Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
File: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft (raw, json)
Hash identifier: 5hLU2c+ZVkkGiYAPOOL0LHB/iMgz0zEN1bF3hYVkx+o=
Subject key identifier: 01:2E:D5:FE:10:2B:B5:14:F0:D7:D5:4A:7E:97:38:79:D2:30:8C:50
Authority key identifier: 5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
Certificate issuer: /CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Certificate serial: 019E1D59B471E00C17D3BAD0A8F931F6B2C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
Manifest number: 0CEE
Signing time: Tue 12 May 2026 18:01:18 +0000
Manifest this update: Tue 12 May 2026 18:01:18 +0000
Manifest next update: Wed 13 May 2026 18:01:18 +0000
Files and hashes: 1: XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl (hash: NiwPQoqeeJAe2FKb0zqqw0p1vG+cj1lrr1d0aolEyFk=)
2: YNrAk_rW-_hv_7y0q7L07WQbD3k.roa (hash: Q+lutWQbfqBQmTQcTTUR6g2UUXMHO1t1l0Opc14EpV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:b4:71:e0:0c:17:d3:ba:d0:a8:f9:31:f6:b2:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c13f5ff169afed825b75d8fc077afca50d6a1
Validity
Not Before: May 12 18:01:18 2026 GMT
Not After : May 13 18:01:18 2026 GMT
Subject: CN=012ed5fe102bb514f0d7d54a7e973879d2308c50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8f:a2:f8:7d:7d:45:6c:f7:1a:4c:ea:97:b7:
3e:a1:26:9c:79:c7:1b:e7:55:22:e1:fb:dd:80:ad:
2c:a7:df:15:1c:6c:bd:74:80:07:d6:c8:9a:47:7d:
7a:b6:14:44:a9:af:58:8b:c7:5d:c8:eb:99:cc:67:
3b:fa:3b:a8:46:91:95:26:98:fe:92:95:16:bb:e7:
b2:27:b7:80:91:82:32:47:1f:bc:4d:fd:15:9f:96:
e9:c7:11:2f:99:ca:6e:dc:42:82:f0:c0:b0:95:72:
ef:4c:4f:b8:41:8c:8a:e8:b2:a4:14:ad:b2:e9:30:
fa:00:6d:fd:31:8a:b3:0f:f2:0a:ff:19:04:45:a8:
ec:b1:c8:47:35:e6:46:a5:27:c0:2f:fb:74:88:06:
13:10:17:da:e0:b4:6e:98:a0:52:12:d6:9f:ac:7f:
a3:7e:65:03:23:b9:c4:ff:1f:29:79:0b:dd:78:1f:
27:4a:b3:c7:72:5b:50:d2:7b:72:c5:77:fe:10:6a:
5b:0e:55:90:ab:aa:43:8b:d2:9b:b1:f9:58:3f:01:
e1:5c:9c:fd:74:6f:97:0d:28:33:97:e8:27:27:7c:
9f:50:f1:e9:98:59:95:57:93:83:d3:68:bd:64:4f:
3f:30:61:38:0f:88:4b:16:b7:38:08:fb:a1:1a:05:
83:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2E:D5:FE:10:2B:B5:14:F0:D7:D5:4A:7E:97:38:79:D2:30:8C:50
X509v3 Authority Key Identifier:
keyid:5E:7C:13:F5:FF:16:9A:FE:D8:25:B7:5D:8F:C0:77:AF:CA:50:D6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/94f642-55f7-4c1c-81d4-9e59c111aa38/1/XnwT9f8Wmv7YJbddj8B3r8pQ1qE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b4:71:f5:bf:d3:bc:8e:b9:aa:04:ce:57:94:df:e1:63:75:
07:f8:3b:c6:ef:41:aa:a9:b0:d8:98:3b:f3:1d:0e:82:01:0e:
e5:60:69:92:30:75:4c:61:a7:b6:e7:4a:81:29:db:45:da:d8:
2b:46:a5:20:da:ef:d1:d6:27:0d:33:e9:f6:07:f3:16:d2:5a:
33:77:89:01:19:c7:85:68:76:f1:64:37:ae:fb:6a:a8:cb:10:
b0:78:1f:d0:a5:41:a5:e1:62:9d:d0:ea:1c:8f:b9:df:a7:ec:
65:97:c1:ca:bd:b1:88:88:68:a4:90:37:fb:57:5e:7a:63:bf:
06:d7:ab:c7:64:3b:e9:76:88:91:93:1c:71:10:b8:42:d3:c2:
c0:f4:23:86:0d:86:b2:2a:a8:31:d0:6a:2f:a0:dd:9d:37:23:
a0:41:81:33:bd:8a:08:ae:6c:49:c8:a7:93:48:5d:cb:4a:4a:
24:8c:50:5b:31:40:b3:e2:74:2b:8e:5e:2d:6b:d5:6a:c3:13:
24:11:ec:68:14:a0:4c:05:6e:21:76:dc:0d:27:08:2e:a7:36:
21:a0:45:d6:b7:5c:6c:45:28:ef:2f:36:a0:19:c2:82:5d:b4:
a8:ae:58:f1:b6:fa:aa:33:27:55:0c:13:20:f0:33:a2:9d:d0:
f1:c5:51:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:33:23 2026 by rpki-client