Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
File: xvw4sqEAOV-puZGa15LnrLLbLgc.mft (raw, json)
Hash identifier: m9jmK5rCI/TAhe99OSiBKVDxwr7MJMnsqVlLXG4O5Vk=
Subject key identifier: 0A:1F:93:27:EA:20:1B:28:25:58:EC:84:67:22:C5:0C:3C:E8:19:7B
Authority key identifier: C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
Certificate issuer: /CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Certificate serial: 019E28821DA4C071657512B245CC0A729A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
Manifest number: 08D9
Signing time: Thu 14 May 2026 22:01:16 +0000
Manifest this update: Thu 14 May 2026 22:01:16 +0000
Manifest next update: Fri 15 May 2026 22:01:16 +0000
Files and hashes: 1: 4kLVVeCRQJrEoKU2Z3FAZr5ZTZg.roa (hash: N+n4RQm/UCrzmjM9BuILs0DGf1giItqSLrBBjPu0qrU=)
2: MAAniPDXI9HsVNZwiBPzQo7C0FE.asa (hash: +t1AssvVOScBcP/9D61rppScOKqy8/J9uspPTrgro+o=)
3: xvw4sqEAOV-puZGa15LnrLLbLgc.crl (hash: LPhgD3viROql/1+bHsVr/Og2GvX9a8F0+NzKzzuMYp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:82:1d:a4:c0:71:65:75:12:b2:45:cc:0a:72:9a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6fc38b2a100395fa9b9919ad792e7acb2db2e07
Validity
Not Before: May 14 22:01:16 2026 GMT
Not After : May 15 22:01:16 2026 GMT
Subject: CN=0a1f9327ea201b282558ec846722c50c3ce8197b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:98:ee:b4:d1:fc:b1:0c:d6:7b:bf:eb:23:69:
7e:8d:1e:d4:63:2c:66:7b:24:d9:d3:bb:1b:15:c9:
cf:0f:3f:79:a9:2c:a2:f6:38:a3:44:d1:6f:14:60:
69:5e:24:70:ef:b6:7b:0f:d3:8d:15:c0:d4:cd:96:
ad:dc:a2:45:e6:3a:f5:43:d1:68:d4:20:57:cf:ca:
09:99:2b:8d:d7:09:4a:1e:24:c4:47:35:ed:7e:94:
3d:f4:d5:03:89:c2:79:3f:84:6b:6a:7d:e5:97:11:
f2:e3:1e:a7:07:ba:5b:83:ac:f9:9f:0f:ea:f2:f9:
e1:07:3c:ea:3a:89:7d:76:27:38:4a:17:c8:02:d4:
81:e5:cb:5b:25:7b:cf:52:a5:61:2c:d7:3e:d9:29:
5b:eb:58:23:2b:62:f9:45:e8:1d:16:d4:f0:f3:d8:
d6:d3:f3:11:14:9b:ca:d8:c1:9f:04:fd:68:66:d9:
bc:38:8d:fa:95:cb:b1:f4:8c:94:69:f4:c8:c2:f7:
70:3d:bb:5a:c4:32:1a:07:61:57:f6:f6:d7:57:52:
da:2a:91:25:7d:10:13:7c:01:a2:de:bc:d9:9f:5d:
a5:a2:28:28:45:9f:3d:8a:8b:47:4a:56:2e:84:2e:
d5:2a:fe:f5:33:f2:3b:f8:5f:7f:c0:e5:d3:39:73:
0e:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1F:93:27:EA:20:1B:28:25:58:EC:84:67:22:C5:0C:3C:E8:19:7B
X509v3 Authority Key Identifier:
keyid:C6:FC:38:B2:A1:00:39:5F:A9:B9:91:9A:D7:92:E7:AC:B2:DB:2E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xvw4sqEAOV-puZGa15LnrLLbLgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/99800d-151f-4e30-9fd8-a89a7028d429/1/xvw4sqEAOV-puZGa15LnrLLbLgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:48:c9:ac:6a:34:9e:67:73:35:f3:1f:3e:3d:e7:da:38:48:
f1:8d:88:bd:6e:8e:3f:e5:b3:b6:3f:4c:31:b3:99:0f:e3:a3:
5f:f5:34:07:8f:6a:78:23:3e:94:88:2c:cc:b1:34:4e:35:72:
72:12:18:57:8c:e2:77:59:65:9b:f4:c0:11:a8:99:45:fb:06:
1a:c0:17:71:f0:89:56:7a:66:3a:f7:02:b9:54:fe:60:a4:50:
75:d7:9a:1b:d2:29:ad:d6:47:54:f1:bc:b1:88:bf:ee:04:0e:
35:36:f7:ee:b0:c9:57:6e:14:4d:ec:00:7c:17:eb:fa:70:3d:
fd:78:c2:9a:1e:11:8d:8e:8c:dd:bd:27:09:a8:92:7d:c2:df:
58:73:e7:0b:aa:70:4b:94:28:a8:c5:f3:50:f8:c4:f9:6e:e5:
18:61:f8:7d:c6:60:6f:d4:57:ef:68:3c:c5:b7:27:24:b6:a0:
ce:15:34:6c:41:13:9a:e1:25:86:ce:ab:9d:c9:a5:63:94:84:
75:7a:2f:ea:45:64:1c:14:f2:3d:a5:c6:1a:ca:84:71:90:f0:
09:6b:1f:7d:7c:3f:6b:4f:38:05:7a:be:3d:74:01:c4:c1:5c:
d1:85:30:08:a7:c6:46:5d:b5:37:4c:4c:96:c4:a3:76:f1:a1:
c4:66:98:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:54 2026 by rpki-client