Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
File: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft (raw, json)
Hash identifier: tx6TaPtP19TXrbRx/mizShSZEeWsEz6gzGnsk4qG2go=
Subject key identifier: 41:21:0E:6F:DF:D1:7F:66:F2:5F:C8:4A:65:B3:8F:FC:99:C1:36:72
Authority key identifier: 5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
Certificate issuer: /CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Certificate serial: 019E216D566CE6BDB42AF7CAB93E4B794D6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
Manifest number: 136C
Signing time: Wed 13 May 2026 13:01:14 +0000
Manifest this update: Wed 13 May 2026 13:01:14 +0000
Manifest next update: Thu 14 May 2026 13:01:14 +0000
Files and hashes: 1: Tj86XfWCuCApPHfYX3OGv6qhNv0.roa (hash: KavhnQrG+XPERodqs0bRhCLXxZdjDwTVYFBmFO2dVKc=)
2: XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl (hash: 5KjtDUw/ZzKJh/4ZDTtuKa50+A3Xml4jobRvm/cJlVQ=)
3: lz8LsNgX1D_wsrCHWat-j5v2uVI.roa (hash: vw9y4aHyYuZp50dhE6CiKPwsukwzG4Dv5+i3W21W3u4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:56:6c:e6:bd:b4:2a:f7:ca:b9:3e:4b:79:4d:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e51c193fb7ff1746a215c41817f50ecba5a581a
Validity
Not Before: May 13 13:01:14 2026 GMT
Not After : May 14 13:01:14 2026 GMT
Subject: CN=41210e6fdfd17f66f25fc84a65b38ffc99c13672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:08:c9:54:6b:2b:8b:e4:ea:dc:03:0a:1d:78:
82:1c:f7:50:6c:09:07:38:46:cc:d1:f0:52:45:83:
dd:32:56:c6:db:93:d5:fe:13:9d:db:d6:b1:ef:4e:
3a:49:d0:1b:08:59:3f:60:74:b7:09:a1:4f:44:02:
23:06:2f:b1:f6:da:2f:48:4b:56:98:24:ef:20:fd:
c3:3c:f6:68:4f:1c:f2:b4:45:c3:38:a1:56:76:04:
9e:29:b0:a8:6a:1f:b0:98:b6:33:71:88:5b:2e:a4:
f3:fa:42:c0:2b:14:5c:9d:d6:8b:9c:97:ec:37:ad:
51:1a:b9:45:c0:79:e4:ba:4d:3c:87:2b:89:1f:33:
e5:82:73:fd:2e:32:a9:3b:ee:57:10:9b:39:2b:2e:
21:45:c1:ab:81:8e:45:d9:20:1d:56:7a:06:e3:01:
47:1a:92:b6:e0:28:61:ec:44:96:6a:93:f8:bf:54:
9d:1e:78:1f:9e:b6:a7:04:d7:f1:2c:ee:45:30:99:
f0:bc:0d:1b:06:7c:59:0a:cc:37:f7:e9:e2:93:5c:
d4:c2:57:75:ee:7b:80:db:2c:19:f0:a1:5d:17:c5:
84:9c:d2:6d:f3:ce:74:2e:a4:53:a9:2f:9d:9c:e1:
29:0a:ed:31:fd:23:3e:95:63:a5:6a:c2:90:11:13:
b3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:21:0E:6F:DF:D1:7F:66:F2:5F:C8:4A:65:B3:8F:FC:99:C1:36:72
X509v3 Authority Key Identifier:
keyid:5E:51:C1:93:FB:7F:F1:74:6A:21:5C:41:81:7F:50:EC:BA:5A:58:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b8072f-f355-4dd6-9393-6a65d8041803/1/XlHBk_t_8XRqIVxBgX9Q7LpaWBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:35:0d:65:25:95:6c:e4:09:cd:4a:f1:81:7b:62:d0:d8:a5:
cc:13:f9:80:a9:80:c1:a2:c9:c0:ce:c0:a9:fe:8b:59:41:02:
53:53:34:9d:e8:16:b5:7d:3c:86:90:59:74:79:74:2e:aa:a2:
c5:2f:0f:b0:c4:33:30:21:9c:d4:ad:88:f3:ec:e0:e7:92:55:
bc:13:3c:9e:fe:96:e5:b6:3b:14:09:2b:85:ec:97:b8:76:d4:
63:fe:b9:26:ce:6d:93:c7:f1:a1:a9:9f:1d:d1:9d:d6:b2:30:
18:03:cc:8c:b9:21:96:c4:8c:09:b9:ab:52:e1:d5:39:7f:ac:
9d:97:b9:ae:4e:c2:44:58:29:8a:d2:6d:d5:74:15:cd:2b:46:
a4:c6:2c:3b:83:71:c8:00:3f:28:b5:70:1b:a7:bc:a7:24:e4:
c9:78:25:60:6a:b7:8a:fb:92:ac:c5:99:cb:7f:b2:dd:20:bd:
b2:0b:34:66:e5:12:4d:06:22:a7:4c:15:56:ef:f1:a9:5e:a0:
fa:2f:89:5d:b3:d6:2a:89:c7:dd:82:1c:28:ca:e6:7d:60:91:
fd:cb:11:cc:f4:7d:21:ca:9a:c7:c7:02:5c:f5:e4:80:d0:35:
2a:48:dd:a8:ca:07:4f:e2:b8:3d:ab:89:4a:3f:e6:32:1c:4a:
6b:2e:48:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:10:42 2026 by rpki-client