Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
File: XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft (raw, json)
Hash identifier: nkces+F5ZHQaex6vqybeDtArXSmvlqelo+MhBg8/wPQ=
Subject key identifier: 1A:C6:7E:87:7B:9E:C4:6B:E8:ED:8C:E5:F4:31:00:19:C6:31:D0:7F
Authority key identifier: 5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
Certificate issuer: /CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Certificate serial: 019E29CC07209B5A157732FA8A32AB5DD139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
Manifest number: 040B
Signing time: Fri 15 May 2026 04:01:37 +0000
Manifest this update: Fri 15 May 2026 04:01:37 +0000
Manifest next update: Sat 16 May 2026 04:01:37 +0000
Files and hashes: 1: 9t-kj9KSgE_mtJrGu_vF73d0l6Y.roa (hash: 51rv5VaG8OxclhZBSDZarO+xxvZazg5aJ0EVnW1xLb4=)
2: Cp2g6yP8AZxNfoA9Wugu4JCgHtU.roa (hash: dD5+5+i7pHxfaDCaP1GC9Pk/dDoxKx8XSPEPjuWP/AY=)
3: LFwn43xTYGqoLZrK3ArerlmBrjQ.asa (hash: AxTumCJIWLYkfNBVRk61fjyr7ogt1SGEuY0CQ+zm9dQ=)
4: Nc1LVsFzrH3eQcfHMAmDYgj_p64.asa (hash: /m2FPHvyf0O1/JM/QcuY6SFVqTD2GvTjahW6Zjqr3lE=)
5: XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl (hash: iT4Lwcu9kxVDSPPqSFo1IZhq8vKYhXUITFhoRyVgXrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cc:07:20:9b:5a:15:77:32:fa:8a:32:ab:5d:d1:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f0211c91e9e0d35cb513345913e0a1a61bfd249
Validity
Not Before: May 15 04:01:37 2026 GMT
Not After : May 16 04:01:37 2026 GMT
Subject: CN=1ac67e877b9ec46be8ed8ce5f4310019c631d07f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5d:85:f4:39:04:f6:2a:f4:7b:b7:06:9b:7a:
8d:98:84:cd:54:48:0f:23:4b:1e:80:1b:47:9f:2d:
55:a0:1a:8c:c5:7a:ad:b4:aa:17:ad:57:9a:22:3f:
bf:8f:f8:2c:23:4d:01:a5:3c:bf:fe:01:52:5f:b0:
4c:5d:8d:28:e6:33:b2:82:a8:d7:19:f5:61:0a:fd:
57:e4:79:ed:4a:40:c3:42:53:51:f6:67:fb:b6:d1:
a0:8c:9e:0b:69:2a:58:95:56:8f:dc:ba:a9:3f:8b:
09:0a:e0:17:e3:0f:0e:81:8a:21:66:c1:7b:5d:82:
57:fa:21:c7:3d:2a:85:cc:64:d8:82:34:ce:1f:6e:
87:25:5e:a6:79:63:f8:77:e1:eb:63:39:ec:e4:0b:
76:66:af:d0:79:b5:18:5d:7b:e1:c0:ef:2d:1b:34:
57:94:a6:4f:da:2e:55:19:1f:d7:fa:f3:89:ab:f9:
08:4b:c3:19:30:0b:ae:ae:18:16:4b:e2:2e:1f:21:
76:d5:6b:48:9e:f5:65:05:55:21:3f:92:83:91:5d:
f5:1e:32:be:78:85:dd:ef:bb:b0:31:b7:79:3e:51:
fe:24:e6:a1:62:fd:39:19:69:b2:b6:99:be:4b:8e:
2a:21:4d:64:fe:8a:32:a8:fd:83:74:ec:7c:1f:4c:
c1:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:C6:7E:87:7B:9E:C4:6B:E8:ED:8C:E5:F4:31:00:19:C6:31:D0:7F
X509v3 Authority Key Identifier:
keyid:5F:02:11:C9:1E:9E:0D:35:CB:51:33:45:91:3E:0A:1A:61:BF:D2:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XwIRyR6eDTXLUTNFkT4KGmG_0kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/66d057-77e5-4241-80aa-21fd35cf4bb9/1/XwIRyR6eDTXLUTNFkT4KGmG_0kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:3e:46:29:04:86:84:5a:16:f6:e0:93:69:e9:6f:1e:d0:e0:
fb:cf:64:97:d1:59:f1:50:a0:e5:d3:89:e3:73:b4:2a:d2:47:
35:9d:42:28:e2:76:ba:f6:fb:e6:d8:43:be:2c:7d:dd:61:3f:
95:31:d9:22:2c:0e:17:30:27:00:e5:9f:6d:5d:b0:d4:97:f3:
3d:34:00:13:f0:e6:0c:5c:99:23:34:1d:66:c6:05:bb:e3:6e:
e1:b7:c9:28:b6:a9:93:cc:36:16:56:36:ce:06:2e:bc:88:26:
c9:0d:49:f9:01:23:fd:11:a2:85:66:45:60:3e:58:b3:93:92:
ad:2c:ad:c2:8d:b2:b1:7b:0c:c9:a7:e3:7f:e2:8f:c1:22:52:
60:17:82:b2:95:86:90:e5:fd:83:4a:21:09:86:2a:71:e2:fe:
6a:24:73:dc:b9:01:73:3b:81:fe:7e:5e:d1:54:c5:65:78:12:
cd:f5:47:da:13:01:38:3a:3d:72:e8:eb:ae:ea:c2:23:2d:8d:
5a:fd:72:52:85:42:ab:c6:3e:e2:bc:e2:dd:3a:99:0d:03:d8:
1e:83:ea:8d:97:d7:71:a0:69:f8:2b:1b:90:aa:6d:03:3f:d0:
2d:aa:eb:4c:9e:b1:d1:3e:90:e1:a5:24:22:6b:31:0a:2d:da:
2c:e3:7d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:43 2026 by rpki-client