Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
File: xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft (raw, json)
Hash identifier: MkDjTdgVrfe0rhvuCrnO7gtlX1bWBGmIKuGJXgtJ6Ks=
Subject key identifier: AD:22:48:43:34:11:B9:66:39:4B:97:BB:7C:E9:06:40:C4:23:15:76
Authority key identifier: C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
Certificate issuer: /CN=c65613d5999f3632985ed89a02efaabd1890ba09
Certificate serial: 019DFFBCE0C640A8060DC45EE6B91AB7304F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
Manifest number: 0514
Signing time: Thu 07 May 2026 00:01:01 +0000
Manifest this update: Thu 07 May 2026 00:01:01 +0000
Manifest next update: Fri 08 May 2026 00:01:01 +0000
Files and hashes: 1: MWnPy89PH_1TfAr-2f04R8v5sE4.roa (hash: lLx6SLjmp2bg19wDs+FyMt7/MMn+v1mjyT18ZnGU1Mk=)
2: _InFEIoYoBff0XPi6Qu-BDtEOeA.roa (hash: 1FQgWq9bmnmW/hqAWc6TQBl0/lSLnU+yUMWdU6LEwbc=)
3: m2sCh5HkLxEE1VASi8B7f5_IGDo.asa (hash: 4Epl+7kUup5rqY+UK4i3mas67nTsku/KVZ8PPtRd/NQ=)
4: xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl (hash: 2/wbFoahufkI4x0c6ecEpxqgonXJlABR2ecbpNYfSyA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 May 2026 21:44:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ff:bc:e0:c6:40:a8:06:0d:c4:5e:e6:b9:1a:b7:30:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65613d5999f3632985ed89a02efaabd1890ba09
Validity
Not Before: May 7 00:01:01 2026 GMT
Not After : May 8 00:01:01 2026 GMT
Subject: CN=ad2248433411b966394b97bb7ce90640c4231576
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5a:8b:aa:a6:b8:91:09:57:0a:27:c8:eb:09:
81:88:a8:61:18:14:49:13:18:34:1b:4f:ee:54:ec:
29:66:bd:33:c3:77:26:6d:ca:bf:74:08:a3:67:35:
00:7f:f7:98:e0:42:a2:fc:08:ec:59:59:51:14:cc:
7d:85:e1:eb:5e:99:4d:86:58:08:6e:a1:d5:4c:df:
fd:36:a4:9e:f5:af:6c:44:70:67:4a:f5:dd:68:2a:
3c:10:44:13:45:10:71:ff:c2:b4:b3:f0:97:1f:b6:
bf:ec:21:6d:ae:72:cd:bb:c0:d7:86:2c:7a:8d:8a:
6e:79:b8:24:61:ef:82:49:89:6d:b4:6e:82:ca:a3:
7f:36:b6:bb:a9:e7:94:27:af:e2:e1:5c:ad:a5:f0:
35:19:95:38:20:dd:8f:df:d2:83:fc:c5:26:15:01:
27:07:39:df:15:49:10:b8:e5:56:d6:2d:3e:6a:48:
60:f2:09:13:7e:9e:5f:ce:7e:31:96:e4:c9:ba:63:
18:fd:a3:5e:35:69:37:38:8d:e6:61:8c:a8:25:be:
e4:13:fa:42:31:2d:40:dd:94:95:54:52:ee:be:53:
51:e4:70:3a:12:34:64:33:8e:b9:62:fb:92:26:b2:
f5:d7:20:08:9c:2a:c2:d0:a7:73:df:e0:10:9a:5e:
c4:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:22:48:43:34:11:B9:66:39:4B:97:BB:7C:E9:06:40:C4:23:15:76
X509v3 Authority Key Identifier:
keyid:C6:56:13:D5:99:9F:36:32:98:5E:D8:9A:02:EF:AA:BD:18:90:BA:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlYT1ZmfNjKYXtiaAu-qvRiQugk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/3d8aac-d398-43ab-9c3e-650992f2a174/1/xlYT1ZmfNjKYXtiaAu-qvRiQugk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:77:e1:be:c6:37:c3:6b:4e:35:44:bb:f9:90:11:26:44:86:
de:eb:c9:a1:e0:20:02:73:0f:f4:61:db:5e:e0:4c:e4:41:b3:
2c:84:b5:d9:11:f8:14:b0:aa:84:32:96:64:2c:10:21:95:ed:
4f:fa:00:d7:05:e4:f1:c1:69:11:0b:a9:fb:5f:11:fb:42:4d:
18:0a:ca:68:53:08:69:ea:99:c3:3e:18:28:26:8c:66:f7:e8:
29:52:8a:d5:16:55:cf:71:f8:3a:87:1a:5c:f1:99:fc:59:c8:
86:7e:7e:fe:88:9a:ad:a1:54:1e:b8:e2:c2:de:3c:40:14:bc:
6d:ce:10:fd:a8:75:f5:4f:46:95:e5:47:0b:08:cf:4e:f2:c4:
01:86:65:62:28:08:c5:7a:89:fe:7f:a9:02:31:df:be:48:97:
67:dc:8f:b3:95:36:0b:11:f8:b0:9c:0d:0f:67:62:9f:ef:3f:
ee:bd:46:7e:05:3e:4a:b1:ff:95:4c:2f:37:69:b7:d2:b4:ea:
14:ea:76:2a:8f:3c:0c:f5:1d:50:cf:79:d0:25:77:e4:44:c0:
69:74:b5:4d:05:42:9a:a1:91:8b:ca:77:0e:0f:5d:b9:41:59:
41:14:a4:a6:8d:06:f7:69:96:40:63:b4:9d:bd:34:84:fa:0a:
d1:13:a7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:57:17 2026 by rpki-client