Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
File: xFvSa8XYHu6cjhotDXjRDarggZU.mft (raw, json)
Hash identifier: X0qaBOdJy7h45KDSOs0iL8mgdJ5lof11Ms4+sDqmYRM=
Subject key identifier: 2E:E7:64:3A:A5:11:99:8B:58:73:4D:05:9E:F4:C3:78:CD:F9:83:CD
Authority key identifier: C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
Certificate issuer: /CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Certificate serial: 019E1D90AFBE0E3CBBB5247BF339877DB759
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 19:01:21 +0000
Manifest this update: Tue 12 May 2026 19:01:21 +0000
Manifest next update: Wed 13 May 2026 19:01:21 +0000
Files and hashes: 1: FX91S7TqeS_5eNXFwkhAJLeDMDY.roa (hash: 7/g0n2srHScQb2lUJNavUfjGDwgVOP/uF61M1Zy+4aU=)
2: xFvSa8XYHu6cjhotDXjRDarggZU.crl (hash: QJzgdc5jNJGOS54cNu+mKycfj3K43k6mbC+fcy39Pq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:af:be:0e:3c:bb:b5:24:7b:f3:39:87:7d:b7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c45bd26bc5d81eee9c8e1a2d0d78d10daae08195
Validity
Not Before: May 12 19:01:21 2026 GMT
Not After : May 13 19:01:21 2026 GMT
Subject: CN=2ee7643aa511998b58734d059ef4c378cdf983cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:35:4d:1f:a2:9f:c5:f4:17:72:8e:65:dc:ba:
1e:dc:99:4f:3b:c4:63:54:34:97:b8:5e:5b:54:0b:
89:7b:9f:c5:dd:90:42:bc:aa:04:de:7b:77:84:e0:
1c:de:cc:b2:c9:b4:0f:5b:c1:e8:2a:d8:b7:11:a2:
d8:e7:44:46:43:34:f0:8b:6f:4a:81:57:87:e0:dc:
a6:8b:a1:05:12:d1:9d:79:df:a6:da:00:2d:77:15:
9f:5a:8f:29:be:4c:e0:10:44:31:95:2d:bc:86:de:
81:84:d0:db:19:80:0a:5c:74:45:ca:5a:ce:41:f8:
71:bb:80:2d:b9:f3:03:7b:ce:b3:d8:f8:f3:e4:e7:
cf:8f:2e:2f:75:81:d3:48:e9:2b:c1:7d:85:68:d1:
b6:a5:6f:38:03:b5:8f:cb:eb:f5:b7:9f:db:e3:93:
83:7b:38:0d:61:ad:bc:c4:5b:49:58:ae:bc:2b:a1:
a5:b2:ca:97:92:24:8a:21:01:8d:f6:38:06:a5:9f:
b3:19:d5:8d:64:a2:1f:4f:58:17:f0:3c:c1:4b:02:
99:52:dc:00:ef:41:bf:37:51:5d:64:67:68:0b:6f:
d8:c2:6f:54:2d:d8:c2:e5:e1:e5:3f:d9:fe:57:70:
52:fb:c3:3e:43:67:0e:7b:a8:cd:c6:6a:9c:40:55:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:E7:64:3A:A5:11:99:8B:58:73:4D:05:9E:F4:C3:78:CD:F9:83:CD
X509v3 Authority Key Identifier:
keyid:C4:5B:D2:6B:C5:D8:1E:EE:9C:8E:1A:2D:0D:78:D1:0D:AA:E0:81:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFvSa8XYHu6cjhotDXjRDarggZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/87829a-e332-424f-9c4f-e447be2ac68e/1/xFvSa8XYHu6cjhotDXjRDarggZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9d:4d:19:87:65:be:0e:a6:30:c0:a7:bd:7f:11:ed:30:46:
03:a8:90:09:28:0c:8f:a4:aa:ac:22:43:9b:96:90:cc:33:9e:
bd:b5:d7:19:cc:f2:d5:5f:16:ac:d8:ca:9f:fc:8c:e3:1a:be:
2a:92:5f:87:cb:0d:6f:ca:0a:ab:d8:4e:27:26:2c:16:f0:7f:
8e:16:27:e0:39:56:8d:cf:c0:44:6d:42:95:d2:90:37:b0:5c:
11:36:cd:75:e0:1f:fd:88:bd:5c:d5:b2:55:ac:69:91:3f:49:
1f:88:a9:cb:64:dc:0e:6d:2b:ec:ab:a4:2e:9b:fa:fb:e5:ac:
de:60:f0:97:41:15:8e:63:8c:85:e8:a9:82:02:d0:72:42:07:
b6:04:d6:61:f1:45:51:23:77:9b:81:2d:62:f7:f9:15:a4:89:
80:77:bc:ca:1a:88:ff:49:7e:1b:be:aa:c0:85:44:97:91:90:
29:c6:74:e2:38:0c:9c:46:e7:a5:ad:7d:86:2e:ad:b2:96:ca:
b5:8d:c1:b4:cd:45:a6:30:42:c8:e9:69:38:36:6d:45:ab:c6:
c3:27:ee:05:7a:06:21:02:a3:98:31:f5:02:02:30:84:26:00:
9b:69:26:7a:53:11:2b:02:0d:8a:51:09:4e:b2:1d:ea:c8:1d:
b7:d8:41:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:30:50 2026 by rpki-client