Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
File: XxaylLGmR79tZ2g7UWFEl-dR8h8.mft (raw, json)
Hash identifier: lh3wY6oz3LctfgVlVqN3YWIpI4TrHuszOJC2ES9kgOw=
Subject key identifier: 4D:B3:13:54:40:5E:F2:07:CF:E2:48:33:54:E5:12:7F:E8:5F:7A:59
Authority key identifier: 5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
Certificate issuer: /CN=5f16b294b1a647bf6d67683b51614497e751f21f
Certificate serial: 019E1D9074DB0532ED5098753DF2D4019549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 19:01:06 +0000
Manifest this update: Tue 12 May 2026 19:01:06 +0000
Manifest next update: Wed 13 May 2026 19:01:06 +0000
Files and hashes: 1: NKg93JWQUnBu80RX13MwmqJxvVc.roa (hash: nG4jnHVVr/B/zg5snhsHaHEVH2wq5BQYMoc/wJLZKCM=)
2: XxaylLGmR79tZ2g7UWFEl-dR8h8.crl (hash: A783C9zgSFsCXK+WxuZJD1jQzOsUJC8vIdr+E/C+YEI=)
3: wGoncIYhxzrOvpFggApuVrKV4Vk.asa (hash: S/6luEA1foPNyWEYWaj/UsXwLkgTP/ejkSFX9YYjOE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:74:db:05:32:ed:50:98:75:3d:f2:d4:01:95:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f16b294b1a647bf6d67683b51614497e751f21f
Validity
Not Before: May 12 19:01:06 2026 GMT
Not After : May 13 19:01:06 2026 GMT
Subject: CN=4db31354405ef207cfe2483354e5127fe85f7a59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:b1:c9:6c:30:bf:f9:74:23:56:20:19:f0:
1d:9e:c9:26:e7:01:2d:f6:c1:df:cd:89:34:f1:e7:
43:da:3a:95:43:a7:6a:db:3c:12:71:a1:1c:dc:e5:
fe:f6:bf:fb:3c:ce:3a:e8:fc:4b:56:d1:c3:1f:df:
79:8a:b3:f7:bc:b8:c4:69:0f:9a:6e:89:db:b6:d0:
ed:52:8d:82:ab:df:84:8c:57:68:46:96:b3:69:4c:
35:0d:fb:e0:be:a9:ed:1a:2c:a2:a8:d2:2a:e4:8f:
34:af:11:a0:17:8c:0c:50:13:75:7d:5c:b7:f4:6d:
88:ed:2e:8c:4c:28:12:67:f2:f0:14:81:3d:e1:f0:
df:f0:b9:00:6f:7e:e5:f7:ea:a4:50:49:d2:65:ca:
ac:23:17:97:80:c4:d8:83:dd:41:fc:3b:50:01:db:
51:07:9b:07:95:db:56:e5:a7:26:e4:13:32:4f:f9:
27:e5:09:6d:66:da:cc:e4:a6:72:03:08:34:9e:64:
d3:46:34:1b:7a:24:ca:41:f0:85:5b:79:8a:fc:51:
c1:ae:6b:50:28:1a:27:f2:c3:de:9f:52:14:d3:10:
4f:49:a3:dd:55:70:6d:b9:be:38:12:3b:3f:73:30:
34:ce:04:3f:59:a6:67:6c:d1:35:0d:50:e7:96:f6:
7e:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:B3:13:54:40:5E:F2:07:CF:E2:48:33:54:E5:12:7F:E8:5F:7A:59
X509v3 Authority Key Identifier:
keyid:5F:16:B2:94:B1:A6:47:BF:6D:67:68:3B:51:61:44:97:E7:51:F2:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxaylLGmR79tZ2g7UWFEl-dR8h8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/df2777-77a1-4b84-921f-a88270f5d1a9/1/XxaylLGmR79tZ2g7UWFEl-dR8h8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:6f:8a:5e:39:98:92:07:64:ad:3f:4c:ca:9f:f1:69:ca:ba:
c1:c9:64:3f:ff:53:02:e5:8e:da:62:14:68:a9:e8:bd:91:9a:
c0:b2:a2:f1:01:a5:8f:19:61:ad:7d:44:5e:83:1c:89:76:bb:
74:be:bb:55:f7:36:5e:2a:6c:cf:0f:6e:03:5d:4d:a7:e5:00:
a9:84:62:50:06:d5:e1:2f:c7:c3:94:5c:07:5b:e7:5f:ec:d0:
67:7f:f4:79:65:4c:0d:49:3d:da:6f:9e:37:bd:71:1e:fc:5a:
9a:1b:2a:80:21:06:01:ee:91:8b:03:5d:9f:86:2c:ae:f7:20:
a1:9f:1a:87:c3:5c:6a:1b:4a:d9:41:a9:3c:65:8b:25:96:83:
67:96:86:a3:a3:13:a6:ed:15:92:2d:c6:6f:82:a4:82:47:96:
09:38:e3:ed:70:27:53:4f:14:3d:45:f9:0e:7b:e0:7c:37:11:
20:d2:6e:78:57:c3:c5:18:2f:a7:d2:44:74:00:00:8b:94:b6:
ae:9a:74:7c:3e:f9:8f:3c:02:a8:63:7a:3d:1a:5a:18:5d:eb:
41:9f:cf:d4:10:c4:81:35:82:59:d2:86:b0:81:89:2e:fd:8d:
5d:e6:1a:32:64:a4:84:52:76:de:7d:19:53:77:e0:97:08:c4:
4d:3e:18:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:37:04 2026 by rpki-client