Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
File: XfSth7gyLMlJFI4NdmIc6oNYpoU.mft (raw, json)
Hash identifier: FdHoF2r3Oc4sVUiDiorMiHm1IrLtQIP/ZvQ91Gfuj4s=
Subject key identifier: 82:02:1E:1A:77:13:81:C2:DE:86:A2:70:BE:60:60:FA:98:91:F5:05
Authority key identifier: 5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
Certificate issuer: /CN=5df4ad87b8322cc949148e0d76621cea8358a685
Certificate serial: 019E3305A2981B11DF357C3E8AE3E4CEB1EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
Manifest number: 0100
Signing time: Sat 16 May 2026 23:01:07 +0000
Manifest this update: Sat 16 May 2026 23:01:07 +0000
Manifest next update: Sun 17 May 2026 23:01:07 +0000
Files and hashes: 1: XfSth7gyLMlJFI4NdmIc6oNYpoU.crl (hash: LzUlcMscj8pXv75UPS/Z28W33qIQUhapalo78jQTXlM=)
2: hlSTINC_KpLJH_012cszF50XrrM.roa (hash: R9LXujjJX9A3v2Y9QXZNY393BmFuvvM/3QjbC/Pbq0E=)
3: wi4pwq_pbwyf-RifkawT_5o4jbY.roa (hash: QtIyVI0mDcZKu2N+GCjxkT9Lyx1XzVHsblRr7n1YzG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:05:a2:98:1b:11:df:35:7c:3e:8a:e3:e4:ce:b1:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5df4ad87b8322cc949148e0d76621cea8358a685
Validity
Not Before: May 16 23:01:07 2026 GMT
Not After : May 17 23:01:07 2026 GMT
Subject: CN=82021e1a771381c2de86a270be6060fa9891f505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0a:d0:5b:ff:37:aa:c0:e1:34:08:c4:17:6f:
e1:e6:e7:5f:f9:3d:07:3f:16:2d:6f:44:af:50:fc:
12:95:69:ce:6e:17:fc:a7:ca:43:aa:da:d7:e2:c3:
6c:0d:23:aa:a6:62:57:ac:69:0b:88:f1:7e:e7:19:
cd:0a:74:77:ce:8e:6b:29:9f:ac:8b:9b:32:40:7d:
45:43:ae:3e:98:40:63:c1:91:2e:f3:62:96:72:a2:
06:a2:5e:ee:39:e8:4e:2e:99:ae:6f:c2:86:ce:49:
4a:7f:68:26:2d:7a:b5:de:71:e5:21:a3:93:07:67:
07:a9:fe:64:e6:63:bd:49:99:1d:3d:a7:88:dc:ab:
6b:f1:cd:4a:ec:f5:0f:2b:45:87:4a:24:1c:b3:35:
91:40:4a:f6:03:35:53:67:7a:c6:b1:c5:e2:cd:a4:
96:1b:de:05:77:48:1e:d3:8f:8c:c7:24:2c:04:17:
b4:72:6c:d1:15:ae:7a:ee:c4:c6:9f:6b:a2:65:c3:
2f:43:4e:6d:70:9c:e5:5a:be:fe:9f:33:42:de:14:
b3:17:0f:fc:9c:e9:6f:42:c6:d2:1d:38:1a:7c:c1:
3d:01:24:6b:f9:e7:51:9b:ad:a3:06:1d:31:f9:e3:
aa:66:b8:19:34:0c:a5:42:33:7e:5b:37:4a:3b:5e:
b2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:02:1E:1A:77:13:81:C2:DE:86:A2:70:BE:60:60:FA:98:91:F5:05
X509v3 Authority Key Identifier:
keyid:5D:F4:AD:87:B8:32:2C:C9:49:14:8E:0D:76:62:1C:EA:83:58:A6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XfSth7gyLMlJFI4NdmIc6oNYpoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ba8a3-6449-45b2-8429-1252bf801f23/1/XfSth7gyLMlJFI4NdmIc6oNYpoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ea:f7:a3:f4:8f:9a:d2:db:da:b8:83:25:c7:d2:08:6b:3d:
f7:bd:d3:53:4a:76:ee:35:94:52:30:f7:d1:30:5f:1d:a1:95:
c2:b6:45:8b:2b:39:e9:b1:31:a7:fd:1e:73:0e:86:4f:84:0d:
04:88:75:fb:00:b5:a4:f5:85:b9:c0:3d:91:54:ed:8f:60:58:
77:e0:40:45:5b:eb:b7:65:d3:e8:a2:59:36:05:80:a2:5a:cb:
e7:08:fa:de:a2:e1:ef:2a:06:15:7d:5e:65:7b:90:c9:15:04:
b7:85:61:51:44:a5:35:48:b9:1a:3a:55:09:9f:f5:98:d3:55:
69:28:4e:a5:99:47:87:5b:5e:56:e1:dd:a9:5f:31:a4:77:ff:
4b:39:4d:1f:4e:3c:01:db:34:89:ce:1d:e8:6c:c8:74:67:01:
a2:49:f7:35:50:d9:49:8c:7f:02:56:68:1c:30:4c:25:3b:a9:
80:2b:23:fe:48:c7:cb:b7:9b:86:eb:07:0c:0c:62:d2:41:85:
ff:2d:b7:2e:bc:5d:b3:32:e2:53:3e:ed:2b:dc:e6:1c:0e:39:
4e:78:34:3c:cf:b1:33:d4:4c:9d:a7:fd:30:36:ba:32:21:c7:
60:a7:42:48:da:93:ab:e5:36:1e:f5:e3:18:10:b3:98:39:f4:
de:be:08:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 05:14:32 2026 by rpki-client