Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: WurOTdpyuiap5rcKk/H7VKeW61/0YmVEWcBwAh0dv5U=
Subject key identifier: 31:CE:98:A9:08:8F:03:A2:1F:87:20:41:DA:5F:1C:B0:80:FA:76:8A
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 019E1F7F578EE8DB39C5810FC82DFD32EDBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 1674
Signing time: Wed 13 May 2026 04:01:39 +0000
Manifest this update: Wed 13 May 2026 04:01:39 +0000
Manifest next update: Thu 14 May 2026 04:01:39 +0000
Files and hashes: 1: FWP58ajjb0tkpM-YIjMEubI9eHI.roa (hash: 8d5KqUUs2iCVjFLb2FSp+rBEK2zv9joKO9sjvkw4TqU=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: CXcRtJnM9MUoYuFdEQq+JfCQblXpC3HeuMu80CpwZMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:57:8e:e8:db:39:c5:81:0f:c8:2d:fd:32:ed:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: May 13 04:01:39 2026 GMT
Not After : May 14 04:01:39 2026 GMT
Subject: CN=31ce98a9088f03a21f872041da5f1cb080fa768a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:11:90:33:78:08:c0:41:42:e6:56:46:64:c4:
41:ac:ca:d9:00:69:45:28:3e:d5:b8:34:1d:39:04:
2a:28:37:6c:16:4a:a9:4f:d4:26:85:b8:2c:d7:f6:
06:ce:6e:e0:59:a0:61:24:b8:f3:99:48:77:5f:da:
26:a1:0f:e0:a8:58:f6:7f:87:28:4a:55:6f:e7:70:
36:97:2f:66:3e:20:a1:cf:5a:cf:95:d3:04:60:5d:
6f:3c:a2:d9:35:fd:e5:45:b6:6a:48:68:90:44:51:
ea:9d:f4:02:32:6c:ad:6c:16:97:e6:0b:a0:79:33:
dd:4f:d4:64:03:db:52:67:78:f6:94:49:3b:51:90:
d1:f9:7b:13:c1:95:2d:f6:23:e2:59:dc:e4:10:4e:
ef:e6:86:29:da:25:19:fb:23:6a:70:2d:55:c7:26:
a5:0f:3e:88:63:86:07:e0:2b:8a:bc:c9:8d:ad:a0:
e5:88:97:43:40:31:46:0a:bf:22:21:40:d0:24:56:
40:9e:3d:21:be:94:8d:cc:8b:2c:90:a7:10:3e:b0:
4f:e3:d3:e3:32:66:46:a4:4d:36:b8:ef:81:bb:42:
f0:25:a1:16:4d:2d:6d:85:2f:4c:88:c4:bb:4b:4f:
40:b7:29:b4:ac:25:b1:f3:8d:8d:54:4d:a4:06:29:
2e:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CE:98:A9:08:8F:03:A2:1F:87:20:41:DA:5F:1C:B0:80:FA:76:8A
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0d:93:e1:71:0c:a8:21:86:9b:1c:d3:95:2e:07:91:94:3d:
3d:f0:84:68:ad:10:a2:57:a4:f5:95:37:45:dc:06:ce:04:9f:
22:9e:b1:74:6c:a0:ce:49:fb:09:68:dd:44:2a:ab:40:62:8b:
71:f4:68:50:a6:11:7b:a2:86:91:fa:60:39:d2:0d:53:d9:dc:
cf:83:0c:a1:bc:1b:a9:d4:19:c0:f1:98:83:f7:08:2f:01:9c:
a0:cf:49:15:36:40:5d:f4:31:39:06:b1:9f:e5:f1:86:13:b0:
a6:73:d6:06:e7:75:c3:4e:91:df:e7:3f:0d:74:cb:cf:44:37:
85:c2:60:b6:3b:81:ac:76:5c:77:70:b8:7f:7b:17:76:76:d2:
5d:c7:b4:ac:30:50:17:30:67:47:91:4f:b5:32:50:2f:d2:95:
8e:5d:90:a8:33:a9:8b:6c:b7:ea:6e:8d:d3:f8:7f:e1:8f:ec:
6d:c1:36:22:5a:89:8f:2f:69:c6:ef:4e:5f:19:9e:c1:5f:8b:
77:3d:e8:cd:02:28:34:84:43:5b:b3:c4:7d:0f:ed:44:fc:5c:
6f:bd:73:e8:5f:ce:9a:3b:cf:44:c8:45:80:47:c1:53:1e:43:
4c:39:75:02:c5:15:fd:28:43:e7:e1:dc:6d:9e:bb:61:23:81:
67:b7:98:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:30 2026 by rpki-client