Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
File: xDt0aX74sFcJ99OU0f4pUeidXFU.mft (raw, json)
Hash identifier: J0mawXUQg4viOSHRI6hwCL1UZRcEUm5LljiDdPfawkU=
Subject key identifier: CB:24:ED:08:8E:BC:C6:44:94:21:07:05:AB:47:D3:D8:C9:86:A0:7E
Authority key identifier: C4:3B:74:69:7E:F8:B0:57:09:F7:D3:94:D1:FE:29:51:E8:9D:5C:55
Certificate issuer: /CN=c43b74697ef8b05709f7d394d1fe2951e89d5c55
Certificate serial: 019E1C10027B50B4A24C4DCCC5942BC44E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
Manifest number: 2F
Signing time: Tue 12 May 2026 12:01:11 +0000
Manifest this update: Tue 12 May 2026 12:01:11 +0000
Manifest next update: Wed 13 May 2026 12:01:11 +0000
Files and hashes: 1: cdK-ddxQ6uw5AVK3VADEiG5b7xU.roa (hash: kzD188j7ogf+ogrfaYMQ1BaJogJz8brxVXslH2Z+iS8=)
2: xDt0aX74sFcJ99OU0f4pUeidXFU.crl (hash: jCuQwOtgOHSyqzGIN3dNMyJUg26LGx/2bZKCrGCdiMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:02:7b:50:b4:a2:4c:4d:cc:c5:94:2b:c4:4e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c43b74697ef8b05709f7d394d1fe2951e89d5c55
Validity
Not Before: May 12 12:01:11 2026 GMT
Not After : May 13 12:01:11 2026 GMT
Subject: CN=cb24ed088ebcc64494210705ab47d3d8c986a07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:9c:67:e5:ad:39:0c:08:a8:b0:e9:3e:16:
23:2a:fc:41:1a:ad:bb:c9:2c:66:3d:ad:f4:0f:b5:
30:15:8b:ca:be:1c:e5:77:8b:63:f2:89:07:ae:73:
e1:1c:1c:ab:15:6c:8c:b8:88:64:0d:97:b9:ff:02:
f2:d7:8b:7c:82:2a:37:17:c9:de:65:73:18:04:d5:
95:59:24:77:0b:76:75:b5:62:ba:d3:14:15:11:fd:
1d:35:08:49:40:a2:1f:aa:fd:84:57:2d:46:69:30:
ce:55:19:69:68:1a:f7:0e:02:66:9d:17:39:c9:51:
df:12:e0:1e:3a:a8:57:d1:83:9c:b0:69:74:58:0e:
21:cf:fc:b0:96:a9:2b:c6:7d:b9:0b:f4:d0:be:7c:
7c:dc:51:e6:ad:e1:b9:42:83:17:1d:9b:a8:6a:6e:
0a:24:00:62:3e:5d:99:8b:0d:29:84:36:65:08:e0:
c1:08:e5:b1:67:37:2a:33:27:b8:d7:01:2d:90:90:
96:cf:c9:e7:42:98:ba:91:f8:10:bc:52:4e:75:db:
f8:91:8c:5d:9d:1e:87:34:dd:21:a2:07:4f:a6:2a:
01:04:a0:ac:9e:cf:c8:f6:61:f6:cf:b4:6a:bd:28:
cb:71:c8:b2:53:92:76:6a:5d:0d:1c:f3:ed:ba:a0:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:24:ED:08:8E:BC:C6:44:94:21:07:05:AB:47:D3:D8:C9:86:A0:7E
X509v3 Authority Key Identifier:
keyid:C4:3B:74:69:7E:F8:B0:57:09:F7:D3:94:D1:FE:29:51:E8:9D:5C:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xDt0aX74sFcJ99OU0f4pUeidXFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/280ad2-07e4-49f7-8c0b-9aba0f363177/1/xDt0aX74sFcJ99OU0f4pUeidXFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:37:1c:36:56:a9:71:84:fc:b0:ee:2d:e9:d4:0b:99:76:46:
9e:f3:a0:42:84:4e:b4:4a:f1:9e:67:ce:26:86:a1:57:57:5e:
3e:a1:a8:7f:da:fd:43:d6:f1:7e:ea:ab:b9:c0:f1:bc:2c:05:
69:62:6b:2f:93:2d:01:b9:4a:d9:54:66:2b:d8:9f:08:9f:0c:
0e:1f:01:c2:96:3c:50:1d:58:f4:7a:41:b8:0b:5b:d5:02:4f:
64:b9:4f:fa:e0:af:15:57:47:75:b1:4a:dd:f3:38:0e:43:71:
67:08:ee:f8:04:56:18:fb:53:00:0a:46:5c:f1:c0:62:df:6c:
4e:51:a3:c4:74:92:60:b1:aa:0e:da:0c:cf:05:4e:63:f2:65:
6e:20:17:da:22:ff:d8:c2:95:19:3d:e3:b0:a1:67:e1:11:6c:
97:41:87:23:02:43:00:84:e1:5c:8b:fe:a1:95:31:27:f4:b6:
55:c6:05:3c:79:bb:90:72:26:a2:dc:2b:90:67:3f:df:67:68:
24:07:9a:dd:c3:ff:d8:6c:63:b1:e5:68:cd:12:f9:16:d8:49:
1d:33:80:a7:4f:7f:18:07:c4:a4:a2:09:d2:be:81:d3:32:74:
38:1c:21:bf:62:75:7d:24:b2:bf:a8:b3:b7:ba:e1:58:d1:d8:
a6:9b:38:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:45:06 2026 by rpki-client