Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
File: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft (raw, json)
Hash identifier: Y14kwLpk8xQQ/80r6vhm31/L4Cl7uFyWiOHVILdlUZU=
Subject key identifier: 33:71:C9:C4:AF:1B:CE:0E:4B:CF:AA:3E:4A:18:FA:D2:6E:AB:BF:61
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 019E1F4827FA3E7270DC0D38416EAA9A0E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
Manifest number: 189B
Signing time: Wed 13 May 2026 03:01:23 +0000
Manifest this update: Wed 13 May 2026 03:01:23 +0000
Manifest next update: Thu 14 May 2026 03:01:23 +0000
Files and hashes: 1: AorOXJjA6o7VIXG2KhmRn45N0UY.roa (hash: opct1yXiFy361tzWw8bb0wIPcRKu5irJGelwFQC/fvQ=)
2: ErvwJYNq58NBwdxg4NllytvGu58.roa (hash: L/oQiFOQUaagNx6+74y64js5tlg2OsPgxLI2bOEuDOs=)
3: xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl (hash: W4lNETWpppfZuQIQPDYRPk13u/d9ac5wEtaeMI6efyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:27:fa:3e:72:70:dc:0d:38:41:6e:aa:9a:0e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: May 13 03:01:23 2026 GMT
Not After : May 14 03:01:23 2026 GMT
Subject: CN=3371c9c4af1bce0e4bcfaa3e4a18fad26eabbf61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:69:6f:15:94:45:8a:96:60:81:17:82:8f:
a3:03:62:74:dd:c8:3f:61:10:3d:22:76:3e:b3:ff:
4f:5a:0d:a3:f6:48:86:19:95:e8:4e:db:07:e0:8f:
5f:fb:43:36:4c:a7:e1:59:62:f7:0a:b0:33:0c:74:
92:a4:a9:5e:94:6d:37:c6:a3:f7:87:54:67:4b:b4:
dd:53:0c:35:0a:52:ca:f6:23:d7:34:d6:23:a7:a9:
5a:6f:ed:fa:55:1b:ca:6a:6c:00:55:86:63:c1:18:
8f:ba:1e:6e:c1:53:b6:dc:6d:7a:9e:10:07:a9:5a:
75:78:a6:b8:76:22:fa:28:20:d3:5c:d2:8a:bf:7a:
53:86:0d:7a:95:bd:6a:0e:a0:c0:e8:e1:d2:9f:2b:
47:37:18:04:67:12:b6:70:ec:09:81:c1:ce:0d:ad:
7c:61:98:86:b7:12:9b:37:53:6b:cc:b7:5a:20:2a:
09:3d:a1:42:d2:36:5d:b7:81:83:b5:89:4a:18:ff:
c7:f2:ef:34:e0:dc:0d:a7:d3:49:e7:49:c0:be:b2:
36:58:a4:52:17:be:8d:4e:7e:50:c6:7f:65:65:00:
25:dc:8b:1d:43:a2:5d:84:09:f5:a0:90:b1:5a:1d:
9c:98:e1:56:98:8f:a8:4a:1c:88:50:f8:31:74:84:
3f:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:71:C9:C4:AF:1B:CE:0E:4B:CF:AA:3E:4A:18:FA:D2:6E:AB:BF:61
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c4:c2:2a:41:27:44:db:22:6c:28:f9:42:6a:84:2c:14:3c:
93:5e:70:d9:56:6a:c9:d5:78:86:76:35:27:08:6a:e8:eb:ff:
82:8a:1e:78:7c:00:7b:a4:f6:52:d0:b5:91:96:65:30:13:eb:
78:df:64:2f:9c:b8:1a:a6:12:c1:d9:f1:20:01:7c:62:aa:ba:
62:12:1d:40:c3:d7:f4:2a:90:06:b1:87:e8:8d:59:8e:22:2b:
e0:73:7f:e7:94:74:2f:1d:24:e0:27:78:77:35:59:37:3e:d4:
1b:92:8a:8a:9a:52:42:5c:c0:23:b5:8b:25:bf:b7:ba:6f:66:
0b:58:e7:f2:77:50:6e:9e:b9:79:68:f5:d0:be:da:fc:f8:90:
4e:d4:61:1c:f0:62:af:75:47:6e:f1:3a:9b:23:42:9e:f3:0c:
6b:94:a1:54:bc:91:4a:10:df:d1:86:66:25:3f:37:72:d9:e0:
a9:27:e2:a8:88:0c:05:55:4a:e2:7f:c7:ac:cd:de:4b:85:7f:
ea:d7:db:b6:b1:01:a9:b8:06:bb:42:78:9e:e2:ad:53:b5:1f:
7b:58:fd:ac:7f:60:03:f5:4a:89:77:01:eb:8b:cc:1e:4a:4c:
9f:7f:69:3a:99:a6:b3:93:7d:ba:42:16:b9:f8:b1:0d:ab:b4:
8b:7f:23:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:34:00 2026 by rpki-client