Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
File: XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft (raw, json)
Hash identifier: 7/0+Zumm58L6dSVjOQKymmbPRrU9jVv7N+WCglfq8jY=
Subject key identifier: B4:30:E7:28:E3:90:D6:A0:9B:C3:CD:8C:5B:AA:41:53:79:B3:41:AB
Authority key identifier: 5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
Certificate issuer: /CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Certificate serial: 019E30E0AB8D4BD873F35090546AEBD6A1A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 13:01:30 +0000
Manifest this update: Sat 16 May 2026 13:01:30 +0000
Manifest next update: Sun 17 May 2026 13:01:30 +0000
Files and hashes: 1: O0e9J99nDHDBcPP1W09ssXrN96E.roa (hash: aQvYlglowNCiS102CJiAb4sYyaW4lZND2gALby9zlgw=)
2: XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl (hash: QZS9/ON5b3tJrg+vBjaW5kyEjb2lcYXTapY/d2rCD3I=)
3: x58D33wXY03IBALkfNVEewlOjxI.roa (hash: l4BRaOtR+rQZWBsP3tk/LVs3kvHtYkV6QExE7KMTpnc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:ab:8d:4b:d8:73:f3:50:90:54:6a:eb:d6:a1:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd39e1de18514bac2f5a23910f8c7d4672a0fd8
Validity
Not Before: May 16 13:01:30 2026 GMT
Not After : May 17 13:01:30 2026 GMT
Subject: CN=b430e728e390d6a09bc3cd8c5baa415379b341ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cc:f3:d3:15:18:ee:8a:29:d0:7e:ff:9b:77:
49:b6:48:79:8e:c6:bd:29:ce:58:97:88:79:eb:b8:
af:90:93:6a:03:a7:04:16:5c:92:c5:c2:b0:29:05:
de:cf:0d:2f:72:7b:9b:40:24:36:7d:1d:3b:a6:93:
76:68:33:cc:80:15:98:72:ea:ce:5a:12:cc:25:4e:
94:2e:ba:e3:73:eb:e1:a6:60:6f:33:ab:00:0e:02:
19:b1:41:4c:ed:e5:93:26:b9:be:b9:32:2f:2b:1a:
84:13:ba:56:bb:31:20:c3:65:27:9f:e5:14:08:8f:
cb:78:bc:23:54:2a:7a:62:60:32:d8:b6:ab:2e:ce:
c8:91:13:85:c7:be:b3:3c:32:84:6f:d7:6f:a1:70:
c7:c6:c3:f8:83:f0:c1:75:5d:5c:8e:ef:d8:57:91:
97:0e:38:c8:15:37:d9:bd:82:8b:8c:07:45:b9:f2:
7a:70:ed:8e:cb:b1:db:13:c4:f7:03:cb:32:4f:b6:
54:1a:64:1d:4a:4e:e4:c4:4d:2e:f0:f9:3a:31:99:
11:df:a6:6b:f9:30:e4:9f:88:47:7b:1a:c5:3a:2f:
44:d9:0c:5e:25:03:09:cb:13:bd:8d:ef:61:e9:25:
fa:36:ae:2c:bf:66:ab:9a:48:11:3f:a2:07:58:30:
9f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:30:E7:28:E3:90:D6:A0:9B:C3:CD:8C:5B:AA:41:53:79:B3:41:AB
X509v3 Authority Key Identifier:
keyid:5D:D3:9E:1D:E1:85:14:BA:C2:F5:A2:39:10:F8:C7:D4:67:2A:0F:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XdOeHeGFFLrC9aI5EPjH1GcqD9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/96865e-c177-4844-8dc3-9c26b07b718b/1/XdOeHeGFFLrC9aI5EPjH1GcqD9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:68:34:89:f9:66:ed:86:47:c0:34:50:9e:91:67:3d:f9:4d:
78:0b:f3:a3:31:77:fd:b2:79:11:08:ec:52:fa:5a:1a:4a:dd:
92:f3:f1:4b:8f:42:e6:28:e7:e8:bb:c2:af:0d:1b:dc:60:02:
98:d3:a6:97:7a:9f:ad:5f:e0:ac:d2:09:f7:ee:de:cf:a1:20:
a9:fe:92:f8:81:6d:6c:86:01:23:cb:cc:81:b6:80:64:a7:aa:
15:e7:db:0e:e0:42:8b:2c:c4:32:60:19:d9:9f:e1:41:4f:1e:
b0:55:e4:e1:15:fa:19:e8:97:c2:83:11:e3:30:ad:8f:1a:db:
3f:eb:e6:87:84:eb:5b:6d:5b:79:04:13:0a:b3:52:a3:00:4b:
dd:bb:9b:d8:fa:5c:71:21:21:87:d0:d6:99:0f:cd:4c:68:4e:
e6:2c:86:8a:62:51:39:d5:91:b9:34:d5:b3:d9:20:19:40:39:
24:37:30:1b:de:38:5d:d2:10:dd:e6:dd:17:1b:87:bb:06:e7:
9b:ac:ca:ad:ef:53:37:0c:bc:65:c2:fc:b4:17:d6:88:c0:a9:
96:71:a8:eb:23:15:77:d6:a3:c4:b8:20:58:7b:32:6f:00:a5:
b6:2d:7a:0e:77:89:7d:21:4c:2e:bd:ce:f2:17:b6:bf:84:b8:
03:85:a8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:43 2026 by rpki-client