Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
File: xUcTl89ew5mqDuxcMXOx8wQHI6k.mft (raw, json)
Hash identifier: crQv573SIrHPQDAAY88jd9XLS4KhjaPzZnFGVPt2Ahg=
Subject key identifier: 74:87:E3:CC:82:6F:4F:12:84:08:4A:B8:8E:5E:9C:CB:2F:5D:F6:42
Authority key identifier: C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
Certificate issuer: /CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Certificate serial: 019E40533DF5C9FA6354A9D68F6BC33D7B6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
Manifest number: 0AE5
Signing time: Tue 19 May 2026 13:00:57 +0000
Manifest this update: Tue 19 May 2026 13:00:57 +0000
Manifest next update: Wed 20 May 2026 13:00:57 +0000
Files and hashes: 1: Wd7kxNOQtW9wntahD6-s3hs_RN8.roa (hash: Yn5VDfyyadHVMUb0Gm6V0K9m9w04Ph9wP22TSsc2ons=)
2: xUcTl89ew5mqDuxcMXOx8wQHI6k.crl (hash: Dr+oXYQp8P+7SVxGOrwALm0oTItleDil0m07p9sIzjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 20 May 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:53:3d:f5:c9:fa:63:54:a9:d6:8f:6b:c3:3d:7b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5471397cf5ec399aa0eec5c3173b1f3040723a9
Validity
Not Before: May 19 13:00:57 2026 GMT
Not After : May 20 13:00:57 2026 GMT
Subject: CN=7487e3cc826f4f1284084ab88e5e9ccb2f5df642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:15:51:7e:a7:e5:8d:de:dd:0a:a9:a9:fa:99:
6c:76:dc:e4:ed:df:c0:36:35:aa:63:81:88:53:b9:
84:ab:fd:b6:e9:6e:53:15:73:b7:20:2b:0f:17:13:
f4:12:2b:e3:16:96:df:57:26:ed:3c:85:02:3c:31:
88:e5:b7:d2:14:f4:b5:67:68:11:3f:87:9d:34:29:
c8:4a:58:70:a7:9a:4e:33:97:ba:ea:cf:85:59:49:
ba:5c:2a:21:af:91:e9:07:cd:6f:e3:37:bd:7e:fb:
35:66:33:48:1f:73:b7:c6:5c:da:87:2e:63:ad:6f:
49:b9:ba:8c:83:cb:37:e4:ee:20:71:15:5f:c9:c1:
89:20:7d:45:f5:9a:de:02:c7:5e:f1:9c:dd:f3:a6:
e3:48:0f:2a:ac:87:5f:23:9d:64:45:a0:ee:cb:bc:
88:8b:bc:de:44:4f:d0:51:f6:43:e2:cf:63:5f:70:
6a:62:cf:94:ea:2e:8d:32:e9:2f:17:10:a6:22:41:
21:47:a7:ce:60:d7:6b:c4:b2:b2:86:5c:a0:88:23:
50:b7:12:63:a5:aa:f5:60:6c:3b:11:1d:95:83:08:
16:3c:4e:8b:00:95:77:4c:9f:a0:a1:24:a2:e6:41:
f8:b7:6d:02:cd:9c:5a:3f:24:e1:a4:3c:0b:c2:23:
5f:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:87:E3:CC:82:6F:4F:12:84:08:4A:B8:8E:5E:9C:CB:2F:5D:F6:42
X509v3 Authority Key Identifier:
keyid:C5:47:13:97:CF:5E:C3:99:AA:0E:EC:5C:31:73:B1:F3:04:07:23:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUcTl89ew5mqDuxcMXOx8wQHI6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/777a60-6de1-4dfb-b965-26222f0955ae/1/xUcTl89ew5mqDuxcMXOx8wQHI6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:e8:a6:15:cf:aa:dd:03:80:9a:e3:49:4c:4a:50:e8:4d:4f:
9e:b8:93:1b:29:4c:ce:de:8f:31:0f:d4:81:06:a9:9e:6c:e4:
6d:e0:f6:25:5e:f8:a3:e5:ea:f2:58:92:a3:22:c5:bf:3f:ed:
96:ce:3c:1e:1c:72:64:83:20:f7:cd:2e:2c:cd:f9:7a:36:d3:
cf:7a:d9:16:42:ac:53:15:93:a4:e4:0e:58:ea:3e:66:e9:7a:
ce:f0:b7:5b:36:e8:d6:5a:4e:65:8c:a3:0d:f0:b5:d3:54:8b:
7e:1e:e1:3f:c1:6f:39:0f:e3:7e:e3:96:9a:f4:f7:23:13:bf:
cd:9d:86:bc:3b:16:62:53:10:8f:56:3a:c2:9c:1d:0e:92:72:
ca:f7:d4:4d:29:44:9e:13:01:ef:71:be:5c:09:a7:bb:17:e2:
c0:eb:1f:bb:4c:ba:5b:a3:b9:84:03:d0:7f:ad:2f:39:90:1b:
93:d7:f9:53:53:1f:ea:9f:64:af:9a:f3:5d:df:75:a7:9d:b2:
2f:9c:81:5d:d7:6f:d5:05:20:80:87:eb:01:5a:9b:67:d7:a3:
64:ed:ce:85:60:ad:53:f7:04:c2:74:20:69:2c:5b:a3:23:ce:
12:a8:cc:c7:31:8c:7f:85:46:33:dc:69:7f:3a:b0:89:0d:8c:
b9:1c:a9:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 19 16:33:44 2026 by rpki-client