Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
File: xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft (raw, json)
Hash identifier: zjKVtkbhnI3FY5q2Clw60Tp+LpK20LZKeTAe4QnLxtc=
Subject key identifier: EF:BC:8E:B0:F7:F0:69:C1:84:B4:F5:58:A0:E2:CC:06:AF:2E:13:DF
Authority key identifier: C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
Certificate issuer: /CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Certificate serial: 019E1EDA604C36371A4837F3EA97B91FCFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
Manifest number: 017C
Signing time: Wed 13 May 2026 01:01:28 +0000
Manifest this update: Wed 13 May 2026 01:01:28 +0000
Manifest next update: Thu 14 May 2026 01:01:28 +0000
Files and hashes: 1: 7kloanVHOYaHRlhEsLAGIVGi_rY.asa (hash: 8NXppGEeLQlW5S79hnELA4YUQ5d6IwXskVcbthg2tt4=)
2: YfYnV8dROfvt9YlNJZwwIzCuaVk.roa (hash: 8h9Qzp6OMQv/b+8I/FjbB7FBpfDNca2A4Lb8PfnMIP8=)
3: xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl (hash: 0V9P+J6ZKZpuT4XxdTh9Wn0lN8YAfuRAT/jmodJgRvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:60:4c:36:37:1a:48:37:f3:ea:97:b9:1f:cf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6baf8e3088217e4b7c0c231718fab909b1881e4
Validity
Not Before: May 13 01:01:28 2026 GMT
Not After : May 14 01:01:28 2026 GMT
Subject: CN=efbc8eb0f7f069c184b4f558a0e2cc06af2e13df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:16:0f:9d:c2:a7:cf:fa:81:b2:73:7f:ab:a5:
d8:6c:8b:4d:89:72:1f:e7:0b:15:42:df:74:51:37:
e7:2a:60:a0:70:98:a6:24:b7:b9:d3:6c:f4:e9:2f:
ea:60:96:3f:ea:0d:59:d5:28:7c:dc:d5:b0:5b:52:
ee:23:b4:b3:0e:01:db:4f:12:78:c3:0c:ef:eb:d6:
91:16:ec:55:91:6c:e0:b4:e0:23:45:17:3a:ce:fe:
cc:b9:67:f6:ba:53:a5:d5:34:05:1a:02:80:78:94:
92:06:02:c3:37:87:7e:88:3c:c2:7b:b6:60:e5:46:
c7:a6:5c:2f:20:8e:6c:99:10:3d:af:18:b5:91:a4:
a1:bc:d5:b8:b8:5c:af:4d:7a:f8:ee:c9:ca:84:77:
17:00:9f:48:b4:46:32:05:db:91:8f:d8:6d:f9:0c:
97:5a:75:de:b8:71:fe:8f:77:b1:78:ba:a2:63:f3:
ba:7c:4d:e0:17:20:84:a4:2e:ae:20:db:af:a3:6c:
26:d6:69:2e:d7:8e:df:37:41:62:14:d5:fc:2e:53:
cf:f5:dc:5f:94:48:ff:d0:f8:e8:a8:05:90:64:ec:
f0:5f:81:cd:5a:39:c2:79:b5:de:c9:d2:69:4b:9e:
01:15:d7:70:3d:59:23:e4:b8:ae:ec:96:37:96:a9:
8c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:BC:8E:B0:F7:F0:69:C1:84:B4:F5:58:A0:E2:CC:06:AF:2E:13:DF
X509v3 Authority Key Identifier:
keyid:C6:BA:F8:E3:08:82:17:E4:B7:C0:C2:31:71:8F:AB:90:9B:18:81:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrr44wiCF-S3wMIxcY-rkJsYgeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/873dd0-af88-4be5-9861-fea5eff37724/1/xrr44wiCF-S3wMIxcY-rkJsYgeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b4:d3:19:13:77:fe:72:fd:f9:a2:d8:4e:a5:57:92:a2:bc:
65:4c:04:7c:5a:16:59:bf:72:73:8f:6f:79:d0:9a:43:8d:74:
20:07:72:4f:ef:33:2f:4a:d1:63:27:fd:28:30:ad:37:fd:db:
09:d2:b7:e6:13:db:16:9f:c3:e1:d4:df:e7:00:05:13:a4:1f:
2f:c3:3d:49:7b:0c:e5:84:ee:70:78:6f:96:b7:02:36:63:a5:
01:1c:28:a8:3a:2c:6c:8a:1c:5a:0d:f4:42:af:fb:33:68:63:
5c:eb:04:00:bb:af:2c:c6:d3:55:91:90:49:e0:89:05:54:9a:
0a:43:e8:78:11:ac:de:60:7d:89:ec:69:f5:44:87:ee:22:3e:
f7:1c:3d:51:59:16:32:db:98:2f:2a:fd:c8:1c:75:dd:27:66:
52:33:8b:89:45:3e:7d:33:37:cf:b1:50:43:d7:6c:da:9c:3b:
df:2d:30:f5:0e:42:df:f0:02:74:83:03:bd:74:76:4c:36:21:
07:f4:d5:bf:46:ab:fa:d4:91:f6:d2:72:69:ea:1d:dc:42:d4:
46:2c:a6:68:ad:69:b5:6f:ab:37:02:56:4f:b6:8b:1d:1f:21:
0d:a3:a5:f1:3d:ea:2c:f6:16:f7:c0:7e:7d:f7:f8:d3:ff:91:
9e:0d:9e:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:36:41 2026 by rpki-client