Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
File: xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft (raw, json)
Hash identifier: RBuVI8EjSRDQKDGaIAeZHd8sGalz8PQ7xSi4rTKIQ8c=
Subject key identifier: F5:15:BA:A2:30:8A:78:CA:BE:E3:82:A6:08:0D:70:8E:87:BC:A5:8F
Authority key identifier: C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
Certificate issuer: /CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Certificate serial: 019E1DFE3D1EC06A06104E6FB1B655BAAD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
Manifest number: 1911
Signing time: Tue 12 May 2026 21:01:01 +0000
Manifest this update: Tue 12 May 2026 21:01:01 +0000
Manifest next update: Wed 13 May 2026 21:01:01 +0000
Files and hashes: 1: EbX7N4kHuDXm0ug317aboa-Elyk.roa (hash: T2hYz7BsiNZAW/oKFsyjXx5vn7Ad21wTFDpKdq1SP6Q=)
2: Kd-PJMG0I6gP3eU-IVUAKt_gccg.roa (hash: guDscC6GtnjjQhv/AcT64xIdqM0iuOGm1U4WIDOTt8E=)
3: xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl (hash: lz8WX0HrJgUWReGIDpt+c1WMWmQyQzeWCwdyvwr2LNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:3d:1e:c0:6a:06:10:4e:6f:b1:b6:55:ba:ad:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6c0fdbb65ca491cb83cc085a43e0340596ae873
Validity
Not Before: May 12 21:01:01 2026 GMT
Not After : May 13 21:01:01 2026 GMT
Subject: CN=f515baa2308a78cabee382a6080d708e87bca58f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d5:cd:0e:0b:16:fe:09:c7:ce:da:84:6a:9c:
a2:e4:64:90:8c:0f:48:e7:14:d2:f1:4c:01:a7:44:
ed:75:11:13:af:09:5c:40:6a:f5:96:e4:df:ea:e1:
f9:e4:f1:33:0c:50:58:9c:97:fc:70:11:dc:eb:2c:
53:7c:bf:41:b6:7f:65:50:ca:3c:e9:25:80:21:78:
4d:af:7b:19:49:8b:79:e9:98:be:ca:cc:f1:e9:0b:
32:e3:a1:66:65:fb:2d:f6:9e:28:ad:11:3a:2f:46:
bd:52:78:6e:4b:d2:44:51:b6:21:60:ab:73:f5:9d:
b3:1c:c9:d8:fd:b2:fa:b3:f7:3f:79:f7:96:91:eb:
84:fd:e3:69:ca:f1:fb:b8:5c:27:87:a9:a1:9b:0e:
6a:19:72:10:d4:67:7a:d9:86:a9:c2:1a:b8:cb:61:
81:ae:28:73:d0:59:3b:79:29:6b:52:db:56:7d:14:
63:6e:58:ed:1c:79:5b:ca:5d:e7:d0:65:74:1c:00:
6e:d5:d2:1c:d1:ac:71:c8:c6:77:8b:97:01:81:05:
ab:0f:ab:19:2d:ea:86:9e:e6:2c:72:67:b4:7b:15:
d1:8f:b7:1f:0e:21:1b:c9:d4:62:29:f1:1e:e9:0d:
83:e4:ff:30:6d:f4:f1:d1:9a:64:c7:37:93:9e:af:
7c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:15:BA:A2:30:8A:78:CA:BE:E3:82:A6:08:0D:70:8E:87:BC:A5:8F
X509v3 Authority Key Identifier:
keyid:C6:C0:FD:BB:65:CA:49:1C:B8:3C:C0:85:A4:3E:03:40:59:6A:E8:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xsD9u2XKSRy4PMCFpD4DQFlq6HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/6669bb-1f62-42a3-9e8d-49a6545786e6/1/xsD9u2XKSRy4PMCFpD4DQFlq6HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:20:50:6c:5e:ed:b6:c7:2c:3f:c4:80:5f:0e:ef:8d:09:99:
30:1d:e0:46:62:76:63:ad:8b:2e:41:6c:ed:c1:83:68:42:09:
8d:b6:30:4e:35:ab:9d:f0:d3:b0:bd:2d:75:6d:23:ff:b1:9c:
ab:76:5e:de:94:7d:47:50:27:25:92:a3:bd:cc:89:e6:57:fb:
d1:04:b1:f8:03:74:40:c7:e8:7a:e2:87:07:31:11:7c:8c:f6:
70:7f:96:01:5f:b0:43:fa:6b:3f:02:e1:22:f3:dc:27:aa:9a:
33:89:54:7a:66:35:50:68:1f:16:6d:f9:43:39:3b:9d:c6:80:
0b:af:d4:e4:48:ab:62:b7:18:73:f2:71:8d:29:10:3b:a8:7a:
86:51:69:37:6d:fa:a8:ff:d5:ed:3c:0c:45:cd:d0:87:61:5f:
a7:8b:e4:39:d6:84:99:6b:26:8a:0b:4c:48:11:06:bd:60:7e:
f2:da:3f:fd:87:9f:b7:b0:21:b6:db:bd:74:92:06:51:bb:16:
21:df:27:31:a2:56:28:3f:88:24:19:a1:8c:1a:c7:15:86:2e:
14:2b:d7:0c:53:45:66:01:dc:27:ed:51:c1:e8:b0:06:72:b5:
25:83:64:a2:82:3a:3d:68:17:79:53:30:81:e6:d8:94:bb:50:
c5:1a:dc:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:47 2026 by rpki-client