Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
File: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft (raw, json)
Hash identifier: 9y/zLyAEy7tiMvnBGpjYKJiUM+r04mt66izsi85hfek=
Subject key identifier: 40:AE:4C:6C:6C:D4:82:05:CD:AD:D8:A3:C3:D4:34:AF:A4:B2:CF:05
Authority key identifier: C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
Certificate issuer: /CN=c53f0adaeafb40c772459e939354f6be453f158f
Certificate serial: 019E20FF43274D515952CFA51C719CB576C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
Manifest number: 051C
Signing time: Wed 13 May 2026 11:01:00 +0000
Manifest this update: Wed 13 May 2026 11:01:00 +0000
Manifest next update: Thu 14 May 2026 11:01:00 +0000
Files and hashes: 1: je_dZ3uZwgn_oNlxsf8-FTUq220.roa (hash: ypEWzWUb+UjYyAsZX+8LRu9EB7C2RkmFTCbcPYB408Y=)
2: pt1RHK2niClvZGTwHDZ-ZsdvbEk.roa (hash: /6TgV1nZB5u4zUl3iLf85GJmzgWJev9Zymtz9O1XUPc=)
3: xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl (hash: STHupuWkkLL3HvEdBx07FXM8uJUpVPE9NReRsDCr0O0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:43:27:4d:51:59:52:cf:a5:1c:71:9c:b5:76:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c53f0adaeafb40c772459e939354f6be453f158f
Validity
Not Before: May 13 11:01:00 2026 GMT
Not After : May 14 11:01:00 2026 GMT
Subject: CN=40ae4c6c6cd48205cdadd8a3c3d434afa4b2cf05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:a0:f0:0f:42:d1:0a:1b:41:da:fe:af:d9:89:
53:09:22:ec:52:51:2a:b3:f9:2a:9a:7e:b2:3b:92:
f5:af:ef:65:d0:1d:12:71:00:19:a1:d8:0e:54:5f:
eb:4e:d9:a0:bd:f6:a0:43:74:4d:eb:09:33:f0:8c:
10:47:30:e8:8e:d2:d5:dd:69:ad:55:51:02:54:b2:
cf:ec:f7:e4:3b:9d:94:44:79:02:c2:a6:a8:8b:f1:
4f:f7:b9:ad:dc:e9:5c:f5:19:c2:1a:4d:e7:03:3c:
0f:95:89:5e:31:34:6d:0f:69:a5:bc:bb:78:43:af:
c8:1b:3e:6c:1f:45:14:c6:03:c5:45:c5:8f:59:d9:
f1:34:3b:01:18:2c:e1:ba:0d:f0:ed:c5:aa:8a:5e:
7c:02:c9:dc:a1:b1:94:b2:ba:c0:df:2a:5c:1c:8d:
9c:03:c7:f4:0a:75:1a:65:58:53:bc:89:04:a7:19:
c9:1c:fb:c5:6c:41:33:4a:c2:e1:b4:c1:92:a1:e0:
f9:c3:52:a0:4c:9a:9d:35:86:57:d5:56:1c:57:ec:
99:b9:a6:4a:57:a1:0b:db:0a:ae:96:85:7c:ff:f2:
36:2b:3e:20:6d:77:5c:6e:d3:b3:aa:c3:51:de:31:
75:93:ec:2b:44:3f:64:03:34:78:e2:73:a0:a8:9b:
28:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AE:4C:6C:6C:D4:82:05:CD:AD:D8:A3:C3:D4:34:AF:A4:B2:CF:05
X509v3 Authority Key Identifier:
keyid:C5:3F:0A:DA:EA:FB:40:C7:72:45:9E:93:93:54:F6:BE:45:3F:15:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/3804c2-0e44-4be3-9037-4617ca376083/1/xT8K2ur7QMdyRZ6Tk1T2vkU_FY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:48:70:46:98:08:17:86:73:92:7e:f3:7a:9d:8e:be:16:4b:
21:71:bb:55:a6:9b:40:86:9d:10:ea:c2:e6:60:3d:6c:d1:98:
58:c8:46:3a:2c:e3:a6:7a:cb:f5:fd:48:02:4f:3f:0b:29:4d:
e4:98:cc:45:82:fb:90:7d:51:fa:a2:f2:6a:98:6a:52:04:3f:
33:53:94:7f:d8:10:b6:13:79:2d:c2:de:c2:cd:1e:c7:8e:c2:
f9:a5:bb:a1:3c:e0:90:7c:a9:a9:90:53:78:c5:23:67:c7:4a:
64:59:93:8c:31:42:0b:c6:fe:94:bd:cb:df:95:3c:f2:b8:6c:
e4:e4:c4:b0:84:8f:92:a0:51:f0:8f:2a:04:68:42:83:b7:5d:
26:2a:67:68:30:70:ab:0f:b4:cf:95:89:7e:fa:21:c4:51:dc:
c0:2b:76:7a:a5:dd:c9:60:2e:50:0b:be:56:ac:e5:2a:ac:df:
9c:a1:80:51:2e:4c:8b:a6:e6:05:29:89:03:03:f6:19:b5:17:
0a:c6:7b:7e:69:e6:7f:1c:10:77:f6:18:73:2f:e4:f9:32:ad:
90:e2:ee:e6:7d:23:86:c8:79:cc:5c:91:e7:95:8e:be:23:aa:
23:4a:08:62:21:b4:10:0e:13:6f:83:63:18:6b:a9:43:c9:60:
fe:0c:48:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:23 2026 by rpki-client