Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
File: XP6NclJuTnOjtX2TYPOlG-tZpF8.mft (raw, json)
Hash identifier: JKOw2JLtCNY390yH6ZqT+RbPlqq2PrObEOHe6LJIcrg=
Subject key identifier: 77:82:11:BA:89:D4:13:B3:E8:B1:9B:19:49:0F:EB:B2:3D:84:A3:DA
Authority key identifier: 5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
Certificate issuer: /CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Certificate serial: 019E1DC775F299FAA9917423D51A5C6BFAD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 20:01:11 +0000
Manifest this update: Tue 12 May 2026 20:01:11 +0000
Manifest next update: Wed 13 May 2026 20:01:11 +0000
Files and hashes: 1: XAYcuxsajA5hLrmscRs4oynzyUg.roa (hash: AvPY1r1vk0ST8v3sz0+K9LIFAxv9kmWL/J2CaIlXu0s=)
2: XP6NclJuTnOjtX2TYPOlG-tZpF8.crl (hash: 2ww+m10cpxJU2nT1eXMdEAUI50uMqViU7Xjg1sXOETY=)
3: b_b8FgUBWx7o4mrGSWETF1x68gQ.roa (hash: YqVNmCVOzW8nbc96cPhMeB/DqemnZKobEb9c09pjCAo=)
4: mjMQEKksicvgZzYu86cOaUikq_o.roa (hash: 7g64PoLicqxVLeKtHUopkjJGRzw3GYF64nr8YZ5vEEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:75:f2:99:fa:a9:91:74:23:d5:1a:5c:6b:fa:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe8d72526e4e73a3b57d9360f3a51beb59a45f
Validity
Not Before: May 12 20:01:11 2026 GMT
Not After : May 13 20:01:11 2026 GMT
Subject: CN=778211ba89d413b3e8b19b19490febb23d84a3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ac:4f:54:49:c6:db:bc:78:d7:7e:e8:fb:28:
0d:ba:00:32:f5:8c:1c:b3:82:04:95:b9:75:39:15:
02:a5:9a:75:d4:21:e0:97:bb:ce:90:26:1e:2d:59:
94:d8:83:8f:c8:b2:bc:86:b7:a4:e7:32:38:96:92:
24:2e:64:49:bb:c8:91:44:52:88:a2:87:65:fd:da:
56:05:8f:b7:1d:64:9e:50:52:55:9f:04:f2:2b:96:
13:e0:e7:47:74:0a:f1:d3:a4:bf:27:72:57:f1:ef:
33:4d:f5:01:97:b7:e1:c3:bc:d5:a7:1b:96:37:6f:
af:b7:79:4b:f5:d1:75:30:ff:b1:fa:03:65:d8:4f:
84:c1:ac:49:6f:20:ea:48:9a:93:a2:f7:0c:65:a8:
cd:4e:d8:26:f3:e0:75:20:dc:d9:01:42:a3:d6:73:
54:50:98:33:cb:a9:28:51:d5:09:d7:2e:3a:bd:1f:
d2:de:02:66:b6:86:46:85:3e:11:0b:dc:bc:5e:18:
7d:c0:ff:0d:63:54:17:77:d0:d2:df:7d:4b:c0:bf:
7c:a1:88:e6:be:2b:69:fe:c3:e4:43:9c:f7:d3:4e:
cc:7f:f2:ca:32:58:a2:5e:e4:41:c6:98:60:6a:2d:
9d:06:9b:b0:93:1a:b5:b4:9a:c4:3f:d8:aa:d3:0f:
af:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:82:11:BA:89:D4:13:B3:E8:B1:9B:19:49:0F:EB:B2:3D:84:A3:DA
X509v3 Authority Key Identifier:
keyid:5C:FE:8D:72:52:6E:4E:73:A3:B5:7D:93:60:F3:A5:1B:EB:59:A4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP6NclJuTnOjtX2TYPOlG-tZpF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/84bf54-09c3-4324-a11c-e4ddfa32e52e/1/XP6NclJuTnOjtX2TYPOlG-tZpF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:86:70:eb:73:f2:d0:15:c8:85:c8:86:71:61:11:f0:20:27:
3e:25:86:43:be:b2:80:b5:6a:60:f2:29:ee:78:bc:47:02:22:
2c:84:3e:18:a1:9f:91:e7:ba:4c:0d:64:bf:77:19:43:49:9f:
34:05:ab:67:09:31:0d:1a:34:ac:97:cd:61:16:6d:18:7d:cc:
7c:f9:0e:18:50:bb:98:32:0c:13:55:02:70:b2:eb:e0:e3:2e:
a6:26:d4:db:4c:04:86:f9:bc:93:a1:f5:d0:14:88:4c:5c:6a:
2e:82:11:d2:a7:34:18:b4:2b:d5:ad:1d:5d:c0:31:eb:87:5c:
94:89:b9:61:f6:c0:29:b3:ca:a0:a9:33:80:a2:aa:9d:be:8e:
aa:0d:0c:8d:08:de:01:b2:17:15:44:c2:4f:ee:46:9c:b7:b0:
9d:38:5c:a2:c4:bc:4c:ba:29:a5:b8:6b:ac:38:89:2e:ea:fd:
f1:76:51:7a:fd:6b:44:9f:a0:cb:c7:8e:ab:c3:f8:9a:83:ab:
a3:84:5a:e0:5d:94:28:ae:3a:a7:89:8a:d9:6f:64:61:7d:e9:
a4:1d:1a:9f:29:9a:2b:36:4d:a7:89:89:0b:20:68:82:91:86:
99:63:76:c3:5c:cb:28:e4:48:35:da:4d:f1:b3:dc:49:5a:bc:
ba:66:65:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:17:32 2026 by rpki-client