Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
File: XW8uSaMejfnFqgiq8kC1yDK5y5M.mft (raw, json)
Hash identifier: Ua5skzYJVIvDpNkVBFI8eZrtwEoX1nAYob/XI7ZOb+M=
Subject key identifier: 87:85:C8:22:78:79:EE:04:61:D7:CC:EF:B4:81:C0:EC:54:9E:F8:3F
Authority key identifier: 5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
Certificate issuer: /CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Certificate serial: 019E1F4828452C970A654542E6A4A839DA7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
Manifest number: 1907
Signing time: Wed 13 May 2026 03:01:23 +0000
Manifest this update: Wed 13 May 2026 03:01:23 +0000
Manifest next update: Thu 14 May 2026 03:01:23 +0000
Files and hashes: 1: 017yR2AH3nhtreOuYgsNpqkrBt0.roa (hash: jH8rFvA13JhY4szX2F6JGpx37/sl3RxTDMuhAZiU224=)
2: OOfgMgyirAjAQpzlSeWvWZ7kZIQ.roa (hash: wpPBvbubRrWqOyJudWgmsWq2Hw2lni+AI3RKu2B28mg=)
3: XW8uSaMejfnFqgiq8kC1yDK5y5M.crl (hash: UUOzOt89gZnmmZAdIn8qujgj87Z3hpwXf7fQ2gNyfZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:28:45:2c:97:0a:65:45:42:e6:a4:a8:39:da:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6f2e49a31e8df9c5aa08aaf240b5c832b9cb93
Validity
Not Before: May 13 03:01:23 2026 GMT
Not After : May 14 03:01:23 2026 GMT
Subject: CN=8785c8227879ee0461d7ccefb481c0ec549ef83f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f2:de:8b:09:5b:be:6d:2d:79:18:7a:c7:26:
0d:9c:5a:1c:75:d9:1b:36:62:2a:dc:fd:f6:77:5a:
0d:16:57:a5:d8:0c:51:34:1d:c6:db:f6:9a:1b:b5:
b7:ba:99:62:cf:04:1e:1f:07:41:74:fd:e1:ca:ff:
57:46:06:94:c4:08:49:ae:f2:8b:9e:da:e3:3b:ac:
cb:7f:50:64:4c:9c:da:86:c6:f9:1d:fc:4d:2c:b9:
d3:5c:f8:8b:8c:0e:4f:c0:7e:40:f6:1f:78:91:94:
c8:fd:40:ec:b6:f0:79:8b:f8:89:2c:61:07:5b:60:
b7:d9:3a:13:81:13:71:0e:d3:89:08:77:99:26:ca:
f7:b3:cd:2e:b8:cd:c2:00:9d:dd:4f:57:f9:0c:22:
d4:5d:c4:cd:e8:82:3c:e1:55:13:32:ed:1a:35:7c:
e5:cf:85:59:65:53:87:64:ed:5f:42:43:76:f8:af:
42:d3:65:63:02:e2:33:fa:94:34:0e:9a:51:e4:39:
f1:56:ab:e9:61:2a:fb:38:9a:86:5a:7f:80:d0:dd:
ee:2e:6d:b1:b7:68:23:d6:ba:cf:f1:4a:ae:82:cd:
21:a2:bb:29:4f:13:ca:77:84:0c:d3:ea:d8:78:49:
72:77:14:f3:15:48:4b:65:72:01:b6:97:08:dd:96:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:85:C8:22:78:79:EE:04:61:D7:CC:EF:B4:81:C0:EC:54:9E:F8:3F
X509v3 Authority Key Identifier:
keyid:5D:6F:2E:49:A3:1E:8D:F9:C5:AA:08:AA:F2:40:B5:C8:32:B9:CB:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XW8uSaMejfnFqgiq8kC1yDK5y5M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5521f7-2f71-4bf9-a148-2e9de252d1f6/1/XW8uSaMejfnFqgiq8kC1yDK5y5M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:1d:6a:e2:32:e9:52:80:60:dc:42:12:a2:4d:fa:a5:fc:3b:
03:41:c1:59:ca:19:f6:43:83:5d:1e:44:d3:b1:83:28:91:e7:
32:d9:f0:a0:15:f2:da:ae:4e:36:b8:d0:5a:96:d0:1e:fb:db:
53:fd:49:46:7c:e0:a2:91:28:3e:f7:77:dc:6d:50:87:03:70:
21:4e:7a:94:84:11:88:77:d5:8c:a5:22:9f:42:ad:ea:43:b8:
5a:e8:89:cf:11:c8:96:ed:11:4f:62:82:e0:c5:4d:2a:2d:bf:
56:34:d2:58:5f:ae:85:bc:40:61:08:da:ee:98:d3:4a:82:e9:
7a:68:06:de:d3:e1:0e:d0:32:50:98:ba:31:c2:81:0b:e3:ec:
c7:25:a4:3e:c3:9d:0d:ff:99:c7:ea:2c:01:3d:e9:cb:06:c4:
e2:f1:19:00:ac:a6:a4:15:2c:e1:9a:61:bc:83:7d:43:d7:2f:
de:f8:dc:bd:6a:d6:be:5e:b0:88:cb:c4:70:d4:70:20:5b:4b:
a8:16:d9:25:e9:de:e9:b3:9e:ac:0c:87:bc:b9:e3:3e:a8:c0:
1e:4b:75:09:40:e7:39:b7:a8:6d:a2:b4:67:2e:89:6c:a5:47:
05:28:23:2f:ea:40:90:2c:bb:a5:f3:24:81:e8:71:aa:e7:e1:
80:a6:79:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:54 2026 by rpki-client