Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
File: xaH7W7wvqFcePV-MrkGWqNfpbDU.mft (raw, json)
Hash identifier: tVpMRivmrU69yf+HGIaa2QuMVcnmaJfz+iIoDyRae9E=
Subject key identifier: C6:0A:B4:22:21:6C:0B:FC:83:DF:A2:1B:D3:40:0D:5C:34:18:5B:EF
Authority key identifier: C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
Certificate issuer: /CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Certificate serial: 019E30A98820AC11D73789CED9210512C922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
Manifest number: 1911
Signing time: Sat 16 May 2026 12:01:17 +0000
Manifest this update: Sat 16 May 2026 12:01:17 +0000
Manifest next update: Sun 17 May 2026 12:01:17 +0000
Files and hashes: 1: jbS8RSSk1qPuBMHXiz0NFlG5gaU.roa (hash: ffpPuQq0nfWr1B/H6xQP1tfUAtvyoDxPWUAq5WEIXy0=)
2: xaH7W7wvqFcePV-MrkGWqNfpbDU.crl (hash: xE0WS9m3AGd5XecZSqdMkd+uSGXMMEzN6z90p4XXxwY=)
3: xo3E7B75wnW1W3d1HJPhSZevYZA.roa (hash: PthsrXu6VgY7H1QeefirkpT9auw29AQ4kvdF+HY+Frc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:88:20:ac:11:d7:37:89:ce:d9:21:05:12:c9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5a1fb5bbc2fa8571e3d5f8cae4196a8d7e96c35
Validity
Not Before: May 16 12:01:17 2026 GMT
Not After : May 17 12:01:17 2026 GMT
Subject: CN=c60ab422216c0bfc83dfa21bd3400d5c34185bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fb:ac:1e:7d:03:c4:54:39:be:ab:d2:98:c4:
12:96:aa:4e:d5:d1:7b:33:37:65:43:fe:99:1b:da:
d3:61:55:c2:d5:3a:79:25:ce:bc:30:3e:67:76:87:
8f:01:b5:fd:d9:34:48:e4:fa:e4:4d:5e:16:84:0e:
ca:a5:1c:bc:66:27:6f:4c:cc:6c:29:03:8b:a5:1a:
54:67:a6:f8:b0:b3:8a:6a:80:b8:25:e3:d8:55:5d:
1e:5b:18:ae:c4:a0:67:85:6e:e3:a3:8f:b5:5e:7f:
83:ee:a1:2b:c2:9d:fe:4c:52:f1:9a:50:9f:18:ff:
2e:8e:12:40:c9:84:63:5d:b9:cb:82:f2:c9:fa:15:
3e:9e:70:1b:61:24:03:52:af:02:ef:38:32:0a:43:
34:4c:c5:ff:bb:35:d5:ae:ff:e2:55:c2:26:3a:14:
c4:6d:a4:43:24:bc:19:3c:11:ef:3b:2c:4d:3e:a3:
17:db:7c:b0:b8:40:72:b4:44:2e:9f:44:e1:46:93:
bf:1a:95:a3:50:77:c9:32:d6:09:b3:f3:6f:41:ac:
80:a0:c3:c6:e6:8d:7e:f4:02:52:41:ff:84:f0:e3:
c0:af:32:6e:a4:dd:59:49:2d:fc:16:64:fc:73:61:
79:0f:c4:b2:04:0b:1e:4e:bd:f0:5b:7c:c0:1d:d0:
84:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0A:B4:22:21:6C:0B:FC:83:DF:A2:1B:D3:40:0D:5C:34:18:5B:EF
X509v3 Authority Key Identifier:
