Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
File: xtEbZP_hjvpC9DpsdlY53uONAn4.mft (raw, json)
Hash identifier: dAcpO4sJoBH5w9BkTGPlTSUJO9HwHoEvfVN1SJds0Dw=
Subject key identifier: D2:AB:FA:3E:3E:63:59:DC:94:34:1F:FF:E6:B1:C3:74:88:1F:C5:40
Authority key identifier: C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
Certificate issuer: /CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Certificate serial: 019E2AA6F4831DC7FA8B6F3F79FF8C77DCBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
Manifest number: 1194
Signing time: Fri 15 May 2026 08:00:44 +0000
Manifest this update: Fri 15 May 2026 08:00:44 +0000
Manifest next update: Sat 16 May 2026 08:00:44 +0000
Files and hashes: 1: 1HMsGfdsMj6bVCe_HqSPHKmPGQA.roa (hash: Aa+3horScinkb91IcV06nuOTEkzdcEAPUq8TBlQGMDg=)
2: Q6q5ifTmogwJicn2e4z2f5_1UN8.roa (hash: ZCT+LPivkmFqXHHIYRE3kEHzKOk9mVM2bvW0OtpppFg=)
3: xtEbZP_hjvpC9DpsdlY53uONAn4.crl (hash: oAI69c7EPhGjybImFlgR1ph0c9IX66PBli+fP921Hjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 08:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a6:f4:83:1d:c7:fa:8b:6f:3f:79:ff:8c:77:dc:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6d11b64ffe18efa42f43a6c765639dee38d027e
Validity
Not Before: May 15 08:00:44 2026 GMT
Not After : May 16 08:00:44 2026 GMT
Subject: CN=d2abfa3e3e6359dc94341fffe6b1c374881fc540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:bb:fc:03:25:31:d7:06:92:da:40:14:16:10:
5b:8d:7f:d1:8d:b8:8f:e6:03:73:47:fc:49:91:1b:
a4:a0:41:bb:6d:8f:92:ce:b7:4b:47:a8:d6:97:e0:
e1:1b:ef:d0:3c:33:3c:2a:31:34:7c:70:35:ae:7a:
39:e4:e1:42:be:b1:1d:f3:9c:fb:35:56:72:c3:d7:
48:9d:e7:f1:4f:3b:a1:24:ee:36:a8:ca:5a:bc:bc:
9b:f5:21:5f:ea:30:2f:de:6d:92:a3:41:8f:c2:5c:
8d:fd:02:48:4e:66:2c:55:28:d3:a6:67:7b:88:9f:
e4:15:2a:cc:37:c7:6a:79:8c:da:29:85:d1:ba:87:
3d:c0:75:be:03:23:7e:ea:e4:5f:db:55:e3:5d:c4:
fe:5a:57:90:00:99:c6:46:2c:f4:df:c4:31:83:16:
b8:77:84:d5:2d:d7:cd:cb:dc:50:c1:59:f9:16:9e:
3d:19:1b:87:c4:f8:e0:a9:08:91:7a:aa:75:d3:3b:
69:7e:3c:b9:76:78:6d:46:29:84:17:a6:24:b0:1c:
70:b8:29:64:8a:d8:79:61:31:17:3f:25:af:95:b0:
72:6c:5c:51:4e:0d:e8:62:a8:57:29:ef:b3:8e:80:
e9:81:27:33:87:49:0f:19:e8:25:fb:f5:d8:eb:d1:
73:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:AB:FA:3E:3E:63:59:DC:94:34:1F:FF:E6:B1:C3:74:88:1F:C5:40
X509v3 Authority Key Identifier:
keyid:C6:D1:1B:64:FF:E1:8E:FA:42:F4:3A:6C:76:56:39:DE:E3:8D:02:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xtEbZP_hjvpC9DpsdlY53uONAn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/4cac6b-8e05-448a-83f7-6835852158d8/1/xtEbZP_hjvpC9DpsdlY53uONAn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:48:c8:18:c5:34:9e:45:a0:56:20:54:13:f7:c0:09:0a:03:
68:62:76:a3:9c:59:21:8a:a6:3f:f8:0f:5b:73:22:79:a2:4d:
9a:2a:fb:44:a0:8c:24:3e:23:e1:4b:43:3c:94:af:a0:c5:b5:
1c:c0:9d:b1:60:9b:d4:87:e3:99:0e:e3:ce:a3:07:7e:c7:f8:
25:fc:df:a6:26:83:24:05:de:51:21:e9:22:bc:a4:65:a8:0a:
02:01:d6:ae:d5:a8:f2:3b:42:e5:dc:76:ff:21:a0:09:99:ea:
09:70:9e:b6:c6:46:e2:21:90:8a:22:0a:05:8b:55:6c:db:fc:
a0:bd:22:b2:71:7a:d2:e7:b0:c9:83:9d:c4:47:10:c7:91:aa:
26:57:94:c1:23:37:18:2c:98:e6:ea:7f:5e:78:ae:c3:74:31:
44:d8:35:e3:22:10:78:06:dd:e1:db:7b:74:2d:30:5d:6d:26:
7c:4c:d8:e6:fd:01:14:fd:d0:35:88:1f:65:62:bd:dc:57:0e:
a7:01:8d:31:2a:99:ed:dc:30:cb:3f:9b:ba:2b:46:eb:ca:c1:
13:04:07:bb:f2:ee:bd:5b:92:80:a9:c6:1d:d2:d8:3e:39:a5:
29:a5:7e:45:9e:79:23:5d:a4:72:da:44:d5:83:ff:8a:3c:dc:
66:ae:e1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 16:00:12 2026 by rpki-client