Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
File: XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft (raw, json)
Hash identifier: 4zMq58mGAYeSGNaR03VtSU5BOEsyNGqx5T47U814TMk=
Subject key identifier: BF:CE:F8:94:D7:CF:FA:18:E7:EB:5D:05:33:1A:0C:6A:2F:00:20:87
Authority key identifier: 5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
Certificate issuer: /CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Certificate serial: 019E1CEBCF4955F8B1BE50C194548B5AD416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
Manifest number: 0C9C
Signing time: Tue 12 May 2026 16:01:16 +0000
Manifest this update: Tue 12 May 2026 16:01:16 +0000
Manifest next update: Wed 13 May 2026 16:01:16 +0000
Files and hashes: 1: EmJaWy9ErTq18djeUNfT6TYwXlA.roa (hash: 4n7tztgrwrUxD6WI3OMeFvCbZPJYYWR7ZCZusKoAv2Y=)
2: I-K9nqaL8isdaQPATdz15jV472A.roa (hash: IzWVmalHZuVa9srOGb7K8LfnsGA4gkEh+RLBEqMh0oM=)
3: RcwVn60BAjXaSKd54kN8HvE9mEI.roa (hash: HMzOnWY8MpFn7ebVHAu3c09I2xVaAKGb1gijWHIVX6I=)
4: VMEOZBTbdat5Ej2FDGSSyvWxON4.roa (hash: il5PH5NsJiNfZtmLceTZARbKmqNBVyPmTfnq15PGTB8=)
5: XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl (hash: gb/4ltRpeg5WoB0mPWMwmSnPzsKGZBRjjPOaoioSWf8=)
6: lIxTSYsNmmcqNIHLrqXgnkuovB4.roa (hash: KyCy7f0RC+Gah0kPcXWSGeJFDqftrveXwrbOBQUq7gE=)
7: n6hUs8ScD2JiUwNfl89-e_tCc6w.roa (hash: /7fv2sWCDJbqb4l7iyEbmK73ArodpdBZ+jyH4nyo2WE=)
8: roenOOlAGA0_OFjwrFwDRIQ0Y_Y.roa (hash: HW4LBYiaQzfwjk4eYDYDeite6KGRHXlfiOHLKtkmNeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:cf:49:55:f8:b1:be:50:c1:94:54:8b:5a:d4:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c746e9f12c2c0e5459fe4e3d413c1c89de6db0e
Validity
Not Before: May 12 16:01:16 2026 GMT
Not After : May 13 16:01:16 2026 GMT
Subject: CN=bfcef894d7cffa18e7eb5d05331a0c6a2f002087
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c3:99:6f:40:85:56:43:d2:69:8d:d7:0e:ca:
64:bd:f7:78:25:af:63:d7:a5:fa:bf:5d:2b:ba:59:
bb:47:d0:c7:01:5c:7d:ba:4a:ff:1c:16:5a:ee:35:
d5:da:43:4f:07:3e:56:fd:77:68:82:bc:15:16:e3:
1c:87:4e:5a:ba:a8:1d:cb:10:52:16:ec:e6:1b:8b:
fd:ab:a6:27:a6:d0:12:43:10:4b:49:ed:e2:56:42:
3c:04:81:78:cf:c1:c6:58:a7:51:b5:52:8f:5e:5c:
d2:df:0e:a0:ec:df:36:29:f6:5e:37:f3:fc:87:a2:
c9:76:b1:b1:b8:e1:ec:51:c5:44:d9:05:a6:88:70:
6e:da:d3:a0:8d:62:18:a2:ce:38:97:03:3d:91:37:
4a:cc:02:41:a9:56:36:09:93:a1:b3:77:c6:98:d0:
4b:3c:58:f7:ea:9c:40:31:28:fc:92:8b:3d:33:24:
4b:bc:bc:46:28:ff:c5:d7:ee:fb:b1:2f:b4:17:98:
d8:5e:92:ad:27:d4:a5:42:d0:33:02:82:ee:df:f6:
12:06:4f:84:fe:38:ed:fe:e2:ac:bd:f8:99:8e:a5:
f4:7e:c7:22:f2:16:46:ed:93:4a:a5:d1:d2:46:7a:
36:77:f1:f6:e1:a1:5e:11:c0:45:6d:62:87:66:33:
7b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:CE:F8:94:D7:CF:FA:18:E7:EB:5D:05:33:1A:0C:6A:2F:00:20:87
X509v3 Authority Key Identifier:
keyid:5C:74:6E:9F:12:C2:C0:E5:45:9F:E4:E3:D4:13:C1:C8:9D:E6:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XHRunxLCwOVFn-Tj1BPByJ3m2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/d6bf5e-4812-430e-9a13-e5947614ef3f/1/XHRunxLCwOVFn-Tj1BPByJ3m2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:36:fd:c6:a7:f9:09:a4:fc:3d:bb:fe:a3:de:62:72:56:f5:
56:c1:d3:ef:66:bf:59:08:89:a4:3c:aa:5d:2d:08:4d:11:a7:
18:ce:20:d3:fb:cb:01:4c:61:e9:cd:37:6c:37:f1:57:8e:b2:
9a:29:19:9d:02:2b:7e:c1:df:97:39:66:cb:e1:bf:50:34:3e:
ef:a2:1f:01:66:03:07:bc:5c:ee:57:e4:b7:5e:65:9b:d2:55:
43:86:db:07:7f:1e:23:9c:1c:65:f2:28:d6:8b:c3:c6:5b:ff:
a6:5c:56:71:e3:ba:34:87:52:c0:4d:9d:22:6e:a6:56:1f:a4:
bf:ce:da:cf:3e:db:78:bb:ff:f7:ba:7e:54:55:4b:bb:8d:ba:
15:7f:c3:b6:18:87:0b:d7:f1:8e:03:3e:1e:1e:35:d7:68:f4:
1a:5b:8d:34:05:fc:cd:4f:f1:d6:dd:f1:59:99:77:fc:03:f9:
32:d5:05:dd:3c:65:7b:38:b9:e6:23:c6:fc:15:36:50:c5:36:
fe:77:59:75:8b:23:2f:7b:04:90:2d:69:30:b3:89:9a:8b:bd:
51:2d:a1:ed:66:16:77:bb:84:78:42:df:1d:6c:8a:4c:b0:98:
c9:39:1b:bc:bb:a4:c2:77:b7:9d:ca:45:51:b9:ac:94:54:63:
f2:8e:98:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:18:46 2026 by rpki-client