keyid:C5:A1:FB:5B:BC:2F:A8:57:1E:3D:5F:8C:AE:41:96:A8:D7:E9:6C:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xaH7W7wvqFcePV-MrkGWqNfpbDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/deb70d-1ffd-4da0-a097-d8a0b41f46e8/1/xaH7W7wvqFcePV-MrkGWqNfpbDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:77:db:48:19:f6:13:40:84:c9:9c:07:e8:d4:f6:05:fb:56:
2a:b3:9f:92:dc:db:ed:ee:f7:28:7e:ed:f2:1c:9c:b0:88:12:
ea:a6:62:b9:b8:17:f5:ca:17:47:40:bb:06:61:2e:62:7f:5e:
b0:7f:9f:7f:5f:5c:38:10:da:46:65:83:3b:6c:ed:75:0d:52:
5d:03:84:8b:9b:24:39:6d:68:e8:f7:95:b3:1e:8c:7c:00:11:
90:69:43:db:89:9f:f4:fb:89:6f:80:d0:2f:1e:90:18:bf:ee:
4a:73:e7:1c:88:a9:13:76:1b:c9:af:4b:77:7e:66:41:bd:75:
39:12:6c:ce:62:1b:6d:79:55:81:6a:b8:a0:f7:3e:c8:f5:1f:
c0:74:90:6b:58:a9:ea:98:62:f0:85:23:f4:d5:22:e0:b4:7f:
75:95:9d:ef:18:65:36:71:bc:2b:2c:60:bc:a0:8d:10:a7:55:
64:fc:4f:9d:0c:96:4d:dd:be:b0:3c:66:58:3b:85:5d:bd:0d:
42:7d:6b:2f:36:07:8c:23:b2:26:c7:0f:c2:79:89:ca:f5:bb:
09:c9:53:67:ea:69:14:9e:8d:e9:8b:83:47:3e:31:4e:a7:94:
ab:82:20:0d:e3:8c:55:fd:c5:57:53:29:0f:b3:cd:c5:dd:63:
c9:58:03:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4wqYggrBHXN4nO2SEFEskiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YTFmYjViYmMyZmE4NTcxZTNkNWY4Y2FlNDE5NmE4ZDdl
OTZjMzUwHhcNMjYwNTE2MTIwMTE3WhcNMjYwNTE3MTIwMTE3WjAzMTEwLwYDVQQD
EyhjNjBhYjQyMjIxNmMwYmZjODNkZmEyMWJkMzQwMGQ1YzM0MTg1YmVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/usHn0DxFQ5vqvSmMQSlqpO1dF7
MzdlQ/6ZG9rTYVXC1Tp5Jc68MD5ndoePAbX92TRI5PrkTV4WhA7KpRy8ZidvTMxs
KQOLpRpUZ6b4sLOKaoC4JePYVV0eWxiuxKBnhW7jo4+1Xn+D7qErwp3+TFLxmlCf
GP8ujhJAyYRjXbnLgvLJ+hU+nnAbYSQDUq8C7zgyCkM0TMX/uzXVrv/iVcImOhTE
baRDJLwZPBHvOyxNPqMX23ywuEBytEQun0ThRpO/GpWjUHfJMtYJs/NvQayAoMPG
5o1+9AJSQf+E8OPArzJupN1ZSS38FmT8c2F5D8SyBAseTr3wW3zAHdCEUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYKtCIhbAv8g9+iG9NADVw0GFvvMB8GA1UdIwQY
MBaAFMWh+1u8L6hXHj1fjK5BlqjX6Ww1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTct
ZDhhMGI0MWY0NmU4LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC9kZWI3MGQtMWZmZC00ZGEwLWEwOTctZDhhMGI0MWY0NmU4
LzEveGFIN1c3d3ZxRmNlUFYtTXJrR1dxTmZwYkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXfbSBn2
E0CEyZwH6NT2BftWKrOfktzb7e73KH7t8hycsIgS6qZiubgX9coXR0C7BmEuYn9e
sH+ff19cOBDaRmWDO2ztdQ1SXQOEi5skOW1o6PeVsx6MfAARkGlD24mf9PuJb4DQ
Lx6QGL/uSnPnHIipE3Ybya9Ld35mQb11ORJszmIbbXlVgWq4oPc+yPUfwHSQa1ip
6phi8IUj9NUi4LR/dZWd7xhlNnG8KyxgvKCNEKdVZPxPnQyWTd2+sDxmWDuFXb0N
Qn1rLzYHjCOyJscPwnmJyvW7CclTZ+ppFJ6N6YuDRz4xTqeUq4IgDeOMVf3FV1Mp
D7PNxd1jyVgDLA==
-----END CERTIFICATE-----
Generated at Sat May 16 20:19:16 2026 by rpki-client