Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
File: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft (raw, json)
Hash identifier: L1Ux32ay5VXf1C0f9rYu2gxdVn1gmKyu0IWEwoh0KGw=
Subject key identifier: A9:97:66:BC:52:1E:EC:BE:65:2D:56:25:91:F0:C8:F9:EB:97:50:F4
Authority key identifier: 5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
Certificate issuer: /CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Certificate serial: 019E1D909B27D2CD44B6ED01053C9FB7EAAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 19:01:16 +0000
Manifest this update: Tue 12 May 2026 19:01:16 +0000
Manifest next update: Wed 13 May 2026 19:01:16 +0000
Files and hashes: 1: 5i2TAh2og4TXto7xyAcopWr_UMg.roa (hash: ZekBhPcyoCd+84YvBPa87l2ubLNdolD6vu0bwY9F0iY=)
2: 8sy7RPYdN9OOw5GeBoNUqLHEJwg.roa (hash: Hl1lQvcDtC+ikOs/Ko0nJQFgSRezGLcK7o1ZONxr73k=)
3: XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl (hash: ugBELpnjdCnqaAhY7hT9EFa7bvTfV/kMpjqs/Ynf8h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:9b:27:d2:cd:44:b6:ed:01:05:3c:9f:b7:ea:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5d86974a7b624192ec8d834cf2906e1302e431
Validity
Not Before: May 12 19:01:16 2026 GMT
Not After : May 13 19:01:16 2026 GMT
Subject: CN=a99766bc521eecbe652d562591f0c8f9eb9750f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a6:1d:c4:88:80:b1:37:40:f7:1d:4e:4c:70:
74:96:07:a2:87:6a:42:01:cf:2d:21:34:01:17:6d:
41:2e:7d:37:8f:88:7c:07:7a:0a:8c:45:29:6c:b4:
b3:de:e9:a8:9e:f7:e9:ca:2a:65:3a:eb:c7:c0:7d:
46:f3:4c:66:78:d3:0d:3f:ed:55:36:e8:20:4a:d1:
25:35:6a:d6:68:a9:16:f2:8a:bb:b3:28:aa:37:0d:
0b:8d:47:49:bc:3f:f2:c9:f3:19:99:30:bc:56:da:
d3:3f:42:bd:cd:0e:af:69:de:be:66:98:4f:0c:78:
d5:ee:af:85:5e:b1:93:af:77:d0:58:42:b0:93:72:
a5:6a:8a:86:8b:97:c1:8d:82:86:08:f1:3c:f1:4d:
b7:89:16:56:84:43:63:9e:13:cb:fa:73:db:38:bc:
a3:3c:5f:ca:ff:d3:73:0a:72:ae:bf:a2:5d:f6:90:
3d:3f:18:19:9c:6a:3e:5a:fc:a2:5a:89:be:87:c8:
e5:89:e3:80:00:86:8b:fe:c0:8d:bd:55:22:8d:99:
dd:98:dc:05:6f:c1:9d:40:44:15:68:a5:c7:94:bd:
cc:ea:88:97:d6:a7:12:b5:c3:a1:6c:54:9c:9b:e5:
73:2d:2b:62:6f:3c:4a:2b:48:09:5b:9a:fa:00:59:
36:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:97:66:BC:52:1E:EC:BE:65:2D:56:25:91:F0:C8:F9:EB:97:50:F4
X509v3 Authority Key Identifier:
keyid:5C:5D:86:97:4A:7B:62:41:92:EC:8D:83:4C:F2:90:6E:13:02:E4:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/f55b57-ecba-4d3d-9a81-bd802fc4aa94/1/XF2Gl0p7YkGS7I2DTPKQbhMC5DE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e6:7e:ab:f3:75:e8:03:a4:ab:d5:c0:d0:5c:c5:e8:ca:94:
84:5a:71:9f:d6:25:35:d1:b6:ec:d6:b2:10:fa:3d:ad:5c:09:
c6:22:dd:c8:d3:79:53:16:1d:5e:7a:1a:18:f4:f6:5c:10:19:
c0:a0:ad:00:c4:be:2f:2f:7f:6c:66:ec:af:a4:c8:d9:d8:43:
1e:69:ad:d2:1d:a8:b1:99:e7:ee:70:ee:e6:71:26:50:26:6e:
b1:f2:73:ae:72:95:b6:47:d4:44:bd:cc:55:8c:81:35:db:72:
d6:69:c4:28:6d:52:d3:5a:4b:06:34:48:40:6a:93:c3:59:19:
9d:17:51:fc:7d:25:c3:67:13:00:03:c7:06:c3:ca:72:ad:bc:
54:f2:97:ca:35:1a:2d:0f:c8:54:20:29:07:68:53:84:e4:5f:
dd:82:6d:81:10:79:e5:be:f3:2a:c9:eb:34:b3:ef:44:06:25:
20:fb:cb:b8:b5:66:6a:40:d6:16:b2:0a:83:de:f7:bb:9d:fc:
78:58:bb:e1:72:9f:50:20:4d:0e:36:17:23:55:f5:3c:25:46:
14:55:4e:be:59:f0:72:76:f4:29:4b:9d:17:1b:a8:01:25:ca:
f9:d2:b8:3e:a6:bf:35:9e:6d:63:f9:c1:ef:3f:df:cd:03:9d:
9d:e8:63:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:52:05 2026 by rpki-client