Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
File: XP44gfPER3T1HMde5-b5HFVlpgY.mft (raw, json)
Hash identifier: TOOmA5r7RrY8Dnxf1BgTiPaEYuTMHkwQYXXCoe/y6u8=
Subject key identifier: 08:E4:0F:44:69:F1:66:40:48:71:B0:0F:A9:6E:DA:5E:74:0F:74:4B
Authority key identifier: 5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
Certificate issuer: /CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Certificate serial: 019E4E7D9FA0C88F00AD67E84B438B421316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
Manifest number: 1923
Signing time: Fri 22 May 2026 07:01:56 +0000
Manifest this update: Fri 22 May 2026 07:01:56 +0000
Manifest next update: Sat 23 May 2026 07:01:56 +0000
Files and hashes: 1: MsnqFaljx-vLs6R1klCk-k4mqbE.roa (hash: 9w5Fj/ix8Y1oWU+nhqJcIUFjp29qAgz5fs3U3GbWExc=)
2: XP44gfPER3T1HMde5-b5HFVlpgY.crl (hash: LVwYe+aLhrssqMUn6VzuJ/8yV5i9oi1rMnHhZVeA0dY=)
3: Y-0LFW4QQXme0gq1FoIF-wZ-SQc.roa (hash: wu/R/xhocC/i/LlV9UK65CdEa6/Nxe99KI2JumwUKlc=)
4: a_XjHLHQF6uE4SSOtjsOa8f4-2Q.roa (hash: m3nX1Uyzi87lTewY/HPBoiE0m8iVkIMnK/iQX/3hwYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 07:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:7d:9f:a0:c8:8f:00:ad:67:e8:4b:43:8b:42:13:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cfe3881f3c44774f51cc75ee7e6f91c5565a606
Validity
Not Before: May 22 07:01:56 2026 GMT
Not After : May 23 07:01:56 2026 GMT
Subject: CN=08e40f4469f166404871b00fa96eda5e740f744b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:9e:b9:3d:d7:1e:af:27:08:a4:51:e4:07:
de:fe:6d:31:70:61:ff:75:af:ba:e7:9c:ee:af:02:
22:5a:db:18:7c:e6:2f:34:48:0a:93:bf:1b:c4:86:
66:6a:d5:38:f7:61:3c:67:88:77:81:8b:b9:c7:53:
55:60:b4:b0:56:31:72:b0:f2:fe:6b:99:c3:80:cf:
68:a2:ec:9a:0f:3d:8a:95:47:2f:f1:49:3a:1d:ce:
66:db:49:c7:36:9b:c6:48:dd:0f:4f:21:82:9c:8d:
63:91:ce:db:c1:a2:6f:f2:b0:2e:5c:9e:50:dc:23:
33:0a:db:38:f0:58:85:6d:38:db:95:cd:99:b0:88:
82:99:c7:58:2f:6c:67:d0:f0:fb:fb:c8:ab:a3:ff:
e3:86:2a:61:ba:7a:52:50:98:94:30:92:a4:86:50:
6e:d9:b3:9b:c2:e1:88:ee:54:40:f0:8e:46:ab:58:
66:f9:36:12:3b:36:18:49:69:3f:dc:fd:ef:b4:0a:
e7:ff:b8:8a:4f:a1:07:df:a7:d8:05:5f:1b:83:b5:
c8:8b:ab:a2:7c:d8:e7:cf:b2:2d:eb:5d:38:57:9b:
80:d4:87:be:2a:fc:03:53:d4:02:dc:08:fd:4e:50:
60:eb:74:d9:ae:ba:90:87:6c:9f:ea:cc:88:40:6c:
81:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E4:0F:44:69:F1:66:40:48:71:B0:0F:A9:6E:DA:5E:74:0F:74:4B
X509v3 Authority Key Identifier:
keyid:5C:FE:38:81:F3:C4:47:74:F5:1C:C7:5E:E7:E6:F9:1C:55:65:A6:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XP44gfPER3T1HMde5-b5HFVlpgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/5260d0-1855-4f30-b8ef-7c998079a6a9/1/XP44gfPER3T1HMde5-b5HFVlpgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:f7:06:d3:18:a0:75:82:d7:2a:f1:30:d5:2d:f2:34:7b:30:
ee:e1:71:3b:34:e1:e4:f1:02:dd:aa:bd:c2:b8:c8:ad:84:e9:
b5:a7:bd:b3:8a:f8:60:2b:87:15:14:4a:b6:8a:43:5e:82:1b:
4f:29:55:f0:51:2a:00:57:77:a4:70:d6:26:67:96:0e:3a:29:
64:96:8e:1e:de:7d:34:84:5d:09:62:d1:41:04:37:c9:c0:8b:
93:c3:87:e3:d5:4f:61:1a:ac:f6:21:12:d2:3a:80:aa:40:87:
61:ec:e8:e3:7e:01:cd:ab:80:87:32:b1:8e:32:b9:1f:7b:e3:
e3:4f:89:16:83:b3:b0:3d:3e:08:b5:a3:79:58:ba:f5:56:d7:
56:23:b4:af:58:83:55:7c:5c:65:b8:89:13:e6:5c:da:fa:21:
3b:bf:d6:a6:9d:0e:66:ac:00:6e:2b:65:35:a8:ef:62:4a:df:
06:0a:c2:6c:dd:4f:71:01:34:e5:87:26:3c:d4:0f:b5:46:ae:
fc:6a:dd:82:85:a8:21:65:52:50:39:5d:28:80:cf:0b:d7:4f:
46:dd:38:e0:f8:58:d4:83:45:0d:b9:b3:fa:1c:96:d6:fe:24:
8e:b9:4a:a5:c7:91:8f:21:70:31:c2:62:1c:5a:ef:c6:41:a9:
99:8e:83:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:09:50 2026 by rpki-client