Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
File: xVfBn2xy2JAMTYnsers11PqSEUs.mft (raw, json)
Hash identifier: 1Tzasn2cpeWtZt1I8ZKWh0iJ14pBHsHkeqT0Ym7aMI4=
Subject key identifier: AE:99:81:F8:61:E1:4B:51:3F:1F:5E:5D:11:EA:EA:1C:4D:7A:E6:AA
Authority key identifier: C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
Certificate issuer: /CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Certificate serial: 019E1FB6113622787C930AF0ACFC0F1E820E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 05:01:25 +0000
Manifest this update: Wed 13 May 2026 05:01:25 +0000
Manifest next update: Thu 14 May 2026 05:01:25 +0000
Files and hashes: 1: UHPJaWl80QM_ZyHpNl4B0tVvbT0.roa (hash: aDJ3tJRmYftllAauT3ZEK2YDL9vFANpr/wdc/+xRph4=)
2: xVfBn2xy2JAMTYnsers11PqSEUs.crl (hash: OdDCsFUfoPzmuscZcR4G1zkFVTLHuXna2p0k9RGR5eI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b6:11:36:22:78:7c:93:0a:f0:ac:fc:0f:1e:82:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c557c19f6c72d8900c4d89ec7abb35d4fa92114b
Validity
Not Before: May 13 05:01:25 2026 GMT
Not After : May 14 05:01:25 2026 GMT
Subject: CN=ae9981f861e14b513f1f5e5d11eaea1c4d7ae6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:00:99:c7:46:ed:8d:93:80:f2:ee:52:4f:85:
da:19:db:b2:7e:86:f7:10:df:0c:ad:5a:d3:30:ff:
82:d2:f8:63:10:e3:b1:39:2e:e0:0c:ea:7c:a7:fe:
be:95:ec:c7:d9:4f:d1:76:ad:24:39:b9:4f:9c:5d:
53:d2:70:38:36:8f:bd:ba:83:07:c1:3c:a8:b9:79:
23:37:f1:2e:ea:c9:9c:4b:34:fd:cb:d2:9f:f8:ee:
31:a1:3f:71:11:54:29:85:ae:cd:60:e7:74:74:a9:
51:b8:41:d5:58:0f:73:a7:98:fc:92:45:21:fb:2b:
41:a4:50:d8:c4:19:1c:9e:fa:f4:55:1c:09:c9:0a:
db:54:f9:18:17:23:08:e4:82:98:ae:a1:bb:b6:fa:
6b:41:88:06:dc:a0:9d:1f:57:22:c2:27:29:d3:ab:
ac:a1:1b:ce:6b:c0:e5:bf:f4:94:60:0b:63:7a:19:
a7:78:78:a7:2f:1f:5e:bd:2e:61:fe:18:0d:6d:ae:
24:5c:68:0f:17:06:82:f5:7f:27:54:38:9b:4d:91:
ba:94:0d:b2:db:6c:62:f0:6b:a2:18:7d:90:b1:47:
b1:9b:8d:71:3b:3e:cb:8e:5d:84:f9:15:ec:40:7e:
28:0b:b5:05:1e:51:fe:eb:8b:4a:46:56:64:34:23:
0d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:99:81:F8:61:E1:4B:51:3F:1F:5E:5D:11:EA:EA:1C:4D:7A:E6:AA
X509v3 Authority Key Identifier:
keyid:C5:57:C1:9F:6C:72:D8:90:0C:4D:89:EC:7A:BB:35:D4:FA:92:11:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVfBn2xy2JAMTYnsers11PqSEUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/e73988-c1c2-408f-b738-39046b4a9170/1/xVfBn2xy2JAMTYnsers11PqSEUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:e9:74:ac:a3:34:94:9e:d6:ae:9b:fe:bd:8f:f2:a0:cc:32:
6d:f2:a3:8a:1e:3e:39:3b:ac:d6:43:fb:b6:16:2b:20:42:04:
29:df:f9:2e:81:ec:f4:bf:1d:2d:90:0b:fe:15:8c:6e:cb:10:
bd:0f:09:a9:75:81:01:77:ca:5e:f7:28:33:b8:28:5c:aa:48:
cb:81:95:f4:8e:fd:24:84:3c:c9:9d:9b:75:bd:a1:6a:b5:fb:
fb:17:19:28:6c:e1:3a:a4:3d:26:06:6a:8b:e0:1c:6b:b3:03:
be:7f:f7:94:17:48:a7:53:a9:6e:d0:57:6b:96:26:71:a7:f7:
42:0c:c0:4a:54:a1:5f:bb:24:50:4d:20:56:86:d8:75:77:7c:
58:c4:17:71:56:15:35:f1:19:7e:6a:09:ac:69:15:07:99:48:
a0:eb:80:36:92:c2:7f:e3:28:54:07:dc:ac:c6:f7:f9:01:5b:
fa:09:ee:56:b6:d1:7a:28:3d:b3:87:05:d5:81:5f:5b:12:40:
d6:38:03:ba:e9:62:d7:7b:f9:e9:a8:83:97:ed:d8:85:c1:b5:
8f:a3:68:89:f7:83:51:c0:60:b1:19:aa:a3:68:51:32:62:57:
da:d8:6e:98:7b:92:35:19:aa:9a:84:23:65:76:9c:b6:33:ed:
25:93:7f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:33 2026 by rpki-client