Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: 2MA71A+pI1WzlmfgL+7zfV1LnfWGwhkpzIuQpubhN5o=
Subject key identifier: 0A:FD:8A:F1:87:EB:B8:02:0E:15:DD:C5:63:E2:9A:C6:12:20:07:D8
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 019E1D9121A8D47D3EB404BCD4FEAD08EAA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 19:01:51 +0000
Manifest this update: Tue 12 May 2026 19:01:51 +0000
Manifest next update: Wed 13 May 2026 19:01:51 +0000
Files and hashes: 1: O0e9J99nDHDBcPP1W09ssXrN96E.roa (hash: aQvYlglowNCiS102CJiAb4sYyaW4lZND2gALby9zlgw=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: WacCz/Xu+pYV13kgpXdEIIkbVmhGX/yTIxb6/umDwDk=)
3: x58D33wXY03IBALkfNVEewlOjxI.roa (hash: l4BRaOtR+rQZWBsP3tk/LVs3kvHtYkV6QExE7KMTpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:91:21:a8:d4:7d:3e:b4:04:bc:d4:fe:ad:08:ea:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: May 12 19:01:51 2026 GMT
Not After : May 13 19:01:51 2026 GMT
Subject: CN=0afd8af187ebb8020e15ddc563e29ac6122007d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f1:ba:f2:12:9e:43:95:67:47:e0:2f:d6:1b:
2f:22:4c:50:69:14:0f:35:67:88:e3:3a:76:a9:75:
eb:f8:af:8b:60:f3:d7:86:45:90:f0:f9:cb:62:b2:
47:87:96:cc:bf:02:c2:c7:59:b7:6a:e1:69:3d:9d:
c8:7c:ec:8e:5a:fd:72:29:81:99:5f:2d:50:ad:5f:
f0:55:c0:99:f4:03:7d:58:16:94:40:54:38:d4:13:
72:f0:95:d6:40:d3:cc:06:ce:98:e6:80:82:3e:f0:
93:8e:76:32:bb:2d:59:a3:68:dd:96:6f:52:cc:86:
7e:f9:3b:4f:ce:e3:04:63:e5:43:0e:9b:6a:72:b8:
ec:1b:8c:2f:92:7d:86:6c:6a:0f:3e:40:38:98:5c:
50:45:ed:18:3a:85:74:95:dc:7d:6f:f7:f0:5e:36:
2b:14:73:13:8f:08:ff:31:d7:17:2d:b7:ec:b5:63:
c8:7a:4a:d5:80:7d:e5:68:26:ec:2d:38:33:6f:58:
88:ba:39:25:0e:2e:ab:05:b9:22:46:c0:3d:db:2e:
a0:3d:55:a9:62:07:8d:32:fb:21:63:4f:d0:46:51:
8a:e9:ec:fc:17:8c:a8:b9:85:11:e7:2e:70:eb:14:
25:4e:11:e6:cb:11:fb:96:c6:d2:d7:c6:73:7f:67:
ae:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:FD:8A:F1:87:EB:B8:02:0E:15:DD:C5:63:E2:9A:C6:12:20:07:D8
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:1f:fe:d7:18:5e:7d:d4:36:5e:2a:56:83:3c:ca:12:8c:f8:
33:d3:d3:3a:66:e1:c5:e3:cb:38:55:ed:27:a0:0c:a9:13:95:
5f:03:71:cb:79:eb:52:42:97:5f:7c:e0:df:bf:8c:14:c8:d6:
dc:e3:2a:85:d3:0f:eb:8e:03:c5:cf:99:ae:24:35:c4:5b:85:
65:fc:10:45:26:3a:22:9d:6d:6a:ca:7b:48:5f:d3:18:a5:ad:
3c:e2:10:a4:0a:2b:34:cb:94:ab:c5:87:02:48:70:b8:45:c5:
2b:a6:ef:ac:f0:d9:df:cc:d7:c9:67:48:6a:54:ad:5c:a3:d2:
c5:45:62:a7:d0:bc:52:70:b8:65:8c:5f:01:99:95:31:1b:cf:
23:ef:f6:95:f2:5c:6b:4c:db:a6:32:e4:4f:d6:26:b3:20:65:
38:5e:59:86:fd:c0:8b:6c:af:7a:e1:d6:24:01:d9:f2:8a:c0:
9d:cf:ea:30:77:b8:86:99:95:24:5e:11:50:ef:2c:bd:5c:55:
b5:f9:72:07:8a:2e:47:2a:06:8c:bb:61:8c:22:27:c1:c3:37:
a5:fd:ee:74:6d:e8:ea:e3:bd:7b:34:16:d1:f9:c6:4c:16:30:
2e:5a:bb:5c:5b:4b:11:3d:c1:f7:cb:fa:53:99:01:42:c2:62:
ce:0d:36:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:21:51 2026 by rpki-client