Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft (raw, json)
Hash identifier: Hdk3lVPpJN17P+65UXzLRmpSheMCwMzFGNCap904SNo=
Subject key identifier: B3:AF:35:1C:EB:0E:D2:3A:6D:11:A7:6E:1C:45:C8:1D:74:56:82:A3
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 019E213668EC0987BB9C29487DC8F3F996E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
Manifest number: 094F
Signing time: Wed 13 May 2026 12:01:14 +0000
Manifest this update: Wed 13 May 2026 12:01:14 +0000
Manifest next update: Thu 14 May 2026 12:01:14 +0000
Files and hashes: 1: ATrhcvfZe2XqHKs47Dt9M3QKFhs.roa (hash: PefWPwiiidlJBpS7I/NB+iVKQJ0FsVbJRiY+10cA0F4=)
2: HxvfpX5aIfEn1UqJ_JQ9JVA67YY.roa (hash: 7RSyHDJ1xj0KCQZdzozVZqOlI9r3j6g8qDcJh+l/iTA=)
3: Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl (hash: eSUn46lQHzoKQMSgLzoBOYSWpz3s0XXRUGCpjkk1bBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:68:ec:09:87:bb:9c:29:48:7d:c8:f3:f9:96:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: May 13 12:01:14 2026 GMT
Not After : May 14 12:01:14 2026 GMT
Subject: CN=b3af351ceb0ed23a6d11a76e1c45c81d745682a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:41:21:62:ca:a7:52:a2:75:96:3e:38:65:
7f:d3:49:34:0f:2f:29:50:5d:b9:28:a4:07:93:42:
56:ba:d8:bf:22:c9:d1:03:bd:64:b9:9d:73:94:f1:
8c:9c:f9:91:ec:24:b9:39:cb:c7:fa:a6:c4:ef:ee:
16:bb:88:88:62:3f:cb:c0:c2:3d:14:db:ae:7c:53:
16:ae:0b:f0:fb:64:03:dd:d8:0d:f0:01:b0:8a:20:
87:a1:37:61:82:1c:98:66:17:49:54:90:37:8d:56:
b0:52:6b:ea:4c:38:6f:27:ce:70:6b:52:31:81:43:
57:61:c7:1a:97:ed:0d:24:b1:3e:ac:09:b9:96:86:
7c:ce:6c:6a:a6:66:d1:47:ef:35:c6:88:44:aa:ab:
db:50:b7:12:2d:13:c4:0e:82:aa:86:27:f6:9a:47:
6d:5c:33:30:1b:07:5b:af:c6:42:e0:ba:63:08:32:
60:0c:a2:84:11:2e:b7:64:7a:ab:c2:c8:79:90:13:
d5:57:b7:4c:e4:fd:05:05:41:17:b1:29:7d:36:fa:
ec:2c:c7:b5:db:5d:09:07:f6:d3:97:57:51:e4:4f:
07:98:fc:18:dc:50:9f:e9:ba:bb:41:97:13:db:f3:
cf:bc:b4:87:18:38:80:9c:22:84:db:20:87:f0:7f:
f4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:AF:35:1C:EB:0E:D2:3A:6D:11:A7:6E:1C:45:C8:1D:74:56:82:A3
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:57:3e:a4:86:69:3f:df:ee:3c:ec:0a:c3:06:f9:13:25:68:
da:5f:33:20:34:da:de:c2:3f:f6:fa:67:3e:1f:9d:2e:32:f0:
f5:f7:8d:78:09:fd:24:e7:be:86:4d:73:ff:53:68:2d:d8:2a:
5f:fb:a0:4f:bd:8e:02:81:95:89:2a:f8:57:be:64:a3:12:31:
9d:e0:f0:45:84:df:21:d6:aa:24:60:3c:d4:6c:42:eb:33:18:
67:1a:cb:2e:d0:26:83:34:82:e9:02:4e:76:79:d9:80:1d:ff:
54:c4:db:ab:0a:db:16:59:08:bd:f9:56:24:5b:7a:28:f0:82:
af:de:02:9f:71:db:a8:4c:15:ed:7b:c5:be:ef:97:1d:de:e5:
7f:6c:a7:55:d0:95:d6:b0:cf:56:d7:77:88:37:de:62:e6:8a:
06:c9:ad:89:aa:f0:2b:15:a9:01:0d:91:66:fb:11:b4:f4:95:
11:6c:5b:d2:e7:de:ad:e3:83:19:87:73:0f:91:2a:11:b0:c6:
6e:16:82:48:24:72:89:dc:f4:d7:3b:dd:a8:0e:12:d0:60:bc:
a1:d2:3e:7f:eb:49:88:4d:18:8e:e9:fd:45:18:88:99:0b:ce:
94:d7:65:e7:13:b9:6e:88:6d:2a:99:7a:12:37:23:b7:7a:fc:
24:4b:4c:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:28:21 2026 by rpki-client