Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
File: Xjy32YLH-e28k9TLQrlPoCnDgt8.mft (raw, json)
Hash identifier: 4ll2/huUzsdQ2Aow5gmWYy9PXi/Q5AwjJNsaaHZt2nc=
Subject key identifier: DD:2A:0E:F9:92:04:1D:16:C6:E2:4E:04:51:F4:4D:C4:64:E3:11:C5
Authority key identifier: 5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
Certificate issuer: /CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Certificate serial: 019E32613E969936ED999368C76E983D9129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
Manifest number: 1071
Signing time: Sat 16 May 2026 20:01:34 +0000
Manifest this update: Sat 16 May 2026 20:01:34 +0000
Manifest next update: Sun 17 May 2026 20:01:34 +0000
Files and hashes: 1: Xjy32YLH-e28k9TLQrlPoCnDgt8.crl (hash: 8TaEg5zcc5lc0XZKJAcdLAADN/zMjcQnil8f/cZ0vhk=)
2: yeEabSTnkLeywBVAwxOdpvb42Eo.roa (hash: PvqV+kMqmAte8XfLn6bjSK6JChkDgm/iDFgeeMv/yOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 20:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:61:3e:96:99:36:ed:99:93:68:c7:6e:98:3d:91:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e3cb7d982c7f9edbc93d4cb42b94fa029c382df
Validity
Not Before: May 16 20:01:34 2026 GMT
Not After : May 17 20:01:34 2026 GMT
Subject: CN=dd2a0ef992041d16c6e24e0451f44dc464e311c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:78:33:bd:3e:4f:35:6d:82:e2:9c:0c:a0:6a:
c2:41:06:e4:97:f0:07:5a:e0:f7:5a:0a:54:91:b0:
f4:57:2c:c3:a0:49:27:f7:1b:49:d9:f7:23:8a:ed:
94:4b:ae:b0:45:ce:62:5e:bb:3d:8f:7f:57:00:b7:
81:c6:e0:61:79:42:23:a8:ec:1a:03:5c:85:7c:39:
6c:c0:43:e5:22:52:97:7e:f5:8c:d3:a8:a2:6a:06:
a0:8e:34:59:43:11:0f:cf:1f:74:43:fa:35:e6:6c:
0a:64:d7:20:54:bb:87:61:70:1c:f1:fa:30:b3:04:
85:eb:20:39:94:2c:19:05:62:f0:41:d6:50:79:02:
03:60:75:6a:f8:12:22:77:95:81:56:b8:1f:38:9c:
65:f4:16:d9:4c:34:4e:3f:f4:74:65:25:54:54:ee:
aa:6a:56:32:13:3b:b2:8c:f8:2e:30:40:33:98:50:
1e:f2:30:6a:5e:4a:ff:c9:0d:78:cb:0a:28:63:8c:
31:78:37:a7:40:05:4f:fb:34:eb:8d:93:f7:e6:45:
eb:74:62:e4:ba:44:35:48:f7:da:4c:7d:42:46:49:
10:26:da:a5:df:21:e2:79:95:f6:33:27:15:b1:0c:
94:86:d1:38:f7:36:e9:de:07:f5:97:c1:89:36:77:
df:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2A:0E:F9:92:04:1D:16:C6:E2:4E:04:51:F4:4D:C4:64:E3:11:C5
X509v3 Authority Key Identifier:
keyid:5E:3C:B7:D9:82:C7:F9:ED:BC:93:D4:CB:42:B9:4F:A0:29:C3:82:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xjy32YLH-e28k9TLQrlPoCnDgt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1f8bb8-6342-440f-b05f-9f2cc64e0745/1/Xjy32YLH-e28k9TLQrlPoCnDgt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:29:22:ed:8d:5e:5c:c8:69:11:f4:71:73:b0:94:a6:59:85:
0f:30:07:e2:b2:23:3c:f7:b5:be:9f:56:6b:f0:37:37:e7:cf:
79:50:5c:0b:33:d9:d3:1d:25:0e:77:07:1b:58:18:84:e2:dd:
be:7d:bb:b2:03:6c:7f:87:e5:17:68:12:42:63:ca:75:ae:ef:
20:01:19:5d:10:ba:75:a8:21:03:13:94:6e:2c:02:25:32:a2:
7f:6f:b2:23:ec:19:21:9a:6d:4d:69:ae:0a:cf:1c:93:06:cd:
ac:73:8c:d9:ec:35:2e:00:3f:ba:01:db:7d:3d:a2:2b:17:14:
9c:02:49:0e:43:02:6c:5b:5b:a6:2b:d8:26:93:e1:d1:b7:92:
d9:be:9e:da:cb:db:bf:0a:c9:e4:55:59:85:d6:7d:cf:ca:3d:
f9:58:bd:98:3d:0b:87:97:a3:e5:a9:30:cd:31:90:10:71:95:
6b:64:0e:e3:12:5f:b4:8b:d0:c9:bd:da:a8:6f:9b:31:ce:60:
da:24:ab:11:fe:15:d3:16:f4:22:d5:44:fc:a6:0e:81:43:88:
9d:c2:fd:d2:27:ea:b9:d0:53:be:27:1a:ed:9f:31:ba:db:f0:
b9:b8:67:15:b9:ba:4e:66:f6:0c:f2:b9:f1:da:83:7f:82:e7:
4d:c0:0e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 04:16:31 2026 by rpki-client