Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: UyPI75oZUTWgAbR/6EsnAhLUQ+BmdNnABVwig3/RQc4=
Subject key identifier: 48:A3:22:E5:BD:06:B6:7C:BC:25:91:11:19:0C:31:87:47:3B:64:D6
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 019E1E6CAF1508B2D5BB682C9FE4C92BD4FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 1025
Signing time: Tue 12 May 2026 23:01:39 +0000
Manifest this update: Tue 12 May 2026 23:01:39 +0000
Manifest next update: Wed 13 May 2026 23:01:39 +0000
Files and hashes: 1: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: egkAQ2FLULSNtFjhOl7Juloyl37s/sHDgactAMSMGUE=)
2: nbiO0Qsuka11ZNMxAFy9dEINXys.roa (hash: NaboMvIQcJu7trkWGRw22aXFbkdnEJpMvSjIpYA2/ik=)
3: qTb1hfW2cZsJLmGnL2cnlmiyFfY.roa (hash: hklYadmGWp1kEGK+jtsPBwTIyJolTP2I0OScsQI8ZQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:af:15:08:b2:d5:bb:68:2c:9f:e4:c9:2b:d4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: May 12 23:01:39 2026 GMT
Not After : May 13 23:01:39 2026 GMT
Subject: CN=48a322e5bd06b67cbc259111190c3187473b64d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c2:e2:f3:ff:79:dc:27:f9:71:6c:8d:65:27:
59:e9:c7:a6:f3:a5:63:16:d2:e0:d0:3e:0b:34:6b:
c9:8d:14:50:4c:40:bf:2a:74:37:15:da:be:98:17:
38:f9:fb:dd:83:99:3f:f5:3c:e1:05:6b:85:0d:48:
8c:91:7e:18:4f:58:c9:82:63:3a:49:7f:1a:63:d3:
38:e9:1d:88:bb:60:3c:54:7c:9c:3d:7d:fe:61:34:
f2:f2:ec:ff:53:4b:fc:a0:af:b2:ef:3a:45:b0:db:
1a:c2:ea:11:74:77:04:0a:4d:f3:33:86:fc:de:6b:
a0:45:67:f3:a1:1c:11:45:07:af:75:df:b5:03:4c:
86:09:91:9c:60:c1:e3:2c:bf:a1:cb:b7:52:ec:85:
09:bd:9a:28:9f:11:7d:f2:32:7d:fe:0a:19:7b:e3:
89:da:26:ff:34:f7:ae:73:0e:17:c0:1c:08:a0:44:
dc:2c:b7:71:30:d3:0a:4b:cb:4e:6c:5d:8a:ab:de:
da:54:81:4a:cd:c5:b8:75:01:36:71:05:f4:2f:2a:
b6:d0:6b:90:a2:57:4f:ed:ed:92:ee:07:71:26:f4:
9a:77:95:57:4a:51:2b:5b:71:c6:88:de:71:2c:58:
c8:1c:c2:67:48:43:99:5b:73:ba:88:e6:ba:59:70:
7b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A3:22:E5:BD:06:B6:7C:BC:25:91:11:19:0C:31:87:47:3B:64:D6
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e8:ee:7c:0f:79:b9:eb:b0:fb:6e:21:f3:fa:10:60:17:6e:
6e:a4:97:d9:c8:55:2e:7d:d0:5f:6e:39:8f:cf:a5:b4:97:94:
cd:e4:57:2e:bc:75:76:88:be:ca:25:a0:5a:25:10:a8:cc:7c:
e9:d7:8a:89:88:7f:d7:1c:62:12:43:83:b8:e8:ac:43:3c:d4:
fc:99:61:61:c9:83:3f:db:5f:77:3c:62:a1:f9:a8:f9:cc:7c:
18:0f:fe:12:44:bb:c0:73:5a:3f:58:23:d4:9a:51:31:aa:7e:
f5:e6:fd:b6:84:e0:77:cd:98:5d:44:de:ec:a0:85:42:c1:4a:
15:c1:e8:0f:a6:d3:f1:f3:92:88:77:50:5b:98:cd:c4:da:ce:
6e:9e:79:02:82:05:c1:74:c8:7f:34:d0:71:e8:31:5c:a5:54:
0f:bc:88:45:ec:9a:f6:3e:de:ee:87:0c:1c:4b:c4:84:f0:dc:
0b:b2:80:da:79:f9:6d:ea:86:80:b6:70:05:68:42:93:83:7a:
37:83:ba:79:d1:89:38:87:36:a9:15:17:9b:33:d4:b5:ea:8a:
d6:3a:55:3b:62:0b:d7:39:68:57:9f:34:c3:2b:d4:c3:05:ca:
31:23:7f:b4:ce:bf:f7:fc:bb:24:b0:1b:7a:83:63:e5:fa:70:
bb:bb:80:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:29:34 2026 by rpki-client