Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
File: XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft (raw, json)
Hash identifier: HmaWRKc12tMhks/7wn3ekXvAj4oNKJtPnE571ladbZA=
Subject key identifier: 93:E4:F6:29:14:23:28:A6:8B:8D:D0:E4:87:DE:5A:33:45:DE:31:5B
Authority key identifier: 5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
Certificate issuer: /CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Certificate serial: 019E1DC768AF646CB1E44003335CDC0F507D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 20:01:08 +0000
Manifest this update: Tue 12 May 2026 20:01:08 +0000
Manifest next update: Wed 13 May 2026 20:01:08 +0000
Files and hashes: 1: JtY0Nc5KsnYFhq9gwtFkh9ll4_c.roa (hash: 2ee0ztpkOTTrJZ/rJndPjJzssmpY0MoOu/loesqHer8=)
2: XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl (hash: Q4Uc3IgdfHq0XxR/zN/+yTzSwHZvjoOmiycRNjhm4Hc=)
3: XVPpnUXQ607rP--ePsLN9cz89_c.roa (hash: 0wqwWXvhEcuxDQDNA2phuoRTJPiVO88rNNJcF2GbNvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:68:af:64:6c:b1:e4:40:03:33:5c:dc:0f:50:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ca053dfe7712ee63dbff640fae07308d66ce748
Validity
Not Before: May 12 20:01:08 2026 GMT
Not After : May 13 20:01:08 2026 GMT
Subject: CN=93e4f629142328a68b8dd0e487de5a3345de315b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:0e:61:97:76:09:4f:98:46:a6:ec:66:2c:fe:
a5:21:cf:27:39:b9:56:28:dd:0d:ac:8e:c3:e6:46:
81:f9:6a:27:9c:3e:17:94:ba:68:d7:b9:be:b0:86:
bc:33:3c:a1:18:1e:25:06:60:27:6c:e0:11:47:c5:
49:ee:17:fc:5e:1d:1f:14:cf:7a:b3:b3:77:93:54:
0b:2d:83:14:26:5e:0b:b4:b2:8f:9c:d4:c6:59:98:
31:09:fc:54:be:e3:34:2c:26:4c:56:45:e6:7c:3c:
93:8f:84:4a:66:71:75:c1:24:9f:0a:db:fd:cc:82:
98:43:6c:67:6c:cc:e7:8d:a7:26:9a:5a:37:d8:8d:
52:97:de:b8:7e:2f:33:b5:b5:04:40:c7:af:dd:04:
3e:95:29:72:ec:31:0a:19:64:27:da:5b:e0:3c:0b:
19:88:cd:1c:61:52:f1:65:8e:17:90:f7:f0:59:fb:
17:e8:cf:67:e5:9e:7b:5e:a6:4a:9f:59:8b:37:36:
a3:b7:82:1d:54:79:b3:01:40:5c:06:46:a2:72:2a:
dc:00:07:8f:4c:0f:a6:4c:62:68:1a:f7:d9:be:62:
70:05:82:f0:98:31:76:cd:43:d5:57:1d:95:26:20:
46:f8:0d:a8:1a:0e:bd:57:05:e1:90:bf:4a:c3:91:
9f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E4:F6:29:14:23:28:A6:8B:8D:D0:E4:87:DE:5A:33:45:DE:31:5B
X509v3 Authority Key Identifier:
keyid:5C:A0:53:DF:E7:71:2E:E6:3D:BF:F6:40:FA:E0:73:08:D6:6C:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XKBT3-dxLuY9v_ZA-uBzCNZs50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/ebbd2c-bf5a-46da-86fb-80c3ea4fd000/1/XKBT3-dxLuY9v_ZA-uBzCNZs50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:cd:52:f2:a7:00:76:c9:39:0e:03:87:1c:4a:0e:78:7e:23:
7a:72:91:34:b4:3b:70:d4:4f:f5:2d:06:1f:b7:2f:c3:65:30:
85:aa:05:cf:c0:c2:02:a9:f2:8d:42:09:44:f1:f6:4c:52:93:
83:b1:2c:9c:9f:eb:20:d1:09:71:8f:b3:23:33:4d:7b:bd:d6:
d5:7f:ca:04:66:21:76:ee:a3:df:10:79:a6:dd:d6:dd:92:e2:
a1:83:f0:ec:97:c6:77:b4:e8:75:6e:ca:98:2f:41:c7:09:29:
b1:fe:f2:f9:99:e1:9b:53:4e:8f:c9:49:60:45:d9:61:a4:d1:
d6:cd:ed:13:40:47:9b:d2:79:69:d7:a5:0b:c2:0b:3e:32:38:
b4:60:01:85:e1:21:9d:24:87:54:ec:36:a3:08:73:1a:1d:62:
ea:2b:8d:a3:75:b4:be:f5:e2:82:21:9d:a1:9d:3b:77:64:f2:
4b:3f:83:f7:56:e4:a7:3d:cc:f2:53:24:02:d0:5b:03:c5:56:
16:40:44:b8:80:f8:53:59:c4:86:cc:47:2d:55:17:5b:0f:85:
d9:d6:87:20:b1:1c:1e:ec:d3:0e:78:cb:07:30:6c:a9:42:15:
80:4d:ef:18:26:b1:5a:7c:09:73:78:83:66:53:5a:48:cf:f4:
8c:13:75:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:01:17 2026 by rpki-client