Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: kFuAHJq/fNBGDy+5N1Enexk2GoNoVtemj3zsZWia7KM=
Subject key identifier: 79:88:FA:FE:42:43:B2:26:75:FF:D2:38:F5:C9:9A:3E:10:8F:40:B2
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 019E1E350045AAF072DD9E48097A4311E549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 22:00:50 +0000
Manifest this update: Tue 12 May 2026 22:00:50 +0000
Manifest next update: Wed 13 May 2026 22:00:50 +0000
Files and hashes: 1: MsnqFaljx-vLs6R1klCk-k4mqbE.roa (hash: 9w5Fj/ix8Y1oWU+nhqJcIUFjp29qAgz5fs3U3GbWExc=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: DzfXqTl3uXqAsRldbMP6S7H68MJrfyr5YTz9fINLWrg=)
3: Y-0LFW4QQXme0gq1FoIF-wZ-SQc.roa (hash: wu/R/xhocC/i/LlV9UK65CdEa6/Nxe99KI2JumwUKlc=)
4: a_XjHLHQF6uE4SSOtjsOa8f4-2Q.roa (hash: m3nX1Uyzi87lTewY/HPBoiE0m8iVkIMnK/iQX/3hwYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:00:45:aa:f0:72:dd:9e:48:09:7a:43:11:e5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: May 12 22:00:50 2026 GMT
Not After : May 13 22:00:50 2026 GMT
Subject: CN=7988fafe4243b22675ffd238f5c99a3e108f40b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:1b:bb:3e:b8:a8:29:88:23:06:14:a1:22:3b:
bc:d4:29:ed:99:fe:c5:20:9b:c3:e6:06:e5:40:5f:
10:03:38:cd:62:49:43:0c:97:eb:58:74:9f:34:96:
79:c1:04:09:85:33:fb:d2:8c:74:36:e8:ed:ef:3d:
1c:05:39:60:fe:f2:6a:13:25:3a:51:02:aa:2f:fb:
ca:1f:b9:db:a4:f9:4c:8d:72:f2:28:57:36:b9:a0:
d4:41:95:ae:62:1f:84:34:5a:ca:40:48:2a:c3:17:
56:64:dc:51:44:19:a0:86:b0:9f:f5:6e:a7:d9:20:
18:c0:d2:70:09:f5:34:44:30:fa:91:bd:ae:d3:09:
f6:df:77:46:c9:40:db:b0:fc:69:15:8b:3b:d5:96:
01:fe:c4:ba:18:13:62:01:12:1f:7f:fa:c8:66:c4:
76:32:dd:b9:33:06:21:b1:df:45:cf:90:7f:25:39:
21:03:8a:54:6e:02:cf:37:6a:eb:b4:c0:c7:a7:1d:
cb:f0:65:a2:79:11:ab:ad:a7:59:70:6b:b4:f2:83:
d9:02:ed:78:16:d7:5c:c1:16:af:74:f1:9c:d3:ab:
b5:6d:d6:0f:6e:68:0d:a8:a6:83:6c:aa:6f:49:b3:
c8:77:25:db:7f:87:7e:0a:9c:6f:fd:1e:63:33:c3:
18:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:88:FA:FE:42:43:B2:26:75:FF:D2:38:F5:C9:9A:3E:10:8F:40:B2
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f4:50:8d:d7:c4:9c:f2:7f:30:b6:34:07:1e:f7:60:0e:63:
57:fb:c5:50:da:4d:2c:85:af:3b:39:ee:13:fb:e4:73:57:3a:
46:30:1a:40:3c:4e:d6:fb:b3:d1:a1:44:d0:0b:58:46:6f:19:
04:7c:bd:a4:e8:cb:86:3f:6a:93:ae:45:6c:54:03:27:50:76:
92:da:66:7a:9c:98:13:94:98:9b:44:9d:82:3a:78:04:2e:4f:
47:9d:5a:8e:58:01:ee:5c:9d:18:c3:8b:89:a6:23:4c:35:ee:
b5:79:d9:bf:b3:18:6e:ac:cd:09:57:6d:d8:8d:de:cb:f0:9f:
7c:bd:b2:99:05:fb:d1:31:78:69:8d:d2:53:6c:7f:66:72:53:
e3:43:4b:0e:e7:2d:a1:0f:ed:0b:e0:f7:7c:d9:c9:43:6e:94:
39:be:cc:93:b1:1e:3f:1f:94:8e:1b:97:7b:1d:e1:df:0f:13:
8f:25:04:43:60:f7:4f:6e:c4:c5:98:79:39:75:d2:ba:49:ab:
91:08:4e:79:d9:84:b5:3d:96:7b:c6:aa:0f:c1:86:1d:45:88:
48:db:10:0b:dd:f8:c7:11:99:0f:29:19:e5:1d:85:96:53:54:
09:85:38:b8:ae:75:d5:2c:c5:9b:c2:92:14:c9:8a:f3:76:db:
b1:e3:da:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:27 2026 by rpki-client