Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
File: Xka_H_gWvgukxiFxI0IzCp-ti9o.mft (raw, json)
Hash identifier: eWXs2CSkZaVuWQ9J4p7jAaSawGju/KICDC6snABxhVw=
Subject key identifier: 70:5B:BB:0A:62:7C:8B:D4:45:11:95:01:BE:39:83:E8:6B:F8:80:9E
Authority key identifier: 5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
Certificate issuer: /CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Certificate serial: 019E1D90C2F0C44611684BCD5C30E8E06FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
Manifest number: 1930
Signing time: Tue 12 May 2026 19:01:26 +0000
Manifest this update: Tue 12 May 2026 19:01:26 +0000
Manifest next update: Wed 13 May 2026 19:01:26 +0000
Files and hashes: 1: Xka_H_gWvgukxiFxI0IzCp-ti9o.crl (hash: wRwWvS5ScgiMLOw5tbb89Cn9h0ulVaFIQRmfKLpfSYU=)
2: coRfEXrfHGck2d3kTCu4-WIF828.roa (hash: seMqqalk2GBduoeIME3C50KibF4OKg4MDnKjSiFIduo=)
3: sVAfKvrvvhMbIUsWh385vVnIquc.roa (hash: M9eQGOQqKf4XTtZds1m1OGeYS0UwjPbRi7yLdnFl6LQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:c2:f0:c4:46:11:68:4b:cd:5c:30:e8:e0:6f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e46bf1ff816be0ba4c621712342330a9fad8bda
Validity
Not Before: May 12 19:01:26 2026 GMT
Not After : May 13 19:01:26 2026 GMT
Subject: CN=705bbb0a627c8bd445119501be3983e86bf8809e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a1:81:b3:63:bd:19:a6:5e:9d:62:4a:6c:de:
05:a7:4a:6c:af:6d:b9:6a:59:ca:3b:45:f5:95:c7:
0c:cc:80:8b:b6:08:22:07:64:0a:ae:36:fc:76:09:
26:ac:1a:88:cc:1b:ef:a0:99:e2:63:e9:e1:d7:07:
0c:21:6f:1a:48:fc:6c:f6:46:4a:79:1b:3c:d2:d5:
9b:00:7f:0c:a0:ef:20:c9:f1:26:c2:22:df:e3:29:
c2:45:ff:d3:64:fd:7b:c6:31:8d:25:92:b4:e4:b4:
d2:83:84:ea:88:9a:55:5e:17:0c:c7:9d:01:c1:2c:
8b:5b:65:93:75:35:e6:fc:70:a6:81:15:4a:03:27:
db:39:a3:4f:fe:8e:80:8b:4f:03:9a:bf:bc:8f:78:
ac:45:6d:af:ec:fe:61:b0:12:16:fa:c7:ad:28:ff:
82:e3:59:fd:90:74:1a:de:5c:99:65:a8:13:ae:55:
f6:99:ff:3e:37:00:90:cd:c1:76:c4:a6:a2:a4:e6:
95:58:f5:bd:35:6a:d1:ab:44:a4:56:3a:35:53:2b:
57:b9:2a:64:cd:77:70:45:c9:37:4d:e5:e1:35:45:
e2:0b:d7:fb:b3:ab:09:b6:fd:54:80:78:1a:f1:a3:
3a:ea:1f:86:e5:78:4b:97:2b:59:59:27:c2:30:22:
fb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:5B:BB:0A:62:7C:8B:D4:45:11:95:01:BE:39:83:E8:6B:F8:80:9E
X509v3 Authority Key Identifier:
keyid:5E:46:BF:1F:F8:16:BE:0B:A4:C6:21:71:23:42:33:0A:9F:AD:8B:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xka_H_gWvgukxiFxI0IzCp-ti9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/c8cf56-c48c-4e62-98ee-b8db15b531a2/1/Xka_H_gWvgukxiFxI0IzCp-ti9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:76:16:15:ec:82:a6:21:b1:48:5e:34:4a:ca:0d:e1:8a:1e:
6a:65:87:5a:f1:51:da:4d:d3:b3:71:f4:14:6d:e5:aa:2a:7c:
67:d6:75:ca:25:53:65:51:98:6d:0b:96:2c:9b:fd:a4:9a:db:
4d:b1:1a:50:f3:25:78:e7:15:20:1d:ea:d6:f2:58:13:20:ee:
59:3a:bc:8a:57:c7:b7:0a:a4:2d:00:3e:7e:26:77:09:31:6c:
d0:f2:30:bc:82:56:75:1f:9b:36:72:3d:93:1b:a2:cb:cb:3b:
8a:45:0c:0a:cd:ef:f1:12:71:49:ed:49:50:f3:15:7b:14:d3:
a3:b7:8a:d8:8a:a2:42:62:72:c7:9e:ed:da:44:26:c4:e7:3b:
b9:2e:71:8a:0d:5e:60:ab:b3:a4:fe:46:39:43:ad:d5:65:6e:
54:49:42:14:ff:31:f1:ef:f8:4e:08:da:9d:54:a4:81:2c:0a:
26:ec:a2:2b:b6:fd:6f:26:77:1c:31:c0:b4:5b:6a:c2:c5:f4:
b2:68:d8:31:42:41:c8:3b:73:14:6a:9a:d7:dd:ef:ab:47:22:
47:c1:d8:77:07:11:5f:6d:77:a7:e4:df:54:e6:98:97:fc:01:
f4:2e:a9:39:dc:e8:d0:83:af:35:03:47:f6:9e:b4:00:d6:a8:
99:5d:ea:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:22:53 2026 by rpki-client