Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
File: xalo7bcsFfX5Vn_TQme4dIXvNtE.mft (raw, json)
Hash identifier: x+AuQ6b6D56rhqCLySW9CaAzLWrX6FXIIKs4Fbr9A6A=
Subject key identifier: 80:82:9A:B7:AD:4C:51:9E:AA:8E:33:B0:56:9E:03:B4:04:63:BF:2C
Authority key identifier: C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
Certificate issuer: /CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Certificate serial: 019E32CF0AA4FCA1366E16FAF3FBD12DB794
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
Manifest number: 1573
Signing time: Sat 16 May 2026 22:01:29 +0000
Manifest this update: Sat 16 May 2026 22:01:29 +0000
Manifest next update: Sun 17 May 2026 22:01:29 +0000
Files and hashes: 1: 9EktXdyZJh18u-aW7yKS4HoPavo.roa (hash: rjDqPIBakWvnRieCU3x6qlMyDbDmiCMZb+0A8kLnWdc=)
2: cPX1K7h-wlaCr7zmE40f44WojxI.roa (hash: Q/KPZCaK+pTYPECUWe3LbMeOLvb3gqHt7TrGMiKZCx4=)
3: xalo7bcsFfX5Vn_TQme4dIXvNtE.crl (hash: 1NmYWz3H6oG8aHQYOcsvNKbiGqdxNf6UGSD+WRo5C6g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:cf:0a:a4:fc:a1:36:6e:16:fa:f3:fb:d1:2d:b7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a968edb72c15f5f9567fd34267b87485ef36d1
Validity
Not Before: May 16 22:01:29 2026 GMT
Not After : May 17 22:01:29 2026 GMT
Subject: CN=80829ab7ad4c519eaa8e33b0569e03b40463bf2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:6b:a5:e8:f7:b5:bb:26:0b:07:92:dc:6e:52:
60:1f:e6:e8:8e:a2:1d:91:a6:26:30:d7:75:d1:ad:
d2:c8:f5:d2:d0:8d:57:c9:f0:16:0f:92:3d:c5:53:
40:ae:71:f2:e2:86:43:57:97:d5:a5:3d:58:a5:da:
b7:f4:aa:41:7a:ec:1d:ff:54:47:b3:c0:c5:7a:79:
5f:b3:73:27:5a:9e:4d:b4:a7:4c:e9:47:66:13:8d:
75:2f:5a:a8:7e:9a:a5:a6:0a:24:62:f7:b5:73:6b:
d1:dc:f2:12:01:03:e6:0e:2b:cb:89:10:0f:a3:5f:
55:58:8d:8d:1a:ba:77:5c:cc:7e:2e:34:69:03:62:
67:c4:35:de:dc:b2:7b:dd:a7:06:5c:af:4c:da:de:
61:af:bd:67:41:c7:c8:ed:d0:82:4d:5d:a2:64:cc:
ba:91:4a:4e:c9:38:0b:5c:75:f7:a8:fa:e2:a2:27:
07:f9:ce:b9:5a:90:eb:f3:9c:15:b4:a0:f2:eb:ca:
f9:ed:4a:b5:b5:eb:2d:ab:6b:f4:9a:15:ec:8a:3d:
89:65:cd:1c:6e:5e:ed:fb:63:12:d0:a4:69:94:3a:
b9:fe:de:a3:11:f3:90:8d:60:b8:6f:fc:34:f0:70:
f1:d8:f3:fa:da:b2:48:15:cb:f4:7f:54:99:f4:ae:
25:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:82:9A:B7:AD:4C:51:9E:AA:8E:33:B0:56:9E:03:B4:04:63:BF:2C
X509v3 Authority Key Identifier:
keyid:C5:A9:68:ED:B7:2C:15:F5:F9:56:7F:D3:42:67:B8:74:85:EF:36:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xalo7bcsFfX5Vn_TQme4dIXvNtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0de683-7316-40c2-b89c-b2c0dfa8a0e1/1/xalo7bcsFfX5Vn_TQme4dIXvNtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0a:d3:16:3e:a9:cb:82:e0:a1:ff:bb:96:fb:54:6e:32:39:
b1:62:0f:2d:b6:2d:d6:8b:ea:01:01:fe:5b:68:39:00:a7:0d:
78:a3:65:34:30:d1:4e:12:10:7c:76:68:e7:98:17:f9:3a:f1:
9f:8b:64:73:c8:77:c5:c5:14:58:ec:20:ac:43:3a:43:2e:a7:
ae:e0:a3:b8:74:cc:18:95:4c:2b:58:b4:7b:cb:af:ad:d2:39:
61:36:9a:08:6e:e7:70:fa:1e:a7:b7:24:e9:ca:9a:97:2f:e8:
73:85:9a:0b:fe:0c:01:13:00:df:06:81:c5:27:9e:10:ea:25:
55:7f:e1:90:7f:18:95:4e:53:d0:52:04:ef:71:a7:c8:36:ed:
13:98:1a:76:d3:bd:11:96:bf:4d:ee:f4:17:d3:57:b9:40:d7:
f0:7e:74:5a:49:80:08:84:18:91:6b:1d:01:87:ef:53:36:4f:
bb:76:11:5f:9e:83:e6:82:cc:d4:ff:b9:52:e6:19:ca:37:90:
10:fd:9b:01:aa:18:ca:ac:9e:5f:1b:15:8f:65:18:15:84:79:
20:3a:53:c6:6d:6c:f0:52:87:84:fa:99:65:85:f4:35:17:6d:
81:ae:e0:f5:9b:1c:b5:5c:48:e5:8c:3a:63:a0:c1:d9:b2:47:
b5:57:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 00:27:47 2026 by rpki-client