Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
File: xAZEdsLEf3eEdKFIFsHgakCBPlw.mft (raw, json)
Hash identifier: DzxV7QJ81nN3YpDqRDUDgRr5nURZZAbuV0Oc1Oh91rY=
Subject key identifier: 2E:3F:8B:BA:F7:5C:DD:5A:F4:B3:A0:C9:DF:26:86:3C:EA:53:D9:77
Authority key identifier: C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
Certificate issuer: /CN=c4064476c2c47f778474a14816c1e06a40813e5c
Certificate serial: 019E2091BCCFB66BA1C2DABA8480A0106CA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
Manifest number: 1909
Signing time: Wed 13 May 2026 09:01:22 +0000
Manifest this update: Wed 13 May 2026 09:01:22 +0000
Manifest next update: Thu 14 May 2026 09:01:22 +0000
Files and hashes: 1: pl4G0drpVsiUnTNv0aNJRxAq40Y.roa (hash: TIrmY5F1mz/rcq5o0AaF7KuNyHFmI5rxVVBApqp6+Ig=)
2: uCT5qS0TatwLKR2syBgBgC34NYE.roa (hash: 6Pav0LB8Y/JGRbLI7vMShFMSStiFyP+H+ECIrWK519s=)
3: xAZEdsLEf3eEdKFIFsHgakCBPlw.crl (hash: /jr5i7DVRvK8E5vGHfA9ywGNkrb2Y6ApJ4MSiZZ79JU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 09:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:91:bc:cf:b6:6b:a1:c2:da:ba:84:80:a0:10:6c:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4064476c2c47f778474a14816c1e06a40813e5c
Validity
Not Before: May 13 09:01:22 2026 GMT
Not After : May 14 09:01:22 2026 GMT
Subject: CN=2e3f8bbaf75cdd5af4b3a0c9df26863cea53d977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:81:58:b9:77:c5:25:20:02:a0:cf:c2:11:
df:3f:5b:00:f7:8a:ae:84:4a:c8:66:29:ae:b4:01:
13:24:0c:4d:d0:88:b1:66:4e:73:ad:b8:4a:a2:1b:
94:25:3c:3d:b6:c9:dc:92:2a:c5:f1:ad:13:fe:2b:
6a:0d:bc:1f:2a:49:05:90:53:8f:a4:61:ba:78:5f:
04:d2:63:be:b4:5f:ae:1a:d6:e9:b6:f6:38:0c:94:
08:36:9c:f3:f2:91:d2:fb:24:13:35:04:5e:71:37:
95:c7:01:98:7d:0a:d1:8a:d8:94:f4:33:30:81:74:
51:2f:1b:7d:2c:00:b2:e6:ba:03:31:0b:f0:64:68:
c8:98:23:36:80:8c:bb:46:f5:22:4f:f6:3a:94:5e:
73:ff:cb:f0:e6:b2:12:17:5c:45:6c:05:f1:43:0a:
04:7e:9d:2b:a7:81:f9:28:d6:a9:25:35:38:0e:71:
3f:73:c0:09:a9:39:61:70:c8:b2:41:7f:19:14:b3:
44:d5:4d:26:19:4c:ba:62:2b:ae:9f:1a:39:d2:57:
e2:35:06:25:0b:dd:8c:fa:c6:af:97:b5:d8:1e:25:
21:7a:13:11:59:39:a9:d9:3e:d3:9f:26:bb:65:6b:
18:0d:78:d8:57:02:15:22:65:61:c8:d5:7b:c4:50:
9a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3F:8B:BA:F7:5C:DD:5A:F4:B3:A0:C9:DF:26:86:3C:EA:53:D9:77
X509v3 Authority Key Identifier:
keyid:C4:06:44:76:C2:C4:7F:77:84:74:A1:48:16:C1:E0:6A:40:81:3E:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xAZEdsLEf3eEdKFIFsHgakCBPlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/9a7df7-18ba-41f7-880a-746777e21c5b/1/xAZEdsLEf3eEdKFIFsHgakCBPlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:2c:95:5a:7e:db:58:06:b4:ab:ea:52:af:d9:5d:c6:a9:31:
19:18:4f:29:65:c9:ce:1d:90:33:fe:36:2e:ba:89:97:9d:3e:
7c:81:29:20:a1:d0:3c:f4:d0:b6:45:b0:55:c3:51:c7:45:55:
33:87:a9:3c:68:cf:a7:b5:29:d2:00:e5:f7:0a:4e:b2:a9:e9:
a7:ba:d0:ea:af:ae:1f:58:62:3e:34:44:b6:42:89:6e:3c:b3:
72:c2:8b:00:da:1e:38:fd:8d:60:ab:cc:35:79:02:29:a4:5b:
b0:9f:74:2a:d3:91:9f:af:e6:d4:08:05:1c:41:ff:ac:95:fc:
10:c9:d8:26:e5:a7:0b:44:9c:7c:f4:75:45:a5:94:8e:0b:30:
7f:59:df:48:9e:ba:f5:60:c0:8f:3d:ac:17:5d:dd:b2:7f:f7:
52:6b:5c:c4:8f:d6:4d:6c:0a:b3:04:b7:ef:45:27:8a:73:7d:
5c:21:c7:b8:1e:ee:2a:94:24:41:c4:fe:33:15:98:a1:95:6e:
40:56:d0:09:b5:4d:05:77:5f:a6:d0:55:66:dc:b4:51:4b:d2:
d7:c2:bd:f0:5c:7d:fb:4c:38:c3:ea:74:94:a1:5d:19:8d:a1:
59:9f:4b:5d:44:47:66:58:5a:c3:cd:f7:cc:bd:52:f2:4f:d5:
87:48:db:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:22:35 2026 by rpki-client