Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
File: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft (raw, json)
Hash identifier: 4FqvWn0t33eKZD8QiFrqW1miLk3indzZwHAk5MeI95I=
Subject key identifier: 4B:0E:84:DF:01:BF:D6:01:38:D4:5F:15:56:BD:FD:3C:DD:57:CC:3A
Authority key identifier: C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
Certificate issuer: /CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Certificate serial: 019E1F478F65E0CBCFACC14065769B0F0628
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
Manifest number: 0CF2
Signing time: Wed 13 May 2026 03:00:43 +0000
Manifest this update: Wed 13 May 2026 03:00:43 +0000
Manifest next update: Thu 14 May 2026 03:00:43 +0000
Files and hashes: 1: QehD96f5TABcvSMwJKFdikzIbO8.roa (hash: SRLpbEp6q6uyhKVlw7Pt60kWZXK8snPed5qV+0O6aV8=)
2: xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl (hash: D0cP9f9o+loamzIyQFP7lb0mW4sNqqR9urXQK7LPxX0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:8f:65:e0:cb:cf:ac:c1:40:65:76:9b:0f:06:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53b29170b56a84241f4b84fd4daff0836d503c6
Validity
Not Before: May 13 03:00:43 2026 GMT
Not After : May 14 03:00:43 2026 GMT
Subject: CN=4b0e84df01bfd60138d45f1556bdfd3cdd57cc3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:40:8b:f8:a0:35:4a:bd:cc:a3:c1:0e:d1:b8:
68:23:4d:a4:31:c3:13:43:53:98:49:be:83:f7:1a:
0d:39:6e:b5:cd:17:ed:5a:7b:13:8e:47:58:d4:67:
bc:46:a1:1e:08:d8:ca:86:16:46:02:d7:28:af:5e:
a5:de:cb:b9:0c:ac:db:ca:ba:20:6a:f7:79:e8:be:
38:4c:36:e1:9b:11:d5:76:75:c0:45:cf:85:d8:f0:
ba:81:dd:b0:fd:38:8b:f2:7c:92:7a:3a:64:e7:95:
be:83:13:d0:ab:53:8b:fa:92:2a:b8:d5:ac:51:c4:
80:cc:7b:44:ca:82:32:ce:07:64:0c:9b:1a:47:52:
96:d6:0f:a3:73:4e:5f:c6:de:94:24:4c:6f:7c:4f:
2a:d8:2c:ff:dc:43:5b:78:45:25:8b:2c:0b:40:3c:
7c:8b:7e:be:cf:1f:0e:25:fe:bb:59:69:69:a2:dd:
ec:90:29:42:f7:64:f7:55:ad:3b:2d:c2:79:95:1b:
38:c5:41:d3:cc:31:ab:6e:85:d0:f8:2d:b8:f2:44:
90:7e:03:dc:c2:c1:8d:d4:ea:71:81:d0:11:be:85:
a6:c0:4c:9e:10:be:5e:03:97:40:ff:57:b7:45:91:
37:10:f5:0a:57:58:c0:af:b0:32:68:b7:04:d7:65:
d6:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0E:84:DF:01:BF:D6:01:38:D4:5F:15:56:BD:FD:3C:DD:57:CC:3A
X509v3 Authority Key Identifier:
keyid:C5:3B:29:17:0B:56:A8:42:41:F4:B8:4F:D4:DA:FF:08:36:D5:03:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/60d02f-1163-4666-9be9-7dfbbae0368e/1/xTspFwtWqEJB9LhP1Nr_CDbVA8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:ce:00:11:97:94:c9:66:d9:b2:7d:54:44:89:e9:ea:56:01:
38:ed:dd:ec:af:5f:17:ba:95:9d:d8:ea:e5:1d:54:9a:4c:e8:
4f:7d:4d:b4:eb:20:5d:6c:60:2c:6d:5e:4c:33:ad:15:11:bc:
58:30:da:07:4f:f7:d6:84:75:57:40:77:4b:ed:dd:91:4e:d7:
ed:7f:c1:05:38:bc:d5:17:fb:a9:72:1d:f7:1c:db:4d:9c:e8:
37:b6:a1:5a:da:87:76:cf:c4:c3:02:4d:17:7b:0f:1d:eb:e7:
04:48:2c:61:bd:11:ef:59:35:71:31:65:00:9d:10:04:1d:8d:
68:17:2d:4d:a8:d7:53:c2:13:89:6f:06:72:de:4e:56:3f:c9:
59:ec:b8:8a:a0:12:1a:d9:9e:1a:b4:9a:3e:3f:08:81:3e:ff:
bd:25:99:85:51:45:2a:81:d4:87:c8:e4:55:e8:3c:dc:f3:ae:
a1:b6:6b:c4:3d:b7:89:d5:9e:7e:d0:80:35:45:23:ea:0f:b9:
2d:eb:9f:42:9d:b0:74:9d:23:51:f6:88:34:84:3c:74:43:fc:
e1:0e:7d:34:cd:c0:22:cd:fd:ea:3a:3c:b7:f1:e4:65:dc:69:
84:de:b6:56:91:5b:64:6c:cd:99:3a:9b:e6:d5:1b:fc:45:35:
09:35:d3:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:14:21 2026 by rpki-client