Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
File: Xnx3NpRcKad7rNWxiw_1h1ERe60.mft (raw, json)
Hash identifier: 8tW50FSIkpevUx2E2aYBqHeLzIpcn19/TQ3qncpTjJ8=
Subject key identifier: 2E:3F:BD:97:BA:31:6D:6A:B2:A6:CC:A0:A3:20:3B:19:6A:02:12:ED
Authority key identifier: 5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
Certificate issuer: /CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Certificate serial: 019E1E6C0A0ED178AF8333A1897F70E653F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
Manifest number: 10D7
Signing time: Tue 12 May 2026 23:00:57 +0000
Manifest this update: Tue 12 May 2026 23:00:57 +0000
Manifest next update: Wed 13 May 2026 23:00:57 +0000
Files and hashes: 1: 3iYvgJ_eTlUQ-O3G1juF5EdX47M.roa (hash: cQV4nw2YNAHZleBjiJhNysmR6KlbphemL85k3lR/q4I=)
2: IRKwCUFzai38fr65-FRH_xYS0jI.roa (hash: oO+4buqTDLcCJZOc7fvRD7YLk4AQs3LNbZe5FzwGorY=)
3: Xnx3NpRcKad7rNWxiw_1h1ERe60.crl (hash: 5AhZQGjc7JIpRMWoWLkWEaVxgEBb2HyYTznGIPH0Phc=)
4: egWOQdMCICFVY-fSqkSUyufqt9w.asa (hash: KLL7Z4S+Cwpn2TeUDxPx/ngJ0cRsd9rXvcGeQB6iLDk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:0a:0e:d1:78:af:83:33:a1:89:7f:70:e6:53:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e7c7736945c29a77bacd5b18b0ff58751117bad
Validity
Not Before: May 12 23:00:57 2026 GMT
Not After : May 13 23:00:57 2026 GMT
Subject: CN=2e3fbd97ba316d6ab2a6cca0a3203b196a0212ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:ad:8b:a1:55:ab:fb:2a:ba:f2:e1:10:05:
e7:61:ee:a5:b5:45:4f:9f:52:b5:1d:f2:24:05:62:
2a:7c:bd:e8:1d:7f:72:a4:3f:ee:0b:75:eb:ce:9c:
29:34:a2:80:15:f5:d1:41:6e:10:be:11:af:50:87:
70:54:6c:48:55:31:bf:67:2e:2f:9c:27:e7:99:c5:
5e:cc:45:f2:71:40:58:2d:1b:74:1f:eb:78:70:4a:
a7:60:c7:dd:bb:6b:d5:d5:cc:7d:b8:92:58:ee:22:
a0:89:95:cf:7c:07:d1:ae:7d:a6:02:e3:21:f8:6a:
16:7f:3e:20:03:dc:c4:d6:08:3c:c5:fa:92:e8:d6:
f4:70:c3:b9:f5:9b:8d:43:f4:2f:bf:2e:ef:c4:13:
63:c3:54:4d:a3:26:5e:3c:12:5c:71:ae:97:b9:5f:
87:3b:ea:8f:0b:f0:00:40:05:ea:4a:7e:77:7e:1b:
62:ce:6d:39:7d:0d:72:2d:7a:bc:82:23:26:ee:4d:
62:7c:a3:8c:a4:54:1f:c5:ba:06:e3:dd:b8:75:1b:
99:ba:6d:33:32:c8:0f:9b:5d:d3:55:3f:50:1a:5a:
2e:2c:df:49:4e:a8:76:c1:19:bd:1b:7d:9e:61:d1:
b3:35:3b:bf:b4:56:2a:ce:4f:4a:bf:77:af:02:e2:
98:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:3F:BD:97:BA:31:6D:6A:B2:A6:CC:A0:A3:20:3B:19:6A:02:12:ED
X509v3 Authority Key Identifier:
keyid:5E:7C:77:36:94:5C:29:A7:7B:AC:D5:B1:8B:0F:F5:87:51:11:7B:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xnx3NpRcKad7rNWxiw_1h1ERe60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7bdd07-6e55-4a05-9d1b-eeedd99b8cc4/1/Xnx3NpRcKad7rNWxiw_1h1ERe60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:fa:a3:60:06:99:26:59:36:5f:b7:f0:52:5d:eb:cc:70:8b:
95:5e:b3:30:b9:7e:61:ad:72:96:df:fc:16:93:cb:0a:41:b0:
0f:8b:a0:48:f3:c8:90:13:d6:5e:54:89:95:4e:b6:4f:d9:b9:
ec:98:46:74:42:11:c6:ea:65:ed:e1:af:42:87:cf:ac:f3:42:
94:8a:ae:61:d2:dc:ef:91:37:75:08:08:41:d6:fb:aa:db:0e:
20:70:75:6c:43:be:af:f6:e8:f1:98:62:d9:3d:ca:12:1a:f0:
cb:61:12:f9:3f:83:1b:ea:6b:45:51:b4:40:40:83:d8:c9:16:
61:c6:4f:54:9e:91:08:07:9b:ed:2a:0b:f4:a5:20:83:f0:0a:
f9:0e:56:cd:bd:53:00:df:b6:1b:c9:6d:40:0b:4e:03:e5:61:
bf:db:ac:8d:74:15:78:04:33:1b:44:30:4f:25:19:34:9c:ae:
35:1d:1a:8f:76:c9:b3:4a:bd:c4:27:0d:12:7a:9d:b2:49:9b:
70:35:b9:cf:ef:bf:91:3d:e6:33:b7:db:0f:89:06:e2:b1:e3:
22:05:d9:4f:ff:90:04:d6:f6:3e:97:ab:32:a2:82:84:39:ee:
5d:76:1c:18:3e:85:ac:c1:d4:d3:b3:0a:92:5c:69:c3:dc:7d:
58:51:fb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:34:05 2026 by rpki-client