Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: GFHVmH4OF5SJSysfQzFDaxmqrcorKEVHFCoOz1ZUE8c=
Subject key identifier: 70:57:06:FA:A3:B2:53:53:BD:A9:EC:71:E0:63:8C:2D:ED:0C:51:67
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 019E1D59BA665D918EFCC4C908C9E8963F4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 18:01:20 +0000
Manifest this update: Tue 12 May 2026 18:01:20 +0000
Manifest next update: Wed 13 May 2026 18:01:20 +0000
Files and hashes: 1: jbS8RSSk1qPuBMHXiz0NFlG5gaU.roa (hash: ffpPuQq0nfWr1B/H6xQP1tfUAtvyoDxPWUAq5WEIXy0=)
2: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: w6dzJJzXTQ5h7YliEPi4oEHPVVvVcE1G5GgoMkQ11co=)
3: xo3E7B75wnW1W3d1HJPhSZevYZA.roa (hash: PthsrXu6VgY7H1QeefirkpT9auw29AQ4kvdF+HY+Frc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:ba:66:5d:91:8e:fc:c4:c9:08:c9:e8:96:3f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: May 12 18:01:20 2026 GMT
Not After : May 13 18:01:20 2026 GMT
Subject: CN=705706faa3b25353bda9ec71e0638c2ded0c5167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:95:56:a4:3d:74:a1:19:72:60:e5:7d:dd:4d:
36:fe:5a:1d:0c:34:2d:f8:15:9b:c7:94:a0:6b:af:
1a:f5:0f:dc:62:2a:c4:bf:27:d9:bb:0f:7b:7f:48:
1f:12:15:52:eb:48:79:af:1c:f4:d1:b4:d8:5f:6d:
ef:58:e2:6d:c6:3f:fd:bd:4e:21:33:11:59:d7:0f:
2b:b6:f6:65:a6:7a:43:45:12:78:b9:a8:ee:05:58:
16:36:73:35:b0:e8:0c:3d:87:bc:56:d3:a1:7d:64:
c2:7c:d8:69:13:7b:46:f8:5e:8e:c8:5c:b8:6e:57:
29:2c:74:57:b7:6b:d8:c6:7e:a3:bd:7e:ed:e5:70:
1f:ae:3d:2f:2a:a7:22:a9:61:df:a6:22:b0:5b:aa:
69:b3:1d:80:79:5d:09:b9:df:90:c7:4e:51:5c:4f:
a1:66:33:b8:a3:6f:e9:68:b7:81:a9:1d:0e:02:45:
d8:ad:51:cf:a9:ff:a2:a5:f7:6b:71:20:2d:35:30:
ce:47:c1:5d:28:87:9f:d1:8a:cc:19:4f:e3:3b:d8:
21:01:04:f1:ab:17:85:39:ed:dc:24:b9:6c:60:0b:
64:6b:d2:76:30:d6:20:29:99:42:9c:9d:b8:8b:d7:
ae:50:96:83:d2:3e:d9:45:82:7e:55:28:dd:65:5b:
b3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:57:06:FA:A3:B2:53:53:BD:A9:EC:71:E0:63:8C:2D:ED:0C:51:67
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:1b:a8:02:2f:60:56:f5:17:53:b5:b4:43:79:72:99:1d:85:
52:20:54:e3:fd:b7:56:5d:e8:38:ca:d9:23:e7:ab:20:93:c3:
19:22:a5:3d:dd:84:21:35:b0:98:8f:82:a3:16:b2:48:96:6b:
15:00:36:74:d8:40:de:54:9b:9a:4c:3e:bb:54:a8:1a:a7:bd:
5e:4a:76:ba:5b:1c:90:4f:c7:75:55:f3:04:82:18:5a:67:49:
0b:1b:39:e1:f1:4b:f4:18:e4:9a:cf:f9:25:f6:2d:9f:c8:71:
99:f7:94:9c:a9:b3:62:05:09:14:c0:85:10:33:60:df:dc:09:
04:e1:70:07:ed:f7:93:1c:51:64:af:02:3a:93:f5:be:ae:1c:
03:6a:7e:dc:15:94:ea:7f:ac:28:12:ce:35:e5:91:2e:c7:98:
92:d9:71:94:d4:0a:69:2c:3d:29:55:e1:5b:d0:a7:41:c4:fb:
6c:f3:7f:36:d9:18:5a:0c:e1:19:7a:79:f1:26:85:0b:2b:1c:
ba:86:d4:63:39:c5:74:04:d4:68:c9:7b:2f:e8:db:22:07:15:
b9:36:93:c7:76:5a:a9:b0:db:2f:20:bc:9c:fb:5b:36:59:7d:
8b:37:09:bd:18:66:b0:8d:d6:d5:49:d8:10:7e:5b:ac:f5:81:
1d:af:4a:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4dWbpmXZGO/MTJCMnolj9MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTFmYjViYmMyZmE4NTcxZTNkNWY4Y2FlNDE5NmE4ZDdl
OTZjMzUwHhcNMjYwNTEyMTgwMTIwWhcNMjYwNTEzMTgwMTIwWjAzMTEwLwYDVQQD
Eyg3MDU3MDZmYWEzYjI1MzUzYmRhOWVjNzFlMDYzOGMyZGVkMGM1MTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZVWpD10oRlyYOV93U02/lodDDQt
+BWbx5Sga68a9Q/cYirEvyfZuw97f0gfEhVS60h5rxz00bTYX23vWOJtxj/9vU4h
MxFZ1w8rtvZlpnpDRRJ4uajuBVgWNnM1sOgMPYe8VtOhfWTCfNhpE3tG+F6OyFy4
blcpLHRXt2vYxn6jvX7t5XAfrj0vKqciqWHfpiKwW6ppsx2AeV0Jud+Qx05RXE+h
ZjO4o2/paLeBqR0OAkXYrVHPqf+ipfdrcSAtNTDOR8FdKIef0YrMGU/jO9ghAQTx
qxeFOe3cJLlsYAtka9J2MNYgKZlCnJ24i9euUJaD0j7ZRYJ+VSjdZVuzgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHBXBvqjslNTvansceBjjC3tDFFnMB8GA1UdIwQY
MBaAFMWh+1u8L6hXHj1fjK5BlqjX6Ww1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTct
ZDhhMGI0MWY0NmU4LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTctZDhhMGI0MWY0NmU4
LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcBuoAi9g
VvUXU7W0Q3lymR2FUiBU4/23Vl3oOMrZI+erIJPDGSKlPd2EITWwmI+CoxaySJZr
FQA2dNhA3lSbmkw+u1SoGqe9Xkp2ulsckE/HdVXzBIIYWmdJCxs54fFL9Bjkms/5
JfYtn8hxmfeUnKmzYgUJFMCFEDNg39wJBOFwB+33kxxRZK8COpP1vq4cA2p+3BWU
6n+sKBLONeWRLseYktlxlNQKaSw9KVXhW9CnQcT7bPN/NtkYWgzhGXp58SaFCysc
uobUYznFdATUaMl7L+jbIgcVuTaTx3ZaqbDbLyC8nPtbNll9izcJvRhmsI3W1UnY
EH5brPWBHa9KyA==
-----END CERTIFICATE-----
Generated at Wed May 13 01:46:06 2026 by rpki-client