Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
File: XJK5qSx-uRPD2lWAAsZz6CONscc.mft (raw, json)
Hash identifier: I9zU8+0vyejsf2Coci65xLhr/JYpTuhSrX0nOG24tMg=
Subject key identifier: F1:B9:10:70:29:7C:F9:B5:10:88:BC:E1:D5:4B:3B:B7:3B:59:5E:C7
Authority key identifier: 5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
Certificate issuer: /CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Certificate serial: 019DEC3647D2B84BA18AC3776DE4866671D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
Manifest number: 100B
Signing time: Sun 03 May 2026 05:01:13 +0000
Manifest this update: Sun 03 May 2026 05:01:13 +0000
Manifest next update: Mon 04 May 2026 05:01:13 +0000
Files and hashes: 1: XJK5qSx-uRPD2lWAAsZz6CONscc.crl (hash: WtZx/jQ3KpVOUYUEJxm6klwe0RrMykV59t6J/rDPE5c=)
2: nbiO0Qsuka11ZNMxAFy9dEINXys.roa (hash: NaboMvIQcJu7trkWGRw22aXFbkdnEJpMvSjIpYA2/ik=)
3: qTb1hfW2cZsJLmGnL2cnlmiyFfY.roa (hash: hklYadmGWp1kEGK+jtsPBwTIyJolTP2I0OScsQI8ZQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:36:47:d2:b8:4b:a1:8a:c3:77:6d:e4:86:66:71:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c92b9a92c7eb913c3da558002c673e8238db1c7
Validity
Not Before: May 3 05:01:13 2026 GMT
Not After : May 4 05:01:13 2026 GMT
Subject: CN=f1b91070297cf9b51088bce1d54b3bb73b595ec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:15:5f:5f:9a:8d:bc:d3:aa:56:66:04:da:e5:
40:fa:90:9f:92:65:3f:29:8d:7d:99:7c:f1:fd:1e:
2a:f1:29:dd:8b:86:1e:0a:45:57:5a:15:02:7a:36:
fd:12:84:c2:29:2c:51:8b:95:d4:0e:e1:10:ae:7b:
e8:10:1d:ae:17:42:87:cd:8d:76:f9:f8:0b:6a:24:
17:f8:0b:fa:c7:01:70:be:28:55:73:fd:28:c3:87:
2c:be:5e:bd:56:7d:73:83:2a:a1:9c:a4:26:f9:f0:
9a:70:bb:66:8a:1e:1d:d5:dd:b2:a2:59:1f:45:02:
11:c9:15:30:58:51:6d:ba:4e:01:4a:e5:99:35:4c:
a7:8f:44:be:ae:c8:38:49:06:5b:5a:4c:8b:88:2c:
e3:c4:06:a6:b2:94:53:04:83:72:c0:55:6f:f7:ea:
2b:40:60:f8:91:e5:75:a8:1b:99:9f:f9:3e:ef:2e:
5c:ac:3d:c5:a3:67:8e:ec:5f:d0:47:b8:7b:7f:d3:
47:9f:92:7d:50:bb:c8:e5:a2:d1:75:17:24:a9:0b:
a4:6e:8b:ff:56:79:46:25:8b:05:94:02:2b:5f:35:
a7:e2:36:69:84:7a:56:59:b5:ce:af:0e:1e:cb:45:
a3:6d:97:b8:83:ff:9b:fa:3b:be:3c:74:df:55:c1:
73:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B9:10:70:29:7C:F9:B5:10:88:BC:E1:D5:4B:3B:B7:3B:59:5E:C7
X509v3 Authority Key Identifier:
keyid:5C:92:B9:A9:2C:7E:B9:13:C3:DA:55:80:02:C6:73:E8:23:8D:B1:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XJK5qSx-uRPD2lWAAsZz6CONscc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/969463-7f6a-4503-abc4-d6b56aba3eb7/1/XJK5qSx-uRPD2lWAAsZz6CONscc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:2c:fc:c5:7d:4f:f2:00:94:7b:87:8f:e0:a9:31:1e:73:9f:
46:04:87:b7:f8:26:0a:9b:95:f9:78:5d:80:a7:8d:8a:da:f0:
82:74:88:c8:bc:12:67:f5:80:20:8f:76:61:33:8b:7a:41:0f:
c2:1b:c0:38:85:64:ad:6e:93:a8:9a:67:0c:79:b0:98:51:ad:
a2:d2:84:8c:9c:71:59:ec:00:ed:36:7a:12:7b:59:9c:60:7c:
75:c5:6d:71:8d:a8:8e:f6:98:62:af:fa:58:8b:79:5d:b0:45:
ff:13:d8:e0:46:0d:86:9f:1f:4b:f6:64:de:9c:63:a7:e8:b0:
e2:29:c1:01:c9:8b:e3:5f:a1:9d:02:91:3f:26:2d:fb:ab:b7:
8f:25:56:aa:73:a7:c0:7c:54:14:a0:59:bc:bc:60:27:34:33:
2c:77:9a:68:f0:f4:99:66:a7:6c:84:1b:22:a1:5b:b6:35:44:
3a:bb:03:e1:66:85:02:57:31:7e:6c:f1:6a:97:79:9d:d5:13:
90:6e:20:f1:50:08:96:4e:c4:0d:e7:da:60:07:63:a3:b7:2c:
49:3f:ba:60:f0:0f:4c:c7:24:a2:12:5f:f2:19:87:0c:93:be:
a6:05:45:36:b4:68:af:83:b4:66:5f:46:0c:f1:03:86:e5:9c:
6f:34:ef:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 16:14:37 2026 by rpki-client