
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
File: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft (raw, json)
Hash identifier: sZU7uYiaYS+akxoOjLl2NaMjq7Cjr2wJqwcHIeII9yc=
Subject key identifier: 40:5D:D0:DA:F7:29:89:1F:6F:5C:53:16:15:EA:25:BE:27:E2:62:ED
Authority key identifier: C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
Certificate issuer: /CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Certificate serial: 019E28B92D7FFFFC9F04173F417B86766216
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
Manifest number: 08FD
Signing time: Thu 14 May 2026 23:01:24 +0000
Manifest this update: Thu 14 May 2026 23:01:24 +0000
Manifest next update: Fri 15 May 2026 23:01:24 +0000
Files and hashes: 1: 2jQx973K_WHIEDeBwoceaInwrVk.asa (hash: Xu/Sv3zfgccGu+NaMsUgY/a+THDNzPx1jfH33fWcIQ0=)
2: 4N_n1cCDT7wj_iB4XrMTAQ9PivM.roa (hash: MxvavFzCXv3bNh/z3UJzQ6ZzRkLADzDg48/vugWD+cE=)
3: xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl (hash: RCVdeg/CguZ1L66rSMfnL/MMWauTSE5IIwCRf8dnJ5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b9:2d:7f:ff:fc:9f:04:17:3f:41:7b:86:76:62:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5e14070210627bfca4654b42de797acd6d2c4f4
Validity
Not Before: May 14 23:01:24 2026 GMT
Not After : May 15 23:01:24 2026 GMT
Subject: CN=405dd0daf729891f6f5c531615ea25be27e262ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:17:0b:ba:dd:c7:36:d8:2e:6d:ed:92:d1:8c:
80:9c:da:4b:d4:ba:14:f2:60:52:05:95:7d:96:02:
e7:63:47:01:f0:14:36:a0:42:9d:ae:53:dc:d6:67:
fc:5b:eb:e6:97:83:5b:34:61:e7:22:73:20:21:c9:
e3:74:b6:b6:c1:53:19:7d:78:80:5f:3f:f2:67:22:
2f:14:d0:af:6f:e1:e1:87:89:0e:fc:11:42:69:5f:
2a:9c:80:50:0b:67:14:29:60:9c:06:e5:c1:a4:52:
41:40:25:55:71:ac:9c:96:f1:96:91:f7:e9:6f:dd:
4a:75:30:98:a6:0c:1f:07:2d:7a:72:bb:a5:d0:d9:
94:cd:93:b8:f3:a2:31:84:da:05:3b:ab:48:3e:f3:
b7:cd:cd:71:ab:8c:e3:88:d2:1c:8b:3c:10:f6:ef:
1e:5b:b2:62:af:2a:fc:ce:7f:84:45:08:6e:32:d3:
98:44:e3:0a:d4:1a:28:5a:7b:06:14:e0:7d:21:2a:
0c:1c:47:a5:55:70:e0:28:ab:26:49:eb:6a:a5:9c:
a9:a6:4b:20:d3:8e:a9:df:e2:97:33:74:68:a8:8d:
3d:3a:90:13:96:f1:db:0b:b3:f9:10:e7:fa:0d:ba:
12:20:0b:78:42:88:25:8a:57:d0:db:78:d9:e9:de:
21:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5D:D0:DA:F7:29:89:1F:6F:5C:53:16:15:EA:25:BE:27:E2:62:ED
X509v3 Authority Key Identifier:
keyid:C5:E1:40:70:21:06:27:BF:CA:46:54:B4:2D:E7:97:AC:D6:D2:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4bd500-5d4f-4889-9142-3c4839c8e851/1/xeFAcCEGJ7_KRlS0LeeXrNbSxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cb:59:62:1e:8c:32:fd:09:69:1b:73:54:f4:57:2c:7c:51:
e1:d8:cc:29:70:6a:6d:7c:40:9c:92:e9:40:65:b6:21:83:15:
b7:03:b5:52:aa:0c:3f:0d:36:de:92:cb:6f:4c:aa:01:f7:29:
ef:75:ea:83:e7:75:8c:89:0e:c6:61:0c:d7:60:41:92:45:f4:
7d:97:c0:94:d9:a1:9c:cf:10:c8:5d:f8:42:89:dd:88:2e:79:
87:01:83:4c:02:4b:5a:6d:a3:0d:fe:3b:88:cb:e3:27:91:3a:
13:fd:fd:00:aa:d5:51:29:24:4b:40:82:0e:08:50:99:e2:94:
22:38:7e:c1:78:e1:41:86:50:d8:c7:db:51:92:8b:90:e2:b2:
7d:e7:aa:71:7c:46:22:e9:a8:c5:51:0c:bf:dc:90:13:e8:c3:
b0:c2:3e:7c:99:84:d5:53:72:28:18:c8:c8:b5:dc:b0:a8:db:
fa:95:9b:21:ee:d7:dd:c5:04:1d:9b:08:dd:38:88:b4:ba:ca:
bc:2e:45:d9:50:dd:fe:cb:17:bc:86:e4:c6:dd:53:3a:ac:cb:
f9:9c:c2:20:92:6f:e5:d8:5f:d4:d6:4e:8c:77:9c:91:a2:5a:
0c:80:3e:44:f4:dc:74:ca:7c:2a:6b:d7:40:ca:d5:fa:87:8b:
cf:04:a3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:47 2026 by rpki-client