
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
File: Xw3wyOXRsjU4vrXszDqxKGXffqo.mft (raw, json)
Hash identifier: VkpK07FCkvfSt1lhTv3psw1a7NctSBClPXsS+7Fuodw=
Subject key identifier: 3A:7A:8A:7F:D3:74:78:47:6C:44:FD:F4:4B:66:1C:C2:91:C6:52:A6
Authority key identifier: 5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
Certificate issuer: /CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Certificate serial: 019E1F4794889D92B3CC2B1A984DE0443E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
Manifest number: 0ACB
Signing time: Wed 13 May 2026 03:00:45 +0000
Manifest this update: Wed 13 May 2026 03:00:45 +0000
Manifest next update: Thu 14 May 2026 03:00:45 +0000
Files and hashes: 1: Xw3wyOXRsjU4vrXszDqxKGXffqo.crl (hash: Sj0n01LtVPQHhMMlNpvq+NxYMacKD86nI3y2e6gmw4s=)
2: ez3ZuiMIYx6XAooxqgacpm5fhZg.roa (hash: vk/HfV9yv0+3WHPw2z2Am2j60UpVLAvpD1nYGFaREig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:94:88:9d:92:b3:cc:2b:1a:98:4d:e0:44:3e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0df0c8e5d1b23538beb5eccc3ab12865df7eaa
Validity
Not Before: May 13 03:00:45 2026 GMT
Not After : May 14 03:00:45 2026 GMT
Subject: CN=3a7a8a7fd37478476c44fdf44b661cc291c652a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:41:4f:43:62:90:35:a2:d4:49:7b:f5:8e:e7:
df:8b:6d:01:31:92:13:e8:99:a9:ba:b6:e1:a5:1f:
02:e4:4a:90:89:b0:bf:47:95:98:37:bb:f1:fb:1f:
9c:93:ea:c0:f9:e4:2e:24:30:c7:cb:dd:a6:ee:43:
4d:e2:d3:7e:5f:61:12:10:20:01:60:7b:cf:c5:2c:
53:89:d3:42:71:86:85:df:2b:e8:2a:e5:0a:6b:3a:
91:35:3d:d9:90:6a:f5:68:f3:76:4e:40:a2:60:ea:
a8:e7:a3:fc:22:66:c1:41:32:43:6f:c5:3d:b4:53:
4c:a7:af:f8:10:78:50:af:8b:29:82:d7:a6:fa:19:
c1:25:35:e6:c5:8e:95:89:c7:c0:a6:da:61:30:de:
43:53:5d:46:6d:1f:7d:c0:25:a6:f4:82:03:03:06:
c1:50:3d:d9:30:d5:c7:2c:30:64:f7:6e:6c:44:60:
a8:8a:b9:45:d7:27:11:4b:df:bb:7b:2c:4f:34:ec:
3a:ee:0c:86:a0:04:fb:f4:df:ae:19:e9:45:87:6e:
04:cd:08:a5:b8:07:43:99:7f:2e:03:5b:1c:6d:93:
13:68:04:92:29:51:67:1d:78:b2:d9:00:30:99:32:
28:d0:1a:2f:71:5a:9d:af:78:6b:dc:b3:b2:68:7b:
7f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:7A:8A:7F:D3:74:78:47:6C:44:FD:F4:4B:66:1C:C2:91:C6:52:A6
X509v3 Authority Key Identifier:
keyid:5F:0D:F0:C8:E5:D1:B2:35:38:BE:B5:EC:CC:3A:B1:28:65:DF:7E:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xw3wyOXRsjU4vrXszDqxKGXffqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/e11dad-208e-47cc-bf6e-bc513a98b9be/1/Xw3wyOXRsjU4vrXszDqxKGXffqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:22:6f:df:1c:6f:4a:37:c9:25:12:50:95:b2:36:d6:95:c4:
9d:e6:2b:c1:a2:d2:4a:f3:d4:fd:45:01:81:17:71:c5:96:e6:
d2:f1:40:a5:7e:67:96:45:a0:23:80:56:ec:b0:09:2c:cd:b7:
ef:92:b1:5b:35:f3:56:96:39:a8:d3:a3:0a:43:37:d5:a8:d9:
ed:ac:ca:3f:31:28:6c:f5:ed:8a:14:d0:38:45:16:88:8b:6c:
cb:e9:85:de:0e:3d:8e:e0:3b:19:74:44:a1:d8:39:23:19:ca:
94:ac:8b:d9:4b:57:f6:c9:19:18:8c:3a:fb:9a:08:c1:1f:b6:
64:ba:6c:43:e6:cb:a3:17:ad:fc:9a:34:a8:d3:ea:ce:4c:9f:
ef:f7:a1:78:10:ff:f5:45:70:96:68:bc:bb:fb:88:a9:eb:30:
17:98:f9:31:de:66:19:c0:e6:92:b8:c3:2d:53:14:6c:0b:e2:
ec:cf:a0:c7:dd:c9:fe:91:f9:e8:9b:05:2e:c4:2e:1e:26:be:
25:be:c3:c5:9a:ce:a2:65:a8:37:ac:cf:71:84:62:d4:a3:70:
9c:a8:0e:8a:b9:e1:0e:31:de:02:c4:c4:6a:63:d5:5b:df:82:
0b:c6:7c:18:05:9c:30:26:7f:01:86:9b:51:6b:02:4d:85:d8:
52:f9:ad:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:47 2026 by rpki-client