Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
File: XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft (raw, json)
Hash identifier: 0CIsbWmOnIyK0WeZETMAGJlPjHJ9q6Qltf0gq5EPaIw=
Subject key identifier: 90:87:8C:CA:43:D4:90:31:AE:04:B1:1D:17:79:C4:93:84:E8:C1:06
Authority key identifier: 5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
Certificate issuer: /CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Certificate serial: 019E1EA2C3AFD9746581D3DD9EF44E98AB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
Manifest number: 083C
Signing time: Wed 13 May 2026 00:00:43 +0000
Manifest this update: Wed 13 May 2026 00:00:43 +0000
Manifest next update: Thu 14 May 2026 00:00:43 +0000
Files and hashes: 1: O9do_tpuJS2IYg238tFeLgPwuLo.roa (hash: inPkQd2M/OOC4cE+kZAGV36qocuoxkiJ2VIdZgql1s8=)
2: OQMR_FkQfBmNWWsOByMgzVQchtc.roa (hash: E+VXuwQXys0IVzb1O36G+Zcgxr0/sBSG/vjRsxKVhO0=)
3: XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl (hash: VYS//mqjiyGbjYudnChdIDGqn6JCXuVcK19XuptqV9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:c3:af:d9:74:65:81:d3:dd:9e:f4:4e:98:ab:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e066de9829b761edce171e8ea3c5935e44f4e9a
Validity
Not Before: May 13 00:00:43 2026 GMT
Not After : May 14 00:00:43 2026 GMT
Subject: CN=90878cca43d49031ae04b11d1779c49384e8c106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:30:ed:97:23:04:d5:74:59:16:fd:d9:e9:e6:
17:9b:37:b8:d2:b2:fd:46:5f:bc:22:78:43:7c:f0:
59:c9:fe:ee:53:f4:e5:b0:14:35:1a:f1:c0:8c:7c:
b6:b3:b3:ca:d4:86:23:a8:b6:05:df:c2:46:1b:ae:
c0:c8:c2:af:5f:03:6b:e6:71:00:4b:72:86:e6:2f:
17:37:7c:3e:7c:dd:73:da:b6:cd:6f:4c:f5:95:2f:
dd:cf:f2:cf:1b:7e:11:88:f6:98:92:dc:35:a2:a7:
7a:33:df:ef:ec:60:ed:8f:6f:c6:8c:da:11:14:53:
c5:02:e5:c2:b1:9a:13:5a:21:e7:20:71:bd:0d:8d:
21:cd:ae:d1:03:a0:14:53:c9:43:32:f8:cb:27:08:
da:65:d6:c4:2b:94:a7:90:eb:75:b8:14:8d:dd:b6:
43:c4:99:47:3c:9f:a4:79:49:c6:9d:35:d7:57:7c:
fd:e2:63:26:a7:5d:d8:a0:b6:33:c7:e6:89:50:72:
f7:24:af:4d:90:9f:5d:4c:ba:26:04:d2:3c:d9:90:
c4:6a:f8:6b:e5:d2:43:34:ce:ef:51:9c:18:85:44:
ef:ef:3d:ed:dc:95:09:26:e5:fa:4a:b5:34:46:2e:
b4:bb:46:60:94:a6:e7:d6:9f:81:21:28:43:56:7a:
44:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:87:8C:CA:43:D4:90:31:AE:04:B1:1D:17:79:C4:93:84:E8:C1:06
X509v3 Authority Key Identifier:
keyid:5E:06:6D:E9:82:9B:76:1E:DC:E1:71:E8:EA:3C:59:35:E4:4F:4E:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XgZt6YKbdh7c4XHo6jxZNeRPTpo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cac9c4-f9bb-46d4-bb62-475adf3aa7b1/1/XgZt6YKbdh7c4XHo6jxZNeRPTpo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:34:8e:85:b1:96:09:6e:80:bf:3e:92:40:d5:1f:fd:39:b8:
a7:48:33:4f:4f:0f:0a:03:d9:cf:7e:86:73:72:a0:41:a0:ba:
cc:82:4a:d1:85:d1:cc:7f:b8:a8:3c:48:71:d6:43:6c:08:54:
f8:40:cc:7b:ce:98:7b:a8:4b:8a:2b:91:05:a1:67:4c:26:9b:
0b:75:a6:68:c2:cb:bc:b4:73:5f:eb:77:b6:6d:16:aa:c5:a8:
7c:3c:07:e7:a4:27:27:c8:fa:de:a5:91:26:b0:6b:aa:6c:4d:
5a:46:ee:52:87:88:eb:f0:1d:d8:13:01:f6:e3:1f:0f:a6:43:
77:a6:98:62:10:4c:06:c4:c0:f5:45:33:d5:a0:93:c1:0a:46:
30:b6:1a:ff:5e:fd:28:dc:ed:76:2f:55:76:38:35:48:98:ec:
01:90:9b:4c:90:5b:5c:18:8f:8d:b9:3d:d7:4c:c9:70:4c:65:
be:4f:dc:d6:b4:cd:ee:90:9c:8c:cf:45:81:95:3c:37:89:b3:
1a:c0:ae:7a:f5:ef:59:d3:f8:5c:36:6f:b0:61:1b:68:6b:9d:
9d:0c:d0:bf:95:0e:c8:e0:4b:1a:ce:93:c2:a2:23:1e:48:92:
87:90:d8:8c:91:2d:48:6a:8d:55:eb:b8:8c:1f:59:9b:9c:f5:
d9:3c:9d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:58:02 2026 by rpki-client