Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
File: X_S8YTfFQKibkXPMLeMusEyebq4.mft (raw, json)
Hash identifier: s+pPClqTx57xBVGCO8njrWFphBLMG17xi+QO1Fr7L4I=
Subject key identifier: 13:EF:F7:BF:F4:11:A5:46:66:1A:D5:55:04:4A:E2:FD:14:43:9F:A2
Authority key identifier: 5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
Certificate issuer: /CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Certificate serial: 019E48E8E8680C9C7DB54BB41406B2288220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
Manifest number: 191C
Signing time: Thu 21 May 2026 05:01:23 +0000
Manifest this update: Thu 21 May 2026 05:01:23 +0000
Manifest next update: Fri 22 May 2026 05:01:23 +0000
Files and hashes: 1: 7t-QMh_AB92nrya7tNjufAiIaNU.roa (hash: LTbV2PdrQop6XvBMoLsBRV4fZwR2wk3jFKlBOeHWh48=)
2: X_S8YTfFQKibkXPMLeMusEyebq4.crl (hash: 5xchKVM2rVHM45ujIZ54yP/k9Q+LBWNb0M29jv29Trs=)
3: tyhGCGUUUxBeIkOEmn5CIWeCMz0.roa (hash: Mn4RuAcnVGGM8GO1ajZF2VYJS7eHnyi2wQ/w4qHvAaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 05:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:48:e8:e8:68:0c:9c:7d:b5:4b:b4:14:06:b2:28:82:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff4bc6137c540a89b9173cc2de32eb04c9e6eae
Validity
Not Before: May 21 05:01:23 2026 GMT
Not After : May 22 05:01:23 2026 GMT
Subject: CN=13eff7bff411a546661ad555044ae2fd14439fa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:e7:d5:b1:4e:8d:10:77:ce:77:eb:b2:06:
08:f9:c2:9c:10:f1:71:48:82:4e:c2:dc:35:67:15:
89:45:40:90:9d:5d:11:e6:bf:9a:bf:30:8f:23:69:
5a:40:85:97:da:14:5f:b3:ca:f4:d6:c0:33:2b:10:
dc:63:39:70:6c:03:90:c2:72:6b:71:3a:5b:5f:95:
9d:a4:2d:fe:7c:69:4b:3d:b8:90:28:28:6b:9c:c4:
e8:29:7d:b3:c0:1d:74:fe:d0:7d:61:53:8b:ed:24:
4f:e8:df:d7:f7:93:43:ac:80:d0:d5:cb:4c:26:90:
43:92:02:c5:68:56:63:c4:af:32:5f:e5:97:a2:97:
1c:7f:bd:ff:fc:d0:fd:ac:b9:b7:ab:ed:58:91:06:
62:3f:06:58:f8:4a:84:1e:ca:02:bf:e7:80:11:42:
b9:19:1c:ec:2a:47:9c:51:b0:5e:bf:1a:3e:7d:da:
5e:d6:23:d1:29:ee:66:73:bb:ea:18:e6:70:65:86:
25:ad:37:28:2b:5f:1e:b0:6c:b7:04:e6:bc:28:18:
b3:cb:8b:cf:9d:29:90:f5:25:4e:52:bf:24:4c:c5:
0d:21:17:01:12:a4:66:b6:4b:ec:f9:53:ce:dc:80:
43:19:21:55:3a:8d:2d:ba:4d:e2:88:8c:3c:66:0e:
d9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:EF:F7:BF:F4:11:A5:46:66:1A:D5:55:04:4A:E2:FD:14:43:9F:A2
X509v3 Authority Key Identifier:
keyid:5F:F4:BC:61:37:C5:40:A8:9B:91:73:CC:2D:E3:2E:B0:4C:9E:6E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_S8YTfFQKibkXPMLeMusEyebq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/c011ca-456b-4f51-bc8b-005cb4dca63f/1/X_S8YTfFQKibkXPMLeMusEyebq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:bb:7d:5a:26:16:f5:1f:d0:2b:6a:06:ac:81:9f:37:7a:3a:
8c:fb:70:ab:52:8c:c4:f9:9f:68:67:2e:fd:cc:3a:e4:56:3b:
eb:94:ea:ba:f2:ce:b7:fe:61:ac:8f:d9:6a:ac:b2:b0:3e:7e:
38:da:d8:65:f2:a6:04:4b:69:b6:92:19:be:7e:65:39:8a:71:
a3:89:31:aa:f7:12:16:76:d6:87:07:41:23:e0:78:56:bf:8b:
7a:d7:2a:7e:57:13:70:c6:bf:33:d8:d4:f0:cb:6e:ef:a1:18:
b3:3d:7f:6d:45:e6:28:92:77:7a:90:52:f5:96:14:33:42:26:
0a:de:58:e1:5d:40:de:07:7c:d5:cc:1c:3c:99:9b:ba:7d:e9:
5c:af:04:2e:70:b1:e6:36:ad:2b:06:a1:b3:8d:19:8d:35:b9:
6d:e4:25:9e:57:de:42:94:77:10:66:4b:bb:05:c1:a4:2c:c2:
72:50:0b:4d:35:35:7f:7b:74:7e:21:b0:19:b4:47:3f:cf:ff:
0e:83:55:ba:55:34:bd:f8:27:50:3c:1b:0d:b7:b3:d5:39:1c:
e7:e5:cb:75:a2:b2:86:32:08:9f:f0:f3:35:84:8e:f4:b4:81:
c0:6c:d1:76:c4:0d:c4:4a:89:38:1d:25:f1:d6:0c:35:b9:1c:
62:a8:6f:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:12:51 2026 by rpki-client