Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
File: xhaXFtCuZAaHAxQKo3MON4j91MY.mft (raw, json)
Hash identifier: 1wHwCqoJse3CFW7VlrzXWsq3nDdlXnxfX4zm9yMTF7E=
Subject key identifier: F5:6A:03:A9:B2:1B:D8:AA:45:CF:B9:8D:43:73:7A:7A:13:5E:B8:0E
Authority key identifier: C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
Certificate issuer: /CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Certificate serial: 019E7477D7EA0A5AF66DD03712E63FEFE6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
Manifest number: 16A0
Signing time: Fri 29 May 2026 16:01:11 +0000
Manifest this update: Fri 29 May 2026 16:01:11 +0000
Manifest next update: Sat 30 May 2026 16:01:11 +0000
Files and hashes: 1: FWP58ajjb0tkpM-YIjMEubI9eHI.roa (hash: 8d5KqUUs2iCVjFLb2FSp+rBEK2zv9joKO9sjvkw4TqU=)
2: xhaXFtCuZAaHAxQKo3MON4j91MY.crl (hash: EjHa9v0HrUFKbnI8BjFDEKT70O9xt7UtpiZdX4tw1ao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 30 May 2026 16:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:74:77:d7:ea:0a:5a:f6:6d:d0:37:12:e6:3f:ef:e6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6169716d0ae64068703140aa3730e3788fdd4c6
Validity
Not Before: May 29 16:01:11 2026 GMT
Not After : May 30 16:01:11 2026 GMT
Subject: CN=f56a03a9b21bd8aa45cfb98d43737a7a135eb80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:eb:21:20:0d:70:f3:5d:77:cf:95:e4:26:96:
3b:34:bd:e6:4e:b8:2a:8b:11:2b:31:fc:e7:bc:91:
a0:a6:e1:bc:72:99:6a:19:56:fd:63:3e:65:a8:37:
51:55:7a:15:98:e3:76:11:bd:07:6f:e2:68:93:4c:
a3:cd:e1:f3:59:60:b2:01:6a:52:77:3c:39:60:96:
38:48:18:45:d3:a4:97:f2:b2:ec:cb:8b:ad:18:31:
9b:8d:41:88:42:3c:c7:67:2c:2d:16:14:85:4c:29:
cd:44:47:08:c1:e6:44:70:0c:a6:35:19:2b:c4:22:
94:21:e4:f5:0e:6c:67:08:65:41:b8:58:e7:b9:85:
9a:d2:4e:46:e4:a1:71:b9:4d:05:92:e7:66:8f:ad:
7a:c6:a8:25:c9:bd:73:46:51:db:81:fb:4d:5e:d1:
48:95:48:65:9c:f9:6a:db:55:eb:18:1a:04:18:ec:
fc:16:43:92:b2:33:6f:67:8e:81:c3:84:03:5c:63:
53:cd:1f:7c:8f:98:ac:3a:29:17:a5:ae:09:91:64:
e0:5c:e2:38:11:c9:a9:7a:1c:99:3b:4a:3c:e4:cb:
30:fd:a9:80:00:c8:4f:d7:8a:96:c4:7d:98:20:a9:
6a:b0:30:81:d5:9d:47:0f:89:44:68:5a:d5:29:77:
e6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:6A:03:A9:B2:1B:D8:AA:45:CF:B9:8D:43:73:7A:7A:13:5E:B8:0E
X509v3 Authority Key Identifier:
keyid:C6:16:97:16:D0:AE:64:06:87:03:14:0A:A3:73:0E:37:88:FD:D4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhaXFtCuZAaHAxQKo3MON4j91MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/400685-f48e-4ab9-8e3f-042446b70fb1/1/xhaXFtCuZAaHAxQKo3MON4j91MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:21:ce:60:9d:39:88:ac:69:b1:d1:5a:b3:aa:01:a0:cb:42:
69:0f:25:80:d5:a7:1d:4d:30:76:48:d4:67:94:8b:ba:dd:e5:
22:b2:bf:14:37:74:fb:2d:9d:3b:93:5e:1e:e1:d3:8a:a2:56:
9a:0c:94:3a:fa:78:36:a8:14:20:1f:df:54:91:f3:e4:b7:41:
e6:e9:a8:7f:8b:ee:1e:7d:f6:36:e8:00:0d:8c:82:de:55:26:
e7:9b:fe:77:0b:cf:c2:33:d4:fe:2f:11:2a:e4:cf:d5:64:a3:
7e:77:b4:64:10:37:e0:ed:56:79:5b:d7:34:f8:a0:ac:52:76:
c1:8f:a6:d7:f9:48:ac:c0:9e:d9:22:91:ab:ec:48:c5:a6:5b:
7f:6a:95:64:4a:82:74:fa:07:2c:6f:e5:4b:09:e3:8d:e5:b3:
b3:f5:c6:31:0d:1a:20:cb:0f:ae:a6:59:73:df:20:3f:9d:3a:
46:78:c5:3b:62:05:82:b5:ef:82:4d:4e:df:9d:02:2e:b5:51:
43:60:e9:04:ed:35:55:fa:21:26:0c:7c:7a:9e:9e:02:51:6e:
f6:d4:59:7f:93:a8:29:51:7b:9d:f4:de:bb:52:44:0f:46:bc:
0f:b2:e6:23:75:1b:15:d7:a0:a6:62:d2:f6:75:a2:aa:15:25:
93:94:ed:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 30 00:03:35 2026 by rpki-client