk5lWLq4nTbjuiHJXir91o--o.crl (hash: bQIwMhELdP0f7JoJa2xdX4TDKJQXv/Wt6F0nsq9zD/0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:4c:3b:e7:9e:7f:c7:7f:2a:e9:78:20:8f:c7:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: May 13 04:01:36 2026 GMT
Not After : May 14 04:01:36 2026 GMT
Subject: CN=8ad9ada9bd4534aae3925fadb22de8d6e193d71a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cf:6f:39:c4:83:8b:a7:ce:ea:fb:39:b1:87:
d4:1d:cf:01:d9:1d:5d:80:98:dc:c8:58:78:db:0b:
1a:a9:a0:98:a9:bf:c9:ee:e2:39:35:f2:22:ff:5b:
54:0c:02:6d:1a:c6:d7:f3:c9:27:3a:50:d8:1b:7a:
21:ec:44:e9:6e:fe:d9:66:76:6c:92:06:9d:22:0f:
de:e4:67:6c:91:8a:47:89:d8:6c:80:1f:b3:5e:5a:
6a:48:16:c2:a7:13:e4:f4:0c:b2:ce:c1:83:ec:00:
57:6f:ce:e6:44:4d:5d:e3:f9:52:43:34:2c:a5:37:
2f:30:70:ea:9c:2b:88:e4:6c:bf:b3:c7:d5:6b:94:
35:8d:06:5f:93:1b:a8:3e:bc:2f:15:4f:e8:15:0e:
f1:79:b0:17:d8:96:02:90:d7:21:42:8d:5d:33:3a:
d0:db:59:7e:78:0a:82:b9:5c:e6:c7:ff:70:be:94:
6b:98:8c:25:9f:ce:e7:78:29:ac:6e:f0:19:89:06:
39:61:16:b0:98:c2:bb:f9:91:36:62:23:74:ab:2f:
3e:bd:5c:3c:4b:14:d2:c1:e4:75:ca:fa:e1:c5:1a:
11:61:94:d8:21:c2:8c:1b:a9:51:c0:e0:a6:14:8c:
c8:7a:bd:31:19:30:9a:04:a7:0e:a5:3c:73:24:97:
00:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D9:AD:A9:BD:45:34:AA:E3:92:5F:AD:B2:2D:E8:D6:E1:93:D7:1A
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:ea:65:bf:b1:b7:63:7a:a0:b5:61:62:ee:03:c1:60:4c:3a:
85:94:02:5b:10:79:7f:42:df:bb:3c:7e:dc:a2:95:36:cc:dc:
73:d1:65:cd:97:c4:e8:cd:78:70:5a:d6:8e:4c:70:2c:f0:a5:
29:bd:a1:92:c0:05:b5:91:65:64:45:6d:46:1e:58:96:13:15:
d6:6c:59:95:62:ce:05:c3:3b:23:34:11:e4:32:53:aa:21:f0:
36:25:a4:62:81:09:09:c8:54:cb:25:6d:13:88:e2:82:df:1f:
93:60:c4:06:14:1f:63:1f:ae:74:9b:99:13:3f:89:a3:72:b3:
5c:1e:50:5e:93:66:c6:b4:f5:dc:8a:ff:24:b2:f6:6f:ed:8f:
b2:2b:61:98:a6:b5:81:0b:6c:0c:c4:2e:8a:75:94:37:9e:b7:
e9:9d:cf:cd:c5:53:fc:6c:0e:2b:ba:81:17:f4:81:92:dc:95:
f7:59:21:48:b2:2d:75:36:38:2b:2d:ef:53:7d:cc:7f:6c:17:
28:9c:a6:d1:07:8f:e2:ef:b5:f8:f3:93:9e:66:91:22:c0:bd:
36:a5:cf:e0:10:09:81:d7:54:7f:c0:7f:9a:ea:51:ec:bc:7f:
f6:1f:96:7e:80:bb:51:0a:4e:f4:5b:3f:2c:52:48:85:99:9d:
b2:ce:5c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:42:00 2026 by rpki-client