Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
File: xyIeQCmYq8HwNUdeFYt06MdpIMA.mft (raw, json)
Hash identifier: MqIPkgnJlMLq9yGbPTz9Sejye/BqyaijpI5HI5eqNx0=
Subject key identifier: 5B:F7:03:7D:63:BB:0D:D8:79:C3:FA:3A:4D:07:F6:5C:CA:D3:81:E4
Authority key identifier: C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
Certificate issuer: /CN=c7221e402998abc1f035475e158b74e8c76920c0
Certificate serial: 019E1F7EA876B75FAD1C2524BE8D31646328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 04:00:54 +0000
Manifest this update: Wed 13 May 2026 04:00:54 +0000
Manifest next update: Thu 14 May 2026 04:00:54 +0000
Files and hashes: 1: F7bFWfa8raW6YPzNQdPQYhccFpw.roa (hash: XVhjnbPUE5xdXqpegewxKMJvfafoKnZU90EE9D+PlOg=)
2: JpOEIniBJHts2084NOqMHq98Ajc.roa (hash: bzhADrpPKOaVRuCZzxcDyjV658iQtircvowggSUU670=)
3: xyIeQCmYq8HwNUdeFYt06MdpIMA.crl (hash: pEsjRXYP5JzEDTTqnm41eF8qby1/b3BiDBmLjxv7fOE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:a8:76:b7:5f:ad:1c:25:24:be:8d:31:64:63:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7221e402998abc1f035475e158b74e8c76920c0
Validity
Not Before: May 13 04:00:54 2026 GMT
Not After : May 14 04:00:54 2026 GMT
Subject: CN=5bf7037d63bb0dd879c3fa3a4d07f65ccad381e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d9:5a:90:da:35:25:f7:eb:63:30:77:0e:5b:
89:f5:6a:d1:ab:33:9c:f4:0c:f2:47:27:4b:b5:12:
5f:0e:a8:6a:24:0b:d5:90:24:8c:96:1d:1e:96:78:
8a:6f:69:1e:f6:53:8b:9f:bd:19:4d:19:05:c7:f6:
86:e7:c1:12:67:4f:0c:97:6a:09:76:60:37:2c:13:
30:e6:83:03:fe:05:97:34:24:2b:a0:5b:77:c5:2a:
ed:d3:f3:38:eb:8b:5c:fb:d3:fa:07:23:7d:40:7b:
cb:45:3f:57:a7:e8:76:28:c4:9f:fb:d4:aa:4d:11:
8a:79:f5:1c:43:2c:84:2a:2c:5f:68:65:7d:80:42:
b0:e9:1b:7c:90:bd:a5:71:2c:07:4b:b7:80:f7:fe:
63:60:ca:e0:83:a3:2f:6c:bf:2e:d8:97:e5:5e:6a:
91:9c:b5:4f:64:26:55:3c:e9:ef:9b:ce:76:cd:c0:
6f:b0:9a:f9:be:52:1c:3f:3a:ec:24:6e:f3:7b:a7:
8f:3d:d0:9b:6f:24:cd:22:64:5a:91:d1:93:29:2d:
a3:1a:ed:44:90:8f:49:7c:6c:aa:cb:0c:75:f2:df:
19:a6:f1:98:9e:36:17:97:eb:d9:2f:5c:8a:95:18:
a3:87:a6:b8:19:f8:09:7b:a3:ce:de:4c:f6:4e:3d:
28:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F7:03:7D:63:BB:0D:D8:79:C3:FA:3A:4D:07:F6:5C:CA:D3:81:E4
X509v3 Authority Key Identifier:
keyid:C7:22:1E:40:29:98:AB:C1:F0:35:47:5E:15:8B:74:E8:C7:69:20:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xyIeQCmYq8HwNUdeFYt06MdpIMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/e9ca7a-411c-43a8-952f-cc540608c41d/1/xyIeQCmYq8HwNUdeFYt06MdpIMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:51:32:8f:c3:46:d8:5b:c2:40:30:fb:07:99:4f:9c:23:00:
e0:54:47:d3:07:74:72:70:03:5d:cd:a5:6e:96:ba:ca:dd:10:
46:80:ac:a7:1f:98:ca:43:c5:9e:ab:f1:5a:35:e7:84:77:38:
97:ff:23:5d:bf:6d:df:60:a5:22:80:8a:d7:4d:9a:97:67:0e:
2b:a0:54:8e:cb:fe:3b:17:7e:99:4e:84:89:0d:ec:dd:fd:52:
64:ed:fb:79:ae:0b:48:64:2f:3b:61:d0:fa:ff:a3:a9:ff:51:
91:b4:b3:16:80:d9:5e:18:7a:9f:a8:eb:ce:58:b5:3f:54:a5:
c9:94:e5:04:bb:37:fb:0d:ec:c6:2c:01:53:a6:16:82:aa:e6:
da:67:b5:fb:c5:57:29:a1:c4:0c:42:88:bb:13:2d:45:a6:35:
0e:29:41:9f:8f:4e:6a:d4:6f:b5:df:14:34:0b:97:1d:79:29:
72:f6:83:92:b8:8b:e7:20:2f:4d:bd:9c:af:3b:0a:58:85:47:
8b:2e:d4:d8:88:60:27:19:79:fb:72:83:a8:3e:46:78:8f:ab:
61:58:43:78:43:51:07:15:12:6c:09:4f:e5:86:c7:62:20:99:
b3:9a:f5:a0:7c:1a:d5:34:5b:72:ea:ad:35:22:7f:4a:f3:5d:
c2:bb:1b:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:02:15 2026 by rpki-client