Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
File: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft (raw, json)
Hash identifier: ErTnEuy+JNhAAmGyFcltSFOu/VWbpT/HRUrH2SW0hfc=
Subject key identifier: 1C:B5:AA:22:74:76:E9:0D:7D:C7:98:54:11:B8:B1:96:0A:07:D3:D3
Authority key identifier: 5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
Certificate issuer: /CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Certificate serial: 019E1D90375EA57BC45470E415592217673D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
Manifest number: 190C
Signing time: Tue 12 May 2026 19:00:50 +0000
Manifest this update: Tue 12 May 2026 19:00:50 +0000
Manifest next update: Wed 13 May 2026 19:00:50 +0000
Files and hashes: 1: 2oiBg97yJfcku7AZ1xtBGexIP9I.roa (hash: ZkJc6vel+43QcyypXskCAIYVCyw1+ndC8Q1LjIoI34g=)
2: GWcwAEGL8dWNpctIdaHLmJt2F-M.roa (hash: icoIbE+7HxZrn6cToVlzjrHBi9MeFRezSthDAS8pPcs=)
3: Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl (hash: iyAldMi6C15w69EbPMoIkjs7+fqkcnFyFhp25nPrbfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:37:5e:a5:7b:c4:54:70:e4:15:59:22:17:67:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eedd6f53bcb49e4b9b0706dfd074259c9b8a408
Validity
Not Before: May 12 19:00:50 2026 GMT
Not After : May 13 19:00:50 2026 GMT
Subject: CN=1cb5aa227476e90d7dc7985411b8b1960a07d3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:a9:54:b8:d1:50:79:f9:95:51:b5:34:d0:08:
2a:8d:2a:c4:5f:b4:a0:61:7c:be:58:0c:06:85:02:
3a:61:c3:36:2c:50:25:98:39:21:e6:b3:9f:7d:8d:
fa:71:9e:96:5f:e9:cf:54:a6:49:6e:e9:82:08:82:
e7:77:2b:e7:ce:bd:db:5c:d8:bb:5a:96:6d:6e:33:
23:74:1f:a4:5d:e6:27:79:c0:1d:0d:66:2a:69:dd:
08:03:2b:51:47:d1:54:c0:eb:84:22:f0:d6:51:cf:
10:86:7e:94:f3:50:7c:0b:76:bc:37:78:d4:a1:8b:
e8:6d:a9:3d:8d:32:b3:a0:af:6a:0b:ea:c5:92:bd:
0d:f7:49:fe:fa:ea:07:b5:6b:e4:21:b4:8d:47:e3:
87:4d:ff:1e:e1:7e:45:19:d0:09:40:bd:04:d6:80:
b8:b1:86:45:0e:86:f2:01:14:05:89:03:d3:12:68:
2b:c7:d3:93:1c:cd:9d:73:8e:d2:eb:e7:41:4c:e9:
de:4b:c2:9d:c1:c2:d9:30:de:b5:cc:46:e3:1a:39:
fe:ee:2f:5f:22:59:5d:1d:f9:70:5c:c3:e2:0a:32:
de:b9:b7:af:81:25:b7:2c:1e:1c:68:3b:ce:58:53:
f4:d2:21:3a:86:5a:e5:3f:1c:11:4c:9a:07:53:7d:
66:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B5:AA:22:74:76:E9:0D:7D:C7:98:54:11:B8:B1:96:0A:07:D3:D3
X509v3 Authority Key Identifier:
keyid:5E:ED:D6:F5:3B:CB:49:E4:B9:B0:70:6D:FD:07:42:59:C9:B8:A4:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/73d5ad-a3f2-46cb-8582-215dbc89c2b9/1/Xu3W9TvLSeS5sHBt_QdCWcm4pAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:19:a6:ae:86:46:f8:b4:fd:bc:99:59:69:28:3f:ab:ee:5f:
ce:6b:98:80:93:1e:0b:c2:c4:c3:2c:28:af:1c:ea:1b:e7:ba:
b8:40:7a:df:a4:c2:77:5d:c5:b1:5e:c8:ec:38:76:e2:9b:2b:
f1:31:bd:ef:d2:8e:b3:6b:93:60:91:a1:4a:0b:d2:52:e3:4a:
78:d6:00:5c:e6:fd:ae:b5:34:a9:f4:c6:ad:5b:ee:08:ab:dd:
9f:0f:fe:ef:6f:aa:0b:54:f1:4c:fa:26:16:d4:89:e1:74:91:
e8:e4:3c:0c:64:0a:8b:fe:03:58:a8:e2:c6:0c:d2:62:bb:fb:
3a:eb:96:f9:ed:33:08:35:51:ad:db:be:8f:f8:db:c2:f1:94:
1f:59:00:2c:8c:ec:6f:83:12:ab:29:30:39:e7:81:63:d4:39:
bb:79:5b:23:47:e1:cd:ac:21:41:c1:cb:20:69:ab:bd:77:e8:
93:b7:03:6c:2e:20:e7:98:a2:c4:b4:4f:49:a3:58:a5:c4:1d:
85:23:08:bd:85:94:56:e2:e9:d2:77:f3:aa:af:7b:fe:b1:64:
98:6b:01:d0:1d:b6:05:e0:a0:91:04:88:58:a6:ff:f0:51:26:
67:5b:bf:bd:4e:68:1e:9b:a2:09:8f:c2:46:ca:0d:25:af:fe:
de:81:82:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:03 2026 by rpki-client