Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
File: xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft (raw, json)
Hash identifier: Vy/6OTdRaX8QaSEtFQv5WpgAMMRvVrxgB507+CrgNhY=
Subject key identifier: D0:BC:CA:8A:68:E3:DF:87:E9:BC:BC:E0:EE:F4:CB:40:65:34:6D:EB
Authority key identifier: C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
Certificate issuer: /CN=c51674fee5556728175efb56eaa8b99f3815afa7
Certificate serial: 019E1FECAD3421B768EEE8F4ABFC907CE78C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
Manifest number: 1709
Signing time: Wed 13 May 2026 06:01:05 +0000
Manifest this update: Wed 13 May 2026 06:01:05 +0000
Manifest next update: Thu 14 May 2026 06:01:05 +0000
Files and hashes: 1: 5VgBPMnvg-Y4r70mw9zcqUHf-ms.roa (hash: P3U3l0akrscgsoVcKLjR90FDWEx4VR/+ukAn/96yuzo=)
2: xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl (hash: m5BACKyonMpm5UMPA6R+06lTIDA07XYbQblMZhSN1NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:ec:ad:34:21:b7:68:ee:e8:f4:ab:fc:90:7c:e7:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c51674fee5556728175efb56eaa8b99f3815afa7
Validity
Not Before: May 13 06:01:05 2026 GMT
Not After : May 14 06:01:05 2026 GMT
Subject: CN=d0bcca8a68e3df87e9bcbce0eef4cb4065346deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:54:53:1a:36:77:f9:43:fc:1b:01:48:55:5d:
2d:ab:43:62:96:95:ca:6b:ce:db:ad:05:d9:e3:e3:
f7:4c:1d:3e:28:1e:78:5d:32:79:5e:dd:93:48:3c:
ee:cc:24:40:af:b0:66:f5:89:a0:47:fe:cc:59:7f:
3f:b4:9b:93:77:b0:97:ab:dd:99:bf:b1:20:84:4f:
b3:5e:d6:79:17:29:9e:60:be:46:4c:14:81:40:62:
46:1d:d4:6c:67:b9:b0:41:63:69:00:cf:af:f0:70:
73:96:88:e8:b9:e8:d2:29:d5:c8:a6:28:9b:2c:cb:
d2:ec:52:97:89:20:e5:e3:7c:6a:c6:07:78:7d:30:
ed:cc:3b:0f:8e:2f:b2:2c:9f:2c:3e:2e:fe:35:36:
17:da:5b:a8:39:0e:41:d2:86:78:b0:5b:b6:c7:66:
64:b4:39:85:86:18:6d:3a:f4:88:4f:72:02:30:f7:
de:c6:9a:4d:f2:2d:af:9f:49:4f:1e:a4:35:c8:3a:
31:dc:6b:6d:c5:96:64:6d:8c:08:87:39:25:8a:2b:
2b:a1:21:6d:db:69:5b:2c:25:a7:ce:19:e3:4b:bd:
b0:55:2e:3c:a6:dc:40:6f:4d:41:33:29:20:a4:05:
88:6e:36:31:9d:62:7f:52:f7:17:5c:fb:13:bf:7c:
00:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BC:CA:8A:68:E3:DF:87:E9:BC:BC:E0:EE:F4:CB:40:65:34:6D:EB
X509v3 Authority Key Identifier:
keyid:C5:16:74:FE:E5:55:67:28:17:5E:FB:56:EA:A8:B9:9F:38:15:AF:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xRZ0_uVVZygXXvtW6qi5nzgVr6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5fb089-2589-4c71-b026-3cbe1af3b82c/1/xRZ0_uVVZygXXvtW6qi5nzgVr6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:05:8e:f6:78:0f:a1:5a:a7:0f:7b:ba:d8:61:a9:13:1a:ea:
4f:d7:12:cf:80:14:9a:11:1d:f4:99:ae:e0:2a:f6:59:8d:eb:
ff:23:27:eb:78:9e:49:e0:ac:b6:b1:56:b9:9b:c9:4d:28:ba:
7e:e7:f0:00:31:94:9e:de:ef:88:df:ef:49:fa:e7:18:63:cc:
33:84:1c:e2:8d:77:83:95:61:bd:1b:db:c9:06:75:1f:2c:58:
92:0f:d9:b2:da:44:54:96:10:dc:c5:44:32:bc:c2:9f:25:97:
a7:a3:0e:a9:84:3f:f5:06:ed:4a:a2:b8:da:f1:37:8e:b3:e3:
4f:0f:2d:ee:8d:a7:19:4a:a7:a1:c5:ee:c3:1c:37:f7:a6:27:
28:5e:4a:91:53:c3:cb:f2:d1:7b:55:f2:03:fa:f1:e7:1d:a6:
46:b6:b7:a7:5c:d4:62:8e:53:b4:26:4c:dc:47:86:72:57:d3:
eb:19:6b:2a:a4:96:07:29:9b:2f:f8:66:af:75:bd:9c:fe:24:
c1:5e:d7:82:28:1e:99:87:d5:15:8f:9f:ce:ff:40:f1:29:87:
37:c8:23:a6:8a:15:17:25:c7:d2:3f:7c:c8:64:d2:df:06:b6:
1c:3a:f9:f5:e5:89:25:10:95:8e:fd:21:35:22:e6:7b:af:8d:
e6:5a:68:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:42:28 2026 by rpki-client