Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
File: xb-nGlET_tgkZHdsFDcVFMkhjvU.mft (raw, json)
Hash identifier: U5i4lUfUu5RKE3Xu0ejB0QcocJEjnxDtu8gi/ErVoNI=
Subject key identifier: 5B:2D:88:B2:60:61:B2:6F:8F:7C:91:2A:BE:69:7D:EB:4C:CD:D6:78
Authority key identifier: C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
Certificate issuer: /CN=c5bfa71a5113fed82464776c14371514c9218ef5
Certificate serial: 019E1D5930B41221BD6B90D87A66A1DE21D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
Manifest number: 0D3E
Signing time: Tue 12 May 2026 18:00:44 +0000
Manifest this update: Tue 12 May 2026 18:00:44 +0000
Manifest next update: Wed 13 May 2026 18:00:44 +0000
Files and hashes: 1: jBvSHulkiAFNZq-1Sz_1NBwC4gw.roa (hash: kIr3tsaXSv0n1HwqnJcooiylPmXgSiBfGD9CqML14GU=)
2: xb-nGlET_tgkZHdsFDcVFMkhjvU.crl (hash: LCsbFzKCkOPJZ8SOR6QuposOcBUV2/vhCcpiip5xqtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:30:b4:12:21:bd:6b:90:d8:7a:66:a1:de:21:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bfa71a5113fed82464776c14371514c9218ef5
Validity
Not Before: May 12 18:00:44 2026 GMT
Not After : May 13 18:00:44 2026 GMT
Subject: CN=5b2d88b26061b26f8f7c912abe697deb4ccdd678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f6:54:ba:c9:01:7f:90:09:45:d7:a1:b7:65:
f8:9c:2f:75:6a:f4:73:68:18:22:bf:40:af:f3:13:
06:c5:82:78:11:74:3c:88:25:42:80:d1:c1:f9:b4:
4e:3c:9b:c5:35:80:eb:2a:e0:9e:f3:2c:8c:76:5e:
08:65:84:90:6f:9f:e4:d2:16:85:94:db:92:15:55:
47:5c:0e:6e:7e:cf:d5:22:d2:2b:81:06:f3:fa:6b:
a1:9e:dd:8b:d8:23:f0:2b:0b:52:64:0a:89:c8:96:
f3:e0:66:0c:47:ef:00:0e:87:79:84:6a:21:aa:01:
47:45:ae:69:da:f2:77:f4:d4:f7:60:04:8f:9e:4b:
59:44:6d:7c:d2:4d:90:8f:02:2f:f1:91:d8:19:be:
b1:8c:ae:9d:ac:09:b7:e9:d9:0c:1f:2a:d6:73:71:
e8:22:b3:d9:81:fe:8e:69:47:81:8e:e6:a9:a6:f0:
b5:b5:82:8e:71:87:dd:f6:7c:d6:f0:cc:83:80:48:
c5:dd:70:b2:f1:7e:cc:a8:a7:2d:dc:fe:76:93:04:
db:ec:fd:0d:fc:cf:f2:99:6f:22:21:bc:01:56:6e:
c5:24:8a:9f:e3:16:6d:e7:b3:c8:43:eb:16:24:3a:
6c:6e:17:15:0e:46:d2:3f:ab:66:54:41:49:1e:e7:
2b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2D:88:B2:60:61:B2:6F:8F:7C:91:2A:BE:69:7D:EB:4C:CD:D6:78
X509v3 Authority Key Identifier:
keyid:C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:88:ef:4d:91:b7:a8:92:da:4c:0a:c8:9a:74:b9:5d:7e:43:
4e:5b:67:7c:64:ae:32:a8:01:43:11:1f:cf:de:f6:a0:35:07:
