
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
File: xLejOGcjuooupILHtoAxpUEirE8.mft (raw, json)
Hash identifier: GcEpi+cgGoueH7cuBhNARPj/qFH9YQlY82ny4nk3lx0=
Subject key identifier: EA:DF:5C:E2:F1:5F:B6:8D:A5:4E:05:20:CE:BD:FD:92:F9:D8:B7:D3
Authority key identifier: C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
Certificate issuer: /CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Certificate serial: 019E3261202C3A66DDF653A2747053005654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
Manifest number: 0777
Signing time: Sat 16 May 2026 20:01:26 +0000
Manifest this update: Sat 16 May 2026 20:01:26 +0000
Manifest next update: Sun 17 May 2026 20:01:26 +0000
Files and hashes: 1: Mk6KT-G0Nd_n-6Ue0npJ0Pqa4CI.roa (hash: 2cQhzB6rvIgJcWKL8JGJ8AUuDd5CAqSH0lZjme07urY=)
2: xLejOGcjuooupILHtoAxpUEirE8.crl (hash: 2STXYqGCM+9qj9mGJqOohlopZjIxfGwX0svKEzywTuI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:61:20:2c:3a:66:dd:f6:53:a2:74:70:53:00:56:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4b7a3386723ba8a2ea482c7b68031a54122ac4f
Validity
Not Before: May 16 20:01:26 2026 GMT
Not After : May 17 20:01:26 2026 GMT
Subject: CN=eadf5ce2f15fb68da54e0520cebdfd92f9d8b7d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:7b:27:a7:7a:92:6b:88:e7:c2:38:a2:9c:
8c:91:85:7d:52:80:95:23:72:0e:a3:9b:0d:bd:1a:
8b:89:11:9a:46:36:85:34:86:1b:68:6e:ca:ac:fc:
52:b2:4e:a5:b8:df:0a:5d:e3:0e:3c:f2:26:84:68:
66:85:26:22:09:4b:7a:f6:e0:89:51:c7:ac:87:03:
0d:1a:bf:95:1b:e6:6b:2d:d7:17:7e:88:fd:9a:f9:
97:bc:0b:da:33:85:3a:78:a0:b0:10:d8:8b:3c:d5:
84:ff:0b:ea:cd:9f:23:14:64:58:d6:47:1f:d6:03:
77:ad:3a:e8:7a:47:61:4f:ac:0f:ee:09:19:7c:de:
1d:17:49:75:fd:fa:6f:91:d4:bb:f9:59:38:cf:6a:
b8:59:33:5f:f4:03:71:34:9e:9c:fd:1e:05:4d:cc:
aa:1f:d4:73:8f:57:92:22:bd:8a:21:b3:df:a4:dc:
e3:66:0a:b0:dc:29:92:cf:0a:af:ca:a3:6e:fe:d0:
13:be:a6:dc:af:4a:70:71:c0:0d:18:c5:57:6c:82:
90:09:7b:8c:2d:fd:6d:b2:9e:84:a1:c6:84:ec:7a:
b1:6a:ed:b4:9c:9c:f1:58:76:0a:bd:d0:ba:be:27:
22:f5:25:d5:41:a5:a7:6d:a2:10:c3:65:c1:c9:32:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:DF:5C:E2:F1:5F:B6:8D:A5:4E:05:20:CE:BD:FD:92:F9:D8:B7:D3
X509v3 Authority Key Identifier:
keyid:C4:B7:A3:38:67:23:BA:8A:2E:A4:82:C7:B6:80:31:A5:41:22:AC:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xLejOGcjuooupILHtoAxpUEirE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/aa7bf6-6525-4394-80ba-bd40dfae7886/1/xLejOGcjuooupILHtoAxpUEirE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:52:60:47:7c:eb:ee:32:4a:d6:56:42:05:6e:7f:92:c3:d1:
63:ac:f6:3e:ab:a6:6a:4e:05:2f:14:3a:f0:4f:b1:a9:3d:1c:
96:5c:22:0b:49:26:90:2a:f0:dd:ca:30:4f:54:c2:19:5e:0b:
bc:89:73:22:59:60:59:66:80:d6:db:4d:fc:4a:41:93:a4:14:
cf:e1:15:f7:cb:7b:1c:a6:9d:42:6a:23:f6:e1:eb:4c:d0:4d:
5b:7d:3f:b1:75:1d:1e:bb:23:ae:95:f2:93:35:c2:d9:ce:72:
5b:ac:39:83:d3:a3:29:37:24:be:10:a8:50:c0:23:63:2f:08:
c5:88:a5:16:27:8a:62:79:f0:84:56:e1:0b:2a:2a:0a:9d:36:
cd:11:cf:2b:b4:d7:c3:d0:27:bb:05:22:1f:32:6f:be:f6:90:
68:2c:c8:6b:da:86:0b:c9:05:78:9f:8c:0d:0f:24:05:85:b8:
9b:eb:c9:69:0e:66:8c:40:25:f7:7e:08:30:a6:32:bb:fd:ae:
8d:20:39:2b:c8:d4:da:ef:63:f0:6b:53:99:85:cd:a3:70:32:
de:e0:c6:bd:55:53:3d:8f:b4:b1:57:66:f0:13:51:83:85:12:
a8:54:62:f1:19:e0:23:60:4b:a0:e1:28:35:40:0e:77:09:b7:
e7:93:10:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:30:30 2026 by rpki-client