Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
File: XBEKKwrrN_DJMqlr279-82whGXw.mft (raw, json)
Hash identifier: f0KIQkbgEBOea/5m4FsFk9vs1MP7ihUNBF7v02lGFlg=
Subject key identifier: 13:46:B5:6E:D8:83:B0:F6:6E:7D:68:30:26:EB:16:58:B4:14:76:09
Authority key identifier: 5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
Certificate issuer: /CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Certificate serial: 019E20FFE97A7B36D66F4D33BAC5BF44B1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
Manifest number: 1474
Signing time: Wed 13 May 2026 11:01:42 +0000
Manifest this update: Wed 13 May 2026 11:01:42 +0000
Manifest next update: Thu 14 May 2026 11:01:42 +0000
Files and hashes: 1: NrZRCuerFzj4EhFGKoh_NKbZNxM.roa (hash: 5QAUpIfqv2CVCHxJDOL189fybpsclOVK/PxPIJsB8Xs=)
2: XBEKKwrrN_DJMqlr279-82whGXw.crl (hash: 3jj8uxx3OXhZtVgJLs+21dMQqJM4d5sXggvFKIFSNYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 11:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:e9:7a:7b:36:d6:6f:4d:33:ba:c5:bf:44:b1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c110a2b0aeb37f0c932a96bdbbf7ef36c21197c
Validity
Not Before: May 13 11:01:42 2026 GMT
Not After : May 14 11:01:42 2026 GMT
Subject: CN=1346b56ed883b0f66e7d683026eb1658b4147609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:8f:be:d2:4e:4a:c5:b3:e3:f8:95:f1:a6:4b:
8a:bd:d4:ac:4b:50:d9:b5:37:4c:9a:04:3e:ab:cc:
b4:af:1c:0a:4c:6c:da:e3:b3:b8:c5:bf:34:17:33:
fc:fa:18:2e:29:9c:82:b0:d5:ff:f2:c4:4f:25:00:
86:07:9c:43:c8:57:f1:85:2e:cd:9b:ae:92:cb:3d:
40:79:d2:53:b9:f5:a5:d3:12:00:34:cd:3a:e2:d4:
45:3c:b6:c6:19:27:02:a3:1d:a6:c1:c0:97:07:40:
4e:e8:4b:66:86:69:17:49:6d:39:27:71:30:d4:f3:
87:7b:73:34:30:cb:b3:84:08:df:e2:cf:b0:9d:36:
61:6b:14:ae:08:9d:c7:53:48:ae:d0:8d:64:c3:19:
20:91:8a:b8:3c:62:98:f6:dc:b1:79:e0:2e:ab:49:
58:89:11:d4:64:2d:e7:53:ec:e4:76:cb:94:7d:18:
dc:c4:b7:ea:22:3d:72:ae:73:ed:3e:c3:7b:17:21:
0d:ee:3d:49:66:a0:19:51:59:30:5e:a3:a9:b9:aa:
cb:05:e8:74:b5:01:3f:6e:89:89:99:a8:1b:46:2d:
30:9a:c7:29:9b:74:fd:51:b8:5c:15:47:a8:f8:82:
c4:21:99:54:51:96:b4:f0:a6:48:38:1c:39:1f:6d:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:46:B5:6E:D8:83:B0:F6:6E:7D:68:30:26:EB:16:58:B4:14:76:09
X509v3 Authority Key Identifier:
keyid:5C:11:0A:2B:0A:EB:37:F0:C9:32:A9:6B:DB:BF:7E:F3:6C:21:19:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XBEKKwrrN_DJMqlr279-82whGXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e4c435-e6cd-4da0-9e32-a44224fac3ff/1/XBEKKwrrN_DJMqlr279-82whGXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e3:5b:ca:62:b4:c1:28:f5:a6:8f:34:62:ec:0d:a3:90:0b:
88:44:01:e8:2a:2f:79:d2:e7:e2:36:ef:73:f3:4d:25:ce:e0:
64:db:5c:d8:0a:8b:38:ff:2e:18:6f:6f:31:b2:ea:35:35:ba:
1f:14:5c:d4:77:ee:35:ba:4c:84:24:ea:bc:50:a2:6a:f6:17:
41:de:3b:1f:f7:e1:40:fc:20:0a:cc:be:3f:7e:21:cf:5d:d1:
cb:b8:80:c8:db:cc:2e:97:16:dd:54:c9:bb:04:96:9b:4f:c9:
f3:3e:fe:db:4a:e8:f6:20:4e:c3:b1:62:11:1f:e3:0d:07:cb:
10:ba:d1:f4:2c:6c:82:f1:ab:b6:44:2b:77:93:db:e7:19:23:
1e:24:36:87:90:22:cc:f3:c6:d9:4b:05:98:97:ec:7d:f7:e4:
92:d4:bd:bf:58:6a:a8:cd:ac:cc:cd:6c:5d:d8:ac:07:f5:3a:
e9:7b:21:7b:4a:70:5e:b9:8a:b4:8b:e4:ce:a5:1a:ab:68:2c:
e3:6e:a6:2d:34:6e:8e:a9:c8:ab:6d:0c:2b:b9:94:00:74:1d:
a0:bd:55:45:28:88:5e:84:e0:47:58:3a:4b:ca:b1:29:00:0f:
63:58:b8:96:56:e3:83:bc:98:d7:73:f7:9e:68:c1:61:fe:94:
86:17:6f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:22:37 2026 by rpki-client