Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
File: xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft (raw, json)
Hash identifier: Ww3vFvwELgQy8vxhm0Qpozm3WYIXRWiNKvtAl67rcSY=
Subject key identifier: 90:FD:26:09:23:1B:CD:89:B3:07:99:73:27:97:1B:FD:3E:6F:57:BF
Authority key identifier: C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
Certificate issuer: /CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Certificate serial: 019E20915847B6E9044227927073ED9C1C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
Manifest number: 190C
Signing time: Wed 13 May 2026 09:00:56 +0000
Manifest this update: Wed 13 May 2026 09:00:56 +0000
Manifest next update: Thu 14 May 2026 09:00:56 +0000
Files and hashes: 1: YJVBg6yi8rhbBJuxWKJ7v5Xiat0.roa (hash: Hyd6ST+4DY0Ptd4aJ86bVxwbS75QcKsP6VrnesIx1WI=)
2: __9VedluN1sWd7ruf5_gxA1gv9U.roa (hash: 9+zLsshZreT9h4dF/gegkgeeA5ROS1Ql2Nv3i9Zy+8U=)
3: xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl (hash: 0xCEovCdB/zjkKfMcpQ0DV3mDj0+zPNw5N6BdACK1Bc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:58:47:b6:e9:04:42:27:92:70:73:ed:9c:1c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c546e15819eacd05bccebf80019ca3cb7c4a38e0
Validity
Not Before: May 13 09:00:56 2026 GMT
Not After : May 14 09:00:56 2026 GMT
Subject: CN=90fd2609231bcd89b307997327971bfd3e6f57bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:68:37:aa:35:91:1e:44:37:9a:20:8b:7a:
91:5b:1e:79:36:47:4f:65:ee:fc:6b:70:54:9c:f4:
47:fa:f8:21:e9:31:91:8d:49:3f:2a:83:9e:61:16:
b3:91:36:fa:d7:d0:a7:ce:e8:14:14:01:75:94:39:
9f:0c:fc:fc:4a:ec:8e:68:9d:4a:90:b0:d9:53:a5:
c8:33:75:d7:98:aa:c1:89:14:e3:2a:cf:1d:e9:b1:
b9:f6:57:f6:24:fc:e0:47:47:5e:43:72:9d:c0:6b:
43:06:83:74:c8:2c:0f:f4:2e:30:8a:3e:d2:a4:01:
22:1a:f9:b3:1a:60:0d:8a:1a:36:f8:cb:20:18:24:
db:3e:1c:a7:bb:58:91:58:39:4a:0a:62:d1:d2:43:
dc:6f:93:93:33:cd:af:21:db:d5:89:a8:5a:c1:fe:
91:68:79:03:ff:46:08:a0:5f:f6:f3:f6:bb:df:ed:
fd:7f:6e:ca:f7:88:fb:cc:dc:a8:48:17:c5:67:c7:
03:3d:40:94:9f:e3:a2:30:83:22:2f:ce:3d:d5:8d:
82:e9:8e:27:ba:15:c2:cc:f4:61:59:cf:38:a5:5e:
e0:74:ba:c7:63:fc:db:28:a3:87:0d:bd:04:2b:13:
58:b3:79:8e:8c:62:a8:08:15:70:ba:aa:b6:8c:e0:
89:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:FD:26:09:23:1B:CD:89:B3:07:99:73:27:97:1B:FD:3E:6F:57:BF
X509v3 Authority Key Identifier:
keyid:C5:46:E1:58:19:EA:CD:05:BC:CE:BF:80:01:9C:A3:CB:7C:4A:38:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUbhWBnqzQW8zr-AAZyjy3xKOOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/f95ac5-0b8b-45d6-be9a-2db2245f2985/1/xUbhWBnqzQW8zr-AAZyjy3xKOOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:da:27:ef:ea:77:6e:2f:3d:1b:52:71:b8:dc:d5:5c:35:27:
a8:b4:bd:12:3e:ad:55:84:6d:31:90:f1:1c:b8:53:bf:ea:06:
02:87:d6:c4:5e:06:89:ad:96:bf:fc:2c:a8:6e:b1:75:7d:f3:
b5:b0:01:b7:80:06:72:4e:29:fa:9f:19:79:fb:86:6a:f4:07:
79:c9:b9:1d:d2:54:d7:f2:1e:a9:b1:21:ee:fd:15:dc:47:60:
ef:2a:3d:59:b4:dd:4b:a4:5a:b6:d8:6e:ee:0f:b8:e9:33:ff:
dd:45:53:73:bb:33:0b:1d:86:9d:26:70:5f:74:d4:fd:4d:35:
95:26:05:a5:b8:78:47:0c:f4:7c:17:0b:f0:d5:b5:78:f7:c9:
69:2d:66:a5:d8:60:c6:ad:51:b1:4f:8f:ed:ff:70:58:13:86:
f6:0c:87:bc:9e:3e:a9:ed:a0:b9:9c:5f:4c:5e:eb:b2:66:90:
0e:03:15:04:7d:b6:28:66:d0:95:60:ab:b4:52:00:5d:fb:40:
fd:e7:ed:e0:bf:29:b8:5d:07:55:36:20:15:a4:48:55:0b:de:
f4:26:dd:ec:2e:dd:a0:66:73:21:9d:15:f0:d8:4e:61:27:82:
1d:af:e2:d5:70:b2:f9:bc:e3:67:13:b3:d7:20:53:2d:33:5f:
da:1c:1c:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:16:06 2026 by rpki-client