Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
File: xb-nGlET_tgkZHdsFDcVFMkhjvU.mft (raw, json)
Hash identifier: 9R6fs8uAIBCsxY1zLE9Kl2rM7QzC9VvHWqMfJrovF2I=
Subject key identifier: C5:40:38:69:8E:43:F6:2F:2D:5F:72:1D:7E:88:54:BA:85:A0:CC:FD
Authority key identifier: C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
Certificate issuer: /CN=c5bfa71a5113fed82464776c14371514c9218ef5
Certificate serial: 019FFC4897F3B431549A731B1842815FBB5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
Manifest number: 0E36
Signing time: Thu 13 Aug 2026 18:00:43 +0000
Manifest this update: Thu 13 Aug 2026 18:00:43 +0000
Manifest next update: Fri 14 Aug 2026 18:00:43 +0000
Files and hashes: 1: jBvSHulkiAFNZq-1Sz_1NBwC4gw.roa (hash: kIr3tsaXSv0n1HwqnJcooiylPmXgSiBfGD9CqML14GU=)
2: xb-nGlET_tgkZHdsFDcVFMkhjvU.crl (hash: +K6mNfhbEHJ/ArXlqQMMdBxLUIzEmigeJ38uoGZeEt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 15:03:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fc:48:97:f3:b4:31:54:9a:73:1b:18:42:81:5f:bb:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5bfa71a5113fed82464776c14371514c9218ef5
Validity
Not Before: Aug 13 18:00:43 2026 GMT
Not After : Aug 14 18:00:43 2026 GMT
Subject: CN=c54038698e43f62f2d5f721d7e8854ba85a0ccfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:38:10:e3:49:f5:19:08:b2:dd:4c:1e:83:59:
88:86:27:32:b7:89:cb:93:a4:fb:8a:f7:1d:b3:c4:
e7:81:98:fe:58:4c:b2:23:e9:6b:bf:7d:b6:9b:02:
2e:5c:4f:45:d5:c0:14:92:d1:47:6b:47:f9:ab:0e:
4e:34:ac:6d:2f:74:99:9b:92:bd:1c:14:01:0e:10:
25:ae:ab:84:b5:67:a6:a3:4f:ed:0a:d1:54:15:48:
78:8c:54:35:31:19:44:b6:e2:a4:5e:71:2c:04:88:
a9:66:6f:3c:ed:4f:e8:2b:09:8a:13:65:95:14:c1:
5e:4c:39:0d:f9:c7:a4:be:db:02:51:7b:6d:e4:66:
9c:2f:d8:49:ef:53:01:48:f8:0b:66:ef:ce:58:48:
6f:20:33:ac:17:58:87:80:84:b0:b5:da:4e:e7:59:
38:5c:33:be:ff:d3:b1:a4:d9:a5:6b:c3:d9:37:40:
f2:d2:4c:d8:8c:ba:6d:4d:38:b1:e3:3a:9b:c2:8b:
be:1e:13:be:97:87:49:c2:7e:4e:5f:55:62:4c:85:
a2:2a:59:83:b1:d3:e4:a3:d9:75:fc:b1:8a:15:f8:
3e:81:f7:01:a3:e7:61:44:8a:f9:33:ad:2a:ce:69:
9d:81:b5:35:36:f0:5f:aa:be:59:2d:77:d1:b3:d4:
3d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:40:38:69:8E:43:F6:2F:2D:5F:72:1D:7E:88:54:BA:85:A0:CC:FD
X509v3 Authority Key Identifier:
keyid:C5:BF:A7:1A:51:13:FE:D8:24:64:77:6C:14:37:15:14:C9:21:8E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xb-nGlET_tgkZHdsFDcVFMkhjvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/67c8fb-0257-4d60-a0df-6fce03325b3f/1/xb-nGlET_tgkZHdsFDcVFMkhjvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:2b:67:02:10:fc:9a:15:ad:16:a7:20:ea:d7:ea:7c:ea:bc:
da:cd:a2:13:76:74:69:24:86:4a:77:20:b9:b2:35:f2:c9:9a:
29:de:f7:7b:f5:56:81:42:e7:b3:1a:d3:5b:51:a9:fb:74:ae:
57:ca:08:9e:08:c3:b6:1c:71:09:91:16:46:21:42:6a:d1:f2:
f0:53:e1:8f:05:ec:5d:36:f8:29:45:39:af:96:5d:ec:7c:cb:
90:11:66:96:3e:7d:6d:46:d8:64:a9:19:a3:d2:59:2b:54:10:
26:26:82:29:aa:ab:78:6a:8b:cb:38:14:82:60:c7:9a:fa:5d:
0c:1a:72:9e:7c:0e:18:80:e3:77:84:2a:f1:a5:13:b4:86:27:
50:b6:90:7d:f2:7e:6d:2c:6d:b9:be:5d:10:d2:59:c7:b9:33:
29:49:bb:38:aa:f8:30:f0:92:4b:a7:42:18:71:d0:2c:52:23:
d9:53:23:48:69:44:df:a4:ef:be:0d:c7:25:22:68:53:26:36:
85:6b:9a:a2:40:ec:eb:65:6b:30:06:58:5f:c9:37:56:1a:9d:
78:f5:a2:ba:fa:7f:cc:76:82:b7:a2:4e:d2:06:05:3a:87:4d:
a4:c4:1f:2e:21:78:e8:ac:89:67:b0:c5:0d:39:16:d1:df:fd:
b6:67:22:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 21:00:55 2026 by rpki-client