Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
File: xs_ZQjfv0gDdCxFuH2-be8plnKc.mft (raw, json)
Hash identifier: 2h/Fy0MdLYe2isrkwkfppEu/CsqrJiYyVZcpaWEIwwE=
Subject key identifier: 7C:62:74:40:7B:44:CF:73:FC:5A:84:FB:48:A6:FE:BA:8F:C4:E5:FB
Authority key identifier: C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
Certificate issuer: /CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Certificate serial: 019E2A70ADEA2E3B7213072694255584A811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
Manifest number: 190F
Signing time: Fri 15 May 2026 07:01:27 +0000
Manifest this update: Fri 15 May 2026 07:01:27 +0000
Manifest next update: Sat 16 May 2026 07:01:27 +0000
Files and hashes: 1: RB5D86Eez18oD-QABqEilaFp2nQ.roa (hash: cNT5vI1+Epdr8/RiwTV50sHhN6dBP41X/USYdNru1kM=)
2: xs_ZQjfv0gDdCxFuH2-be8plnKc.crl (hash: /3qh83lA+eE8aNFSZnyTbIkKrNmV4pJ4VNofboPIoMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:70:ad:ea:2e:3b:72:13:07:26:94:25:55:84:a8:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6cfd94237efd200dd0b116e1f6f9b7bca659ca7
Validity
Not Before: May 15 07:01:27 2026 GMT
Not After : May 16 07:01:27 2026 GMT
Subject: CN=7c6274407b44cf73fc5a84fb48a6feba8fc4e5fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:bc:08:2c:88:9a:5b:01:4d:d6:ad:1a:3e:
33:63:ca:3f:69:0f:85:f5:46:74:1b:62:d1:d0:5f:
88:54:1e:ff:ed:e4:18:63:33:7c:c5:0e:e0:6b:18:
7f:23:d6:a4:4e:14:80:59:e0:e1:dc:cf:4d:31:1d:
e2:c8:3e:6c:65:fc:84:25:0a:82:ff:59:b9:a9:7c:
cd:95:c2:0c:ac:9e:72:9c:cf:7e:36:f3:16:6d:39:
1f:12:f6:b5:f8:78:f2:33:c2:ae:3e:fe:f3:81:a7:
ac:3c:0a:fe:a0:a0:1e:3c:c5:98:8b:01:88:92:65:
c0:31:60:35:eb:fb:90:6d:29:2f:71:8c:d5:ef:18:
25:c2:ca:a2:5d:9f:17:2d:d9:44:59:a1:5e:a0:35:
9c:59:de:b8:59:79:2f:ac:7c:a1:1f:4c:36:b1:12:
c3:4e:04:66:ae:bc:80:37:d0:12:08:d5:63:c0:28:
70:0a:b9:1a:d8:43:69:84:1b:d1:57:3b:94:a0:0d:
d9:0c:90:e2:40:7a:0c:f3:1a:c3:36:28:c3:58:3f:
d5:88:74:d8:7b:0e:12:f0:59:8f:c9:7c:c3:10:1c:
48:39:12:af:2e:dd:bc:a1:90:0f:81:a6:1e:16:de:
ea:b6:73:b6:a2:2f:75:56:72:75:80:a6:f9:b2:59:
9a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:62:74:40:7B:44:CF:73:FC:5A:84:FB:48:A6:FE:BA:8F:C4:E5:FB
X509v3 Authority Key Identifier:
keyid:C6:CF:D9:42:37:EF:D2:00:DD:0B:11:6E:1F:6F:9B:7B:CA:65:9C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xs_ZQjfv0gDdCxFuH2-be8plnKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0b7271-0221-460e-831a-dc884f1be3e5/1/xs_ZQjfv0gDdCxFuH2-be8plnKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:65:d2:9c:17:4c:da:54:54:89:1e:3a:7a:fc:9e:f6:3c:06:
7f:a9:fd:4a:01:88:79:96:d0:93:b3:0c:1a:b7:5a:9b:06:19:
01:05:aa:fb:43:fe:78:ad:d0:a0:4f:29:70:2e:08:3d:12:80:
36:f6:4d:7c:4a:49:ce:41:51:36:19:e6:ca:06:ed:02:6d:f4:
36:37:2f:f1:8b:b2:84:21:83:77:e8:9e:01:e9:a8:ac:61:b5:
3c:c7:34:66:e8:26:bd:93:58:5e:89:b5:bf:95:13:81:26:5b:
8f:38:d2:6b:94:91:23:13:e9:e6:77:e0:3f:07:23:20:96:fc:
bf:a0:18:b0:14:eb:95:9c:5c:93:0f:d9:08:1a:db:98:ff:7d:
8a:14:3c:e1:f5:5f:27:e6:e0:96:dd:82:e0:d6:9f:0f:86:d4:
a7:f1:7c:90:71:87:9b:7f:c4:04:1d:29:e7:b4:af:2e:3f:be:
fd:0b:86:86:c3:ac:70:b3:0f:2a:73:e0:ff:2b:58:02:3b:71:
97:83:8a:82:5b:a1:48:22:49:2a:30:11:38:77:7c:88:cb:cf:
34:52:f8:43:a7:11:2c:84:fc:bf:64:39:bf:e5:5b:db:3b:32:
24:51:72:a4:7b:4b:49:bc:74:bb:7d:91:cd:3c:5c:d6:ff:f5:
ef:ab:55:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 09:07:05 2026 by rpki-client