Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
File: xPiLXG5RFuUM8rW99D6HIPHYxg8.mft (raw, json)
Hash identifier: g2cFzyxaS55Kn6cdmFXeEmcPD+jQRxWiMALreaLIpe0=
Subject key identifier: EF:33:62:2A:DF:51:AE:E8:7C:45:5D:D0:66:59:35:AC:91:42:A3:0A
Authority key identifier: C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
Certificate issuer: /CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Certificate serial: 019E2995270CB39789467DACD0DB6060DEE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
Manifest number: 13C0
Signing time: Fri 15 May 2026 03:01:41 +0000
Manifest this update: Fri 15 May 2026 03:01:41 +0000
Manifest next update: Sat 16 May 2026 03:01:41 +0000
Files and hashes: 1: 02JNfVWYOVA2OBy17TDgR9y7do8.roa (hash: x5I0ROnfJh237cohKlOyZemzpgBQnX/4IqZy8ejhw3c=)
2: 5VBhehblaiOfuUShpivHuAhNqvU.roa (hash: SLWl0V7yJEtG44gZ1JVp2uNJOky4M2j+U4CHDGRdNIM=)
3: xPiLXG5RFuUM8rW99D6HIPHYxg8.crl (hash: gzbBLcRq426jH7VR83WEbCtFNlY0bubfQRmGXDY7SgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:95:27:0c:b3:97:89:46:7d:ac:d0:db:60:60:de:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4f88b5c6e5116e50cf2b5bdf43e8720f1d8c60f
Validity
Not Before: May 15 03:01:41 2026 GMT
Not After : May 16 03:01:41 2026 GMT
Subject: CN=ef33622adf51aee87c455dd0665935ac9142a30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a7:e8:5c:2b:03:e6:c7:01:89:7f:53:f2:9c:
65:7b:86:bc:25:19:b4:bc:63:92:b4:ff:1a:ee:b5:
88:f7:f5:c3:71:c0:ea:dc:e2:6c:ba:3f:93:e5:09:
bb:a6:b2:a2:e8:f8:0f:f8:c9:d9:18:5e:81:e9:bb:
a6:d9:45:a5:7c:dd:fe:77:07:66:ef:01:28:40:9f:
9c:33:22:3c:63:15:75:83:c0:60:e5:1c:e2:42:d1:
e4:a3:67:19:ca:c1:19:3b:77:42:e3:90:47:c1:97:
82:5b:fb:cd:a8:de:53:21:9e:a8:f9:08:af:92:59:
ee:34:f6:aa:a6:0a:63:92:20:1e:0e:55:40:be:66:
44:0f:1c:65:48:a6:aa:c8:b8:0a:4d:d7:ec:3a:5f:
fc:95:98:92:21:48:68:29:72:0f:94:ba:f8:ef:5b:
b5:db:31:c8:b7:a4:72:54:cb:ce:1b:bd:6a:19:21:
a7:13:ac:48:57:12:a5:9c:51:0d:aa:ba:9f:f1:41:
a7:b5:b0:9c:46:98:d9:03:64:f8:bf:97:2e:d3:7f:
2c:13:1d:77:1b:50:03:1b:44:2d:c6:e1:b0:eb:e5:
45:b9:f3:37:2a:ff:04:a4:12:85:c6:2a:31:d6:33:
50:ea:3e:d4:54:ac:d1:8a:a4:87:70:fc:d1:4d:5b:
71:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:33:62:2A:DF:51:AE:E8:7C:45:5D:D0:66:59:35:AC:91:42:A3:0A
X509v3 Authority Key Identifier:
keyid:C4:F8:8B:5C:6E:51:16:E5:0C:F2:B5:BD:F4:3E:87:20:F1:D8:C6:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xPiLXG5RFuUM8rW99D6HIPHYxg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/253078-0a7b-45bb-bc67-073639938437/1/xPiLXG5RFuUM8rW99D6HIPHYxg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:83:8c:fa:04:d1:63:00:ce:b2:11:41:8d:ff:32:39:db:4f:
5a:93:b5:77:3e:a8:a7:a3:16:14:0e:4d:8b:0f:ff:58:30:83:
3f:8d:96:4f:18:a7:b7:fc:e1:3d:62:ac:97:9a:c7:5e:45:5b:
bc:10:64:af:04:db:bd:10:29:1a:ca:fd:9f:9c:e3:95:5f:ea:
73:b3:a0:46:7f:26:af:5b:19:e5:f7:43:f8:19:8a:26:dd:46:
fe:3c:27:80:b1:ec:c4:3e:c0:0c:a9:73:94:7b:e1:28:ef:82:
91:6d:b0:38:65:15:f0:ec:db:e7:8d:46:1b:78:23:25:c9:ea:
c6:f7:bb:b7:aa:34:f0:cf:f2:17:0b:f1:25:10:b1:90:fc:3f:
0d:a0:b7:e8:f0:d7:89:a1:82:8f:d8:ab:3d:29:2b:ff:51:1f:
d1:1b:2b:44:d0:b6:c8:b0:7d:ec:59:36:22:12:a4:42:d5:84:
58:a6:15:bc:45:2e:26:07:5a:bd:aa:7a:63:a2:d6:91:86:9c:
b3:da:ad:91:48:f5:ae:e8:97:99:8d:f2:37:d7:74:66:e1:3b:
cb:4b:60:eb:01:96:92:13:a4:02:72:60:c6:6c:87:c8:67:c2:
5f:98:31:92:7b:9a:cd:92:3a:7e:2a:98:1c:63:81:93:f3:dc:
34:1c:1d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:51:41 2026 by rpki-client