Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
File: XRKbBGDPnuBQDuiAos-hpSTk3wA.mft (raw, json)
Hash identifier: 6p7RTxqE86vysvUkj42ef/IfY6yQzqQDUyuvtTyf+xs=
Subject key identifier: D3:4D:DC:CF:67:9C:16:89:B4:94:D1:6E:88:49:1C:CE:82:AA:13:33
Authority key identifier: 5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
Certificate issuer: /CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Certificate serial: 019E31172C29DA9E0AB34536251D7BC0A9E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
Manifest number: 1918
Signing time: Sat 16 May 2026 14:01:02 +0000
Manifest this update: Sat 16 May 2026 14:01:02 +0000
Manifest next update: Sun 17 May 2026 14:01:02 +0000
Files and hashes: 1: L40pPH6TicBG2s3pYm_kCH0QuH8.roa (hash: T9wzscjITMGr1trkfg1j7FXPyni8Fc+OiviUYZ5c/0E=)
2: XRKbBGDPnuBQDuiAos-hpSTk3wA.crl (hash: 6DLV9IHdvESgzPtI/A2f1+J/zA1/MtfAkBSY5udsoHQ=)
3: gNRTXqvX6_SOefWF3gs0Zjt3u6g.roa (hash: toLN8jyYGEpflA8o2E1g113inHytd59XB0YwnsonQoc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:17:2c:29:da:9e:0a:b3:45:36:25:1d:7b:c0:a9:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d129b0460cf9ee0500ee880a2cfa1a524e4df00
Validity
Not Before: May 16 14:01:02 2026 GMT
Not After : May 17 14:01:02 2026 GMT
Subject: CN=d34ddccf679c1689b494d16e88491cce82aa1333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:1c:92:9b:68:d6:c5:95:03:ae:6e:00:a2:ff:
0d:42:df:1e:84:f8:30:5e:82:97:6e:23:4c:4d:9a:
80:47:95:41:08:2b:0f:56:d8:d9:76:25:97:e1:a0:
27:7b:62:7c:95:1a:5e:5a:75:4c:94:ca:d4:4a:f1:
61:e0:23:52:13:84:ea:3a:8c:c5:ca:c4:68:fb:a1:
a8:9e:eb:70:37:1c:a9:da:79:62:18:57:95:ff:08:
38:a1:ec:57:92:c5:fb:c0:33:16:68:82:c4:e0:a5:
ba:42:64:b3:b8:45:fe:f6:05:55:d3:f8:92:cd:a0:
6e:78:e6:1d:fe:00:8a:af:be:3c:24:a1:98:f1:78:
e1:bc:b3:ce:1e:9d:fd:ea:ec:2d:7b:dc:38:e5:b3:
75:f6:8e:65:2b:2b:36:ff:4c:1b:37:36:60:52:78:
5e:e2:ec:f9:03:47:e4:3f:dc:6a:ff:10:76:a4:ef:
84:b1:ab:18:17:4a:72:10:7c:7d:35:48:bd:30:20:
dc:1a:5d:34:ab:b3:ea:21:5f:ee:69:51:88:46:31:
f5:7f:f2:76:d5:24:7f:50:9b:ce:97:c0:ff:36:1c:
5b:69:e2:0c:e9:c7:91:dd:a8:6d:07:04:a7:f5:bb:
51:99:72:81:6d:03:5b:d9:ed:69:6a:4f:51:ca:0d:
61:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4D:DC:CF:67:9C:16:89:B4:94:D1:6E:88:49:1C:CE:82:AA:13:33
X509v3 Authority Key Identifier:
keyid:5D:12:9B:04:60:CF:9E:E0:50:0E:E8:80:A2:CF:A1:A5:24:E4:DF:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XRKbBGDPnuBQDuiAos-hpSTk3wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8557e0-368d-4d8e-9741-a877dd51bc49/1/XRKbBGDPnuBQDuiAos-hpSTk3wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9d:0b:c7:7c:48:67:52:fc:b6:99:ac:05:bd:3c:f2:1b:de:
72:ba:c4:6a:56:92:c5:e7:09:5d:d3:41:d8:f9:9e:0f:f3:32:
9f:19:fd:9e:b1:c4:db:20:c9:52:44:d3:65:88:e2:d2:74:75:
82:23:f0:48:8f:26:ff:c0:0f:a3:76:4c:45:fe:a1:13:d8:27:
36:c1:a1:bb:c2:d3:fb:56:cc:50:0a:ea:37:74:52:ef:8c:4a:
cf:aa:86:6b:53:a9:a0:94:46:73:02:02:5b:98:5f:aa:7d:81:
33:57:25:9c:0b:ac:1a:2c:ec:ea:1b:48:43:c2:ff:6d:71:ea:
cf:0b:e4:26:7c:83:01:2f:3d:ba:c4:fc:f4:b9:cd:dc:48:e6:
ff:2f:0b:f7:45:ea:dc:70:65:6c:c8:9b:de:cf:da:b3:09:01:
ef:6b:d3:64:21:6f:21:63:6b:71:b7:41:27:e7:89:1b:f1:4b:
0a:fa:2f:b9:b3:88:e6:0a:9e:f9:26:d3:bb:6f:1a:08:b6:ea:
87:b7:ec:da:22:cb:0d:33:70:44:73:c2:6d:a7:05:8f:3e:10:
3e:ac:71:1a:4f:1a:dd:86:e8:01:52:5f:48:5f:66:55:7b:47:
d2:5a:07:fe:d6:90:8f:ee:7f:8e:be:67:c0:33:5d:d0:83:92:
52:4f:d9:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:28:37 2026 by rpki-client