Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
File: xt_rrIt1RREi-RT8oCTuH1QXyrs.mft (raw, json)
Hash identifier: E9YR7Yq6a26gAdC9uNEZWbRgkkfCaB2YSZiYx8vD3iQ=
Subject key identifier: 3A:FE:AC:B9:9E:09:C1:CF:E6:B3:80:81:87:D0:10:E9:D3:95:43:AC
Authority key identifier: C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
Certificate issuer: /CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Certificate serial: 019E1E6C96A17510BE4FF145A9D576564B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 23:01:33 +0000
Manifest this update: Tue 12 May 2026 23:01:33 +0000
Manifest next update: Wed 13 May 2026 23:01:33 +0000
Files and hashes: 1: LXxDQYBI8a2bgUeaO6Um5RWeWus.roa (hash: eyN2GAZCoXjAEdKeBKmxr2YBtVYHGsGtrSqCUIPElRo=)
2: xt_rrIt1RREi-RT8oCTuH1QXyrs.crl (hash: RSooKqmq/fd72+R2W8uFKa486YohS3Vq2J/qPikdNMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:96:a1:75:10:be:4f:f1:45:a9:d5:76:56:4b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6dfebac8b75451122f914fca024ee1f5417cabb
Validity
Not Before: May 12 23:01:33 2026 GMT
Not After : May 13 23:01:33 2026 GMT
Subject: CN=3afeacb99e09c1cfe6b3808187d010e9d39543ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f6:a1:1c:1b:bb:a8:55:e3:31:52:16:a5:cf:
4e:67:f4:be:68:d7:82:df:56:8c:34:8e:6c:68:0e:
c4:d5:47:c6:b4:e2:1c:ff:37:16:62:1d:49:55:f1:
11:f2:a7:cc:d7:29:a0:0c:1b:1e:4a:e0:6e:02:27:
06:7d:c7:0d:08:e4:10:ee:d8:f8:c6:b0:c0:1a:2a:
cc:1e:15:a6:fd:7b:14:e1:a1:17:e4:2a:cb:04:d4:
d8:d0:fb:c2:e9:e3:0b:40:d7:0a:31:9e:31:a7:8c:
af:99:c0:6f:ad:55:dd:6f:c0:40:78:3b:7b:c9:4c:
91:e1:c7:b6:fb:e8:16:04:3c:6c:b8:7f:62:61:bb:
8d:cc:76:e2:ee:be:50:9f:28:44:36:ec:ba:a9:7f:
30:ce:9a:af:8b:3b:98:d1:35:43:88:89:c2:34:cc:
c8:e8:c3:2c:04:d9:19:e2:74:98:05:6a:a0:e7:6e:
b0:01:c0:88:a4:14:f8:61:93:91:d1:52:08:80:fa:
61:28:28:90:50:7e:50:10:67:ed:02:05:fe:fe:f8:
55:82:03:9a:3f:80:25:cd:82:76:83:0d:59:25:6e:
57:65:53:af:f5:5e:c8:4d:04:1a:11:09:36:cb:0a:
fb:86:eb:dc:81:f3:89:85:a6:49:1f:bd:0d:45:d8:
2c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:FE:AC:B9:9E:09:C1:CF:E6:B3:80:81:87:D0:10:E9:D3:95:43:AC
X509v3 Authority Key Identifier:
keyid:C6:DF:EB:AC:8B:75:45:11:22:F9:14:FC:A0:24:EE:1F:54:17:CA:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xt_rrIt1RREi-RT8oCTuH1QXyrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a65a48-0935-4a79-ac0f-38091b19764b/1/xt_rrIt1RREi-RT8oCTuH1QXyrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:2d:23:9c:67:f9:fe:2b:9a:2d:c1:3b:9a:2e:dc:11:15:5e:
81:0f:f0:6a:ee:3b:4f:bb:f7:f3:f9:13:1e:7d:65:e1:ca:64:
de:cb:47:66:97:eb:e8:68:57:0e:30:fd:a9:00:f2:41:07:bc:
43:af:22:58:35:8f:07:b9:66:39:4c:24:b9:53:8f:bf:18:d3:
2a:5a:37:3f:b0:97:2d:ef:e8:bd:11:d5:00:02:a3:cb:cb:b7:
90:5e:0a:9a:65:fe:3b:d1:75:55:a6:a7:65:bd:a8:5f:55:0d:
1c:07:e8:8f:1e:5b:fe:95:70:63:d9:d4:39:a7:2d:27:bb:65:
59:7b:ba:b3:94:b1:f8:b5:db:a3:6b:05:75:a5:3a:49:4d:a8:
9e:c8:ea:a0:ea:f7:f8:74:be:4d:20:71:ca:90:94:f5:16:e3:
f9:67:a4:2a:48:e4:18:37:3a:fc:7d:2e:b4:6c:0b:40:20:35:
41:d5:b9:cd:21:a9:32:ae:ba:df:63:df:a9:dd:35:12:bc:f7:
6e:54:0c:24:7b:06:3a:c1:bb:d6:e4:12:ee:6e:36:b7:6a:a6:
69:5c:be:41:fa:76:4b:40:88:37:67:d6:bf:07:f7:6d:0f:5c:
b2:6f:f3:57:af:ba:6a:51:b5:d4:0c:84:d7:62:8a:18:f3:f5:
b5:e0:4d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:37 2026 by rpki-client