a3:06:ec:cc:31:c0:26:1e:62:2f:ab:6a:b4:02:1a:b3:02:94:
0d:7a:22:8a:84:ab:59:d2:02:ea:62:88:48:18:84:2b:53:a3:
2b:e9:47:ec:82:69:40:39:31:a7:e3:53:d7:18:d7:56:59:7c:
a2:d1:3c:41:6c:98:e5:da:04:b4:a6:01:bd:bc:93:70:ab:fa:
d6:b3:64:87:85:1f:3c:42:c2:de:84:af:65:5c:87:32:b3:14:
b0:40:aa:86:05:a3:21:81:d7:45:d7:1c:f7:d1:d4:c1:0f:63:
d0:bc:e6:2d:d8:f3:f8:41:32:af:9f:a2:ca:41:44:a1:ae:ec:
de:80:35:42:9c:20:78:ff:a8:81:7b:7b:82:74:87:6d:3a:4b:
bc:ab:18:8f:f2:46:f9:d5:20:8c:b2:4a:7a:d8:e4:29:c8:f2:
bb:b1:33:60:f4:17:d3:b9:3d:a6:5a:c0:b0:89:91:0f:7c:97:
26:84:4d:ed:24:71:1c:f9:31:6c:bc:ac:3b:0f:5b:e0:0e:22:
0c:9f:cc:82:ad:ac:b2:be:03:5f:43:01:e2:f8:c9:a1:3a:0b:
4f:a3:32:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWTC0EiG9a5DYemah3iHQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YmZhNzFhNTExM2ZlZDgyNDY0Nzc2YzE0MzcxNTE0Yzky
MThlZjUwHhcNMjYwNTEyMTgwMDQ0WhcNMjYwNTEzMTgwMDQ0WjAzMTEwLwYDVQQD
Eyg1YjJkODhiMjYwNjFiMjZmOGY3YzkxMmFiZTY5N2RlYjRjY2RkNjc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPZUuskBf5AJRdeht2X4nC91avRz
aBgiv0Cv8xMGxYJ4EXQ8iCVCgNHB+bROPJvFNYDrKuCe8yyMdl4IZYSQb5/k0haF
lNuSFVVHXA5ufs/VItIrgQbz+muhnt2L2CPwKwtSZAqJyJbz4GYMR+8ADod5hGoh
qgFHRa5p2vJ39NT3YASPnktZRG180k2QjwIv8ZHYGb6xjK6drAm36dkMHyrWc3Ho
IrPZgf6OaUeBjuappvC1tYKOcYfd9nzW8MyDgEjF3XCy8X7MqKct3P52kwTb7P0N
/M/ymW8iIbwBVm7FJIqf4xZt57PIQ+sWJDpsbhcVDkbSP6tmVEFJHucr+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFstiLJgYbJvj3yRKr5pfetMzdZ4MB8GA1UdIwQY
MBaAFMW/pxpRE/7YJGR3bBQ3FRTJIY71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGItbkdsRVRfdGdrWkhkc0ZEY1ZGTWtoanZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82N2M4ZmItMDI1Ny00ZDYwLWEwZGYt
NmZjZTAzMzI1YjNmLzEveGItbkdsRVRfdGdrWkhkc0ZEY1ZGTWtoanZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82N2M4ZmItMDI1Ny00ZDYwLWEwZGYtNmZjZTAzMzI1YjNm
LzEveGItbkdsRVRfdGdrWkhkc0ZEY1ZGTWtoanZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ4jvTZG3
qJLaTArImnS5XX5DTltnfGSuMqgBQxEfz972oDUHowbszDHAJh5iL6tqtAIaswKU
DXoiioSrWdIC6mKISBiEK1OjK+lH7IJpQDkxp+NT1xjXVll8otE8QWyY5doEtKYB
vbyTcKv61rNkh4UfPELC3oSvZVyHMrMUsECqhgWjIYHXRdcc99HUwQ9j0LzmLdjz
+EEyr5+iykFEoa7s3oA1QpwgeP+ogXt7gnSHbTpLvKsYj/JG+dUgjLJKetjkKcjy
u7EzYPQX07k9plrAsImRD3yXJoRN7SRxHPkxbLysOw9b4A4iDJ/Mgq2ssr4DX0MB
4vjJoToLT6My+w==
-----END CERTIFICATE-----
Generated at Wed May 13 05:32:15 2026 by rpki-client