Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
File: xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft (raw, json)
Hash identifier: SkkEovzof/1K2hsDspH310rdSR5SGKfNpuJlQpxIPfY=
Subject key identifier: 97:35:25:A5:8F:28:EF:99:2A:56:FD:4B:67:6F:C0:D9:3D:08:8B:35
Authority key identifier: C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
Certificate issuer: /CN=c5ba51c07148843d400805b40335e72d324265f1
Certificate serial: 019E32982B416105938C678E75E5B41EADA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
Manifest number: 09B4
Signing time: Sat 16 May 2026 21:01:33 +0000
Manifest this update: Sat 16 May 2026 21:01:33 +0000
Manifest next update: Sun 17 May 2026 21:01:33 +0000
Files and hashes: 1: 4kyWrT9Xy1B7TLtNDP6HuPz-7hw.roa (hash: sWHWI8IzaliyTyKxy/NPSWlKi/bMUwx2CvIPkFk/56s=)
2: A_J1Iis85mInuYBjqNWnaY64Er4.roa (hash: KG2bwrYCBOkD3k9N+nA/ujMikD/ZloBG8hBsS2kc7cc=)
3: xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl (hash: ogUxseAqO2v12xkldE3PCWs/4axt5nLeLe2ZzNEBQRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:98:2b:41:61:05:93:8c:67:8e:75:e5:b4:1e:ad:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5ba51c07148843d400805b40335e72d324265f1
Validity
Not Before: May 16 21:01:33 2026 GMT
Not After : May 17 21:01:33 2026 GMT
Subject: CN=973525a58f28ef992a56fd4b676fc0d93d088b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:3f:34:c6:e2:f0:20:2c:84:44:43:50:66:b2:
93:83:7b:5b:3e:44:ec:0f:76:4a:c3:91:8d:28:87:
0b:58:8a:ca:18:10:f6:dd:12:ac:c6:1c:fb:2f:eb:
f8:fe:8c:53:18:de:f1:e0:97:11:a2:ba:1d:dc:26:
4e:ce:3c:26:97:8c:d4:9f:c4:67:ae:f7:bf:b2:bf:
36:f6:e5:1d:f9:d4:0f:b7:41:45:97:78:ce:13:dd:
bb:7d:0e:4c:91:1b:53:c1:09:01:ce:7f:ab:55:61:
42:4b:a7:72:78:9e:39:9f:50:54:2d:fb:b6:53:b0:
05:38:14:b9:75:04:05:3c:cb:15:62:c5:c1:1d:c8:
12:86:04:6a:50:b3:96:67:d1:02:06:2e:cc:16:2f:
e9:db:ab:f0:36:c6:e4:f3:4a:87:70:e5:de:ef:53:
08:ea:99:2d:4a:b8:89:c1:80:cd:80:b1:ce:ae:1e:
9f:9b:59:39:8c:1b:2e:70:76:5b:b1:e7:29:94:36:
b2:bf:e8:0e:64:27:3d:8f:69:df:07:94:13:be:15:
6d:e7:35:4e:4d:48:14:23:98:17:cd:fe:51:a9:0b:
55:ae:4f:61:7b:4b:b2:3a:74:1f:45:c7:af:7e:9d:
58:3c:24:ae:55:32:e0:ee:18:59:5f:f8:c2:f0:eb:
48:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:35:25:A5:8F:28:EF:99:2A:56:FD:4B:67:6F:C0:D9:3D:08:8B:35
X509v3 Authority Key Identifier:
keyid:C5:BA:51:C0:71:48:84:3D:40:08:05:B4:03:35:E7:2D:32:42:65:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbpRwHFIhD1ACAW0AzXnLTJCZfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/db63b5-1f96-4f00-865a-9ff5c1a3b0e0/1/xbpRwHFIhD1ACAW0AzXnLTJCZfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:12:74:ec:f1:f6:5b:53:20:ec:0e:9e:7e:04:82:3e:4e:09:
3a:2f:a4:3e:06:74:35:53:db:cb:d5:6d:50:2a:2c:31:36:52:
92:a6:f3:b2:a9:50:c0:e8:e9:6a:14:f0:2d:5c:cb:19:f9:0c:
fc:3d:d4:b5:0c:64:bf:a6:fc:b2:5b:b6:f7:8e:88:3c:8f:4a:
e6:3b:4d:c9:a0:43:f6:a4:5a:f5:3c:40:82:1e:16:03:39:b5:
cb:d4:d3:0e:dd:59:9d:3b:db:e7:58:8c:fe:5c:a1:9d:40:29:
db:aa:f1:b1:03:fc:3d:e5:7f:af:35:c0:9f:3a:d5:92:93:0c:
ee:db:2a:26:5e:1f:9b:c2:8a:aa:56:0b:aa:a8:51:ec:b4:1d:
16:4b:6b:72:29:6b:92:a6:1d:fa:b4:af:58:01:dc:1d:7a:ac:
c9:49:b4:90:e6:08:31:c5:d0:23:07:c1:49:1f:85:6e:60:11:
a1:3b:42:85:3b:70:b4:b3:77:60:33:7d:8d:b1:05:99:fe:fe:
e6:58:bf:91:61:9f:91:27:0c:fb:bc:89:56:67:b8:ef:be:cb:
36:22:10:45:85:d2:12:5a:16:6c:d4:50:3d:32:f2:3d:62:a9:
98:23:49:bd:a4:ff:6f:df:89:76:6d:4b:5a:51:1a:4c:ae:d8:
59:d8:95:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:40:18 2026 by rpki